Privacy Policy

We collect only what is required to operate a subscription product and to keep it secure.

• Account data — name, email address, and profile image, provided by you or by Google when you sign in with it. Authentication is handled by Clerk.
• Billing data — subscription status, plan, and billing period. Card details are collected and stored by Stripe; IBVL never receives or stores them.
• Product data — the threads and messages you create in the Intelligence Console, and messages you send through the contact form.
• Operational data — request logs, error reports, and aggregate usage counters used for rate limiting and reliability.

Personal data is used to authenticate you, provide and bill for the service, respond to your enquiries, enforce fair-use limits, and investigate abuse or security incidents.

We do not sell personal data. We do not use your Console conversations to advertise to you.

IBVL relies on a small number of subprocessors, each contracted to handle data only on our instructions:

• Clerk — authentication and identity.
• Neon — the Postgres database storing accounts, subscriptions, and Console threads.
• Stripe — payment processing and subscription billing.
• Google — Gemini inference for the Intelligence Console.
• Vercel — application hosting, edge delivery, and logging.

Console prompts are transmitted to the inference provider in order to generate a response. Do not submit material you are not permitted to share with a third-party processor.

Account and billing records are retained for as long as your account exists and afterwards only where required for tax, accounting, or legal obligations.

Console threads are retained until you delete them or delete your account. Deleting your account removes your threads, messages, and subscription records from our database.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us through the form at ibvl.com/contact. We will respond within the period required by applicable law.

Data is encrypted in transit. Access to production systems is restricted to personnel who require it. Authentication and payment — the two highest-risk surfaces — are delegated to specialist providers rather than implemented in-house.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to us before disclosing it publicly.

IBVL is not directed to children and we do not knowingly collect personal data from anyone under 16.

We will post any material change to this policy on this page and update the date above. Continued use of IBVL after a change takes effect constitutes acceptance of the revised policy.

Questions about this policy can be sent through the contact form at ibvl.com/contact.