Vercel AI SDK Privacy

This document is Vercel's Privacy Policy, governing how Vercel, Inc. collects, uses, discloses, and retains personal data in connection with its website, platform, and related services, with legal bases including contract performance, legitimate interests, and consent depending on jurisdiction. The policy states that Vercel collects account information, usage data, log data, cookies, payment information, and survey responses, and the terms authorize use of this data for service delivery, marketing, analytics, fraud prevention, and product improvement, including sharing with third-party service providers, business partners, and in the context of corporate transactions. The policy discloses that Vercel may share personal data with third-party advertising and analytics partners and that it uses cookies and tracking technologies for targeted advertising, which is operationally significant for users who may not expect a developer infrastructure platform to engage in behavioral advertising; the policy also distinguishes between Vercel acting as a data controller for its own platform data and as a data processor for customer-deployed application data, a distinction with material legal implications under GDPR and CCPA. The policy acknowledges GDPR applicability for EU/EEA residents and CCPA/CPRA applicability for California residents, granting specific rights including access, deletion, portability, correction, and opt-out of sale or sharing, enforced respectively by EU supervisory authorities and the California Privacy Protection Agency; Vercel designates a DPA at privacy@vercel.com and references standard contractual clauses for international data transfers. Compliance teams should note the dual controller/processor role creates distinct contractual obligations, and the advertising data sharing may require evaluation under GDPR consent requirements and CCPA opt-out of sale mechanisms, particularly given Vercel's primarily B2B and developer-focused user base.