LEGAL / PRIVACY

Privacy Policy

Last Updated: January 5, 2026

VuduVations is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when using our Services:

Account Information: Name, email address, company name, job title
Payment Information: Billing address, payment method details (processed securely by Stripe)
Content You Upload: Business transcripts, audio/video files, documents for analysis
Communications: Messages, feedback, support requests sent to us

1.2 Information Collected Automatically

Usage Data: Features used, pages viewed, time spent, click patterns
Device Information: IP address, browser type, operating system
Log Data: Access times, pages requested, referring URLs
Cookies: Session data, preferences, authentication tokens

1.3 AI-Processed Data

Our AI services process transcripts, audio files, and documents you upload. See Section 3 for our data handling and retention policies.

2. How We Use Your Information

2.1 Provide Services

Process your requests and deliver AI-powered analysis
Generate reports, insights, and recommendations
Authenticate users and maintain account security
Process payments and manage subscriptions

2.2 Improve Services

Analyze usage patterns to improve functionality
Troubleshoot technical issues
Develop new features (using aggregated, anonymized data only)

2.3 Communications

Send service-related notifications (analysis complete, payment receipts)
Respond to support requests
Send marketing communications (with your consent, easily unsubscribed)

3. Data Storage and Retention

Default: Ephemeral Processing (No Storage)

By default, VuduVations operates in ephemeral processing mode:

Your uploaded files (transcripts, audio, documents) are processed in memory
Analysis results are generated and delivered to you in real-time
Analysis content is not intentionally retained after the ephemeral processing session; account, purchase, security, and usage metadata may still be retained as described below
You are responsible for downloading/saving your results during your session
If you close your browser without saving, your results are gone

Ephemeral mode is designed to minimize retained analysis content. Operational logs, account data, and third-party processing behavior remain subject to the disclosures in this policy and the applicable provider configuration.

Optional: Secure Archive + Chat ($50/month)

For users who need persistent access to their analysis results, we offer Secure Archive:

Encrypted Storage: AES-256 encryption at rest, TLS 1.3 in transit
Row-Level Security: Only you can access your stored data (enforced by Supabase RLS)
Dashboard Access: View and export past analyses anytime during subscription
Cancellation: 30-day grace period to export data after cancellation
Deletion: All stored data permanently deleted 30 days after cancellation

3.1 What We Always Store (Regardless of Archive Status)

Account Data: Email, name, authentication tokens (via Clerk)
Purchase Records: Credit purchases, subscription status, invoices (via Stripe)
Usage Metadata: Timestamps, credit consumption, analysis IDs (not content)

3.2 Account Closure

When you close your account:

Account data is deleted within 30 days
Purchase records may be retained for legal/tax compliance (typically 7 years)
If you have Secure Archive, stored analyses are deleted after the 30-day grace period

4. AI Model Training: We Do NOT Train on Your Data

We built our architecture specifically to avoid the "Black Box" problem.

Zero-Retention API

Where available for the applicable provider/account configuration, VuduVations uses API data controls intended to minimize provider retention. VuduVations does not use customer analysis content to train its own models. Provider handling is also governed by the provider's current terms and the configuration in effect for the request.

Deterministic Logic Core

The intelligence in our platform comes from structured symbolic reasoning, not LLM training. We extract insights using deterministic logic, not statistical pattern matching on your data.

Data Isolation

If you use Secure Archive, your data is stored with strict Row-Level Security (RLS) in Supabase. No other user or VuduVations employee can access your stored analyses.

Compliance

VuduVations uses infrastructure providers that publish their own security and compliance attestations. Those provider attestations do not automatically make VuduVations independently certified. Regulated deployments require a separate review of the complete service, configuration, contracts, and control environment.

5. How We Share Your Information

We do not sell your personal information. We may share information only in these circumstances:

5.1 Service Providers

Clerk: Authentication and identity management
Stripe: Payment processing and billing
Anthropic: AI processing, subject to the provider configuration and applicable data controls
Supabase: Database storage (with RLS)
Vercel: Application hosting
Resend: Transactional emails

5.2 Legal Requirements

We may disclose information if required by law (subpoenas, court orders) or to protect our rights, property, or safety.

5.3 Business Transfers

If VuduVations is involved in a merger or acquisition, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

6. Data Security

We implement industry-standard security measures:

Encryption: TLS 1.3 in transit, AES-256 at rest
Access Controls: Role-based access, multi-factor authentication
Row-Level Security: Database-enforced data isolation
Provider assurance: We review available security and compliance materials from infrastructure providers as part of our control environment
Regular Audits: Security assessments and monitoring

No system is 100% secure. We cannot guarantee absolute security but we take all reasonable precautions.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access & Portability

Request a copy of your data in portable format

Correction

Correct inaccurate or incomplete information

Deletion

Request deletion of your personal information

Opt-Out

Unsubscribe from marketing, disable cookies

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

We use cookies for:

Essential: Authentication, security, core functionality
Analytics: Understanding usage patterns (anonymized)
Preferences: Remembering your settings

You can control cookies via browser settings. Disabling essential cookies may break functionality.

9. Regional Privacy Rights

California (CCPA)

Right to know what personal information we collect
Right to delete personal information
Right to opt out of sale (we do not sell data)
Right to non-discrimination

European Union (GDPR)

Right to access, rectification, erasure
Right to restrict processing
Right to data portability
Right to object to processing
Right to lodge complaint with supervisory authority

Lawful bases: contract performance, legitimate interests, consent, legal obligations.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

Posting the updated policy with a new "Last Updated" date
Sending an email notification for significant changes

Continued use after changes become effective constitutes acceptance.

Contact Us About Privacy

If you have questions about this Privacy Policy or our data practices:

VuduVations

Email: [email protected]

Privacy Inquiries: [email protected]

Website: vuduvations.io

Location: Las Vegas, Nevada, USA

We will respond to privacy inquiries within 30 days.