Privacy Policy

IBVL LLC, a limited liability company formed in the State of Delaware, United States, is the controller of the personal data described here. Where this policy says "we", it means that company.

You can reach us about anything in this document through the form at ibvl.com/contact.

We collect only what is required to operate a subscription product and to keep it secure.

• Account data — name, email address, and profile image, provided by you or by Google when you sign in with it. Authentication is handled by Clerk.
• Billing data — subscription status, plan, and billing period. Card details are collected and stored by Stripe; IBVL never receives or stores them.
• Product data — the threads and messages you create in the Intelligence Console, and messages you send through the contact form.
• Operational data — request logs, error reports, and aggregate usage counters used for rate limiting and reliability.

Personal data is used to authenticate you, provide and bill for the service, respond to your enquiries, enforce fair-use limits, and investigate abuse or security incidents.

We do not sell personal data. We do not use your Console conversations to advertise to you.

IBVL relies on a small number of subprocessors, each contracted to handle data only on our instructions:

• Clerk — authentication and identity.
• Neon — the Postgres database storing accounts, subscriptions, and Console threads.
• Stripe — payment processing and subscription billing.
• Google — Gemini inference for the Intelligence Console.
• Vercel — application hosting, edge delivery, and logging.

Console prompts are transmitted to the inference provider in order to generate a response. Do not submit material you are not permitted to share with a third-party processor.

Account and billing records are retained for as long as your account exists and afterwards only where required for tax, accounting, or legal obligations.

Console threads are retained until you delete them or delete your account. Deleting your account removes your threads, messages, and subscription records from our database.

IBVL sets no advertising or analytics cookies and runs no third-party trackers.

• A session cookie set by Clerk keeps you signed in. Without it, authentication cannot work.
• Stripe sets cookies on its own checkout and billing pages, which are hosted by Stripe rather than by us, to process the payment and detect fraud.
• The site remembers interface preferences in your browser's local storage. That data never leaves your device.

Because none of this is used for advertising or profiling, there is no consent banner to dismiss.

Our processors operate infrastructure in the United States and elsewhere, so personal data may be processed outside the country you live in, including in countries whose data-protection law differs from your own.

Where data originating in the European Economic Area, the United Kingdom, or Switzerland is transferred, our processors rely on the European Commission's Standard Contractual Clauses or an equivalent approved mechanism.

For people in the European Economic Area and the United Kingdom, we rely on these legal bases:

• Performance of a contract — creating your account, giving you access, taking payment, and answering what you send us.
• Legitimate interests — keeping the service secure, enforcing rate limits, preventing abuse, and understanding faults. We balance these against your rights and use the least data that works.
• Legal obligation — retaining tax and accounting records.

We do not rely on consent for any of the processing described here, and we do not carry out automated decision-making that produces legal effects for you.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us through the form at ibvl.com/contact. We will respond within the period required by applicable law, and we will not treat you differently for asking.

You can also delete your account yourself, which removes your profile, threads, and messages from our database.

Data is encrypted in transit. Access to production systems is restricted to personnel who require it. Authentication and payment — the two highest-risk surfaces — are delegated to specialist providers rather than implemented in-house.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to us before disclosing it publicly.

IBVL is not directed to children and we do not knowingly collect personal data from anyone under 16.

We will post any material change to this policy on this page and update the date above. Continued use of IBVL after a change takes effect constitutes acceptance of the revised policy.

Questions about this policy can be sent through the contact form at ibvl.com/contact, addressed to IBVL LLC.