Vercel's platform is not intended for children under 13 and Vercel says it will delete any personal data it discovers it has collected from a child under 13.
This analysis describes what Vercel AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
While standard for most platforms, developers using Vercel to build consumer applications that may reach children should be aware that Vercel's own child data protections apply only to platform accounts, not to end users of their deployed applications.
The updated policy establishes a new mechanism for resolving privacy disputes related to Data Privacy Framework transfers. Users in the EU, UK, and EEA who have unresolved privacy complaints can now submit them to VeraSafe for independent review, which will be conducted free of charge. Additionally, the policy introduces an explicit Right to Restriction, permitting users to request that Vercel limit processing of their personal information or restrict further disclosures in certain instances, particularly for sensitive information. You can file a complaint with VeraSafe by submitting required information at https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.
View change record →Children under 13 should not be creating Vercel accounts, and if a parent or guardian discovers that a child under 13 has provided data to Vercel, they can contact privacy@vercel.com to request deletion.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible.Excerpt from Vercel AI's SDK Privacy
(1) REGULATORY LANDSCAPE: This provision engages the Children's Online Privacy Protection Act, enforced by the FTC, which prohibits collecting personal information from children under 13 without verifiable parental consent.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
While standard for most platforms, developers using Vercel to build consumer applications that may reach children should be aware that Vercel's own child data protections apply only to platform accounts, not to end users of their deployed applications.
Children under 13 should not be creating Vercel accounts, and if a parent or guardian discovers that a child under 13 has provided data to Vercel, they can contact privacy@vercel.com to request deletion.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Vercel AI.