Privacy Policy

Last updated: April 26, 2026

1. What We Collect

• Credit report PDFs you upload. These are processed to produce your analysis and then deleted from disk. See "Data Retention" below.
• Email address collected by Stripe at checkout and used by Stripe to send a payment receipt. VioVerse itself does not currently maintain user accounts or store your email address beyond what Stripe records as part of the transaction.
• Payment information, handled entirely by Stripe. VioVerse does not see or store your card number, CVV, or billing address beyond what Stripe returns as a transaction reference.
• Analysis output produced from your uploaded report (creditor names, account statuses, dates, flagged findings). This is held in our backend for the duration of your session so you can revisit results from the same browser. It is not retained indefinitely; sessions are ephemeral and may be removed when the backend is restarted, redeployed, or after extended inactivity.
• Session metadata (timestamps, bureau of the uploaded report, counts of findings) used to operate the service.

2. How We Use It

Collected data is used only to perform the analysis you requested and to make those results available to you in the same browser session. We do not sell your data. We do not use your credit report contents for advertising, profiling, or training AI models.

3. Third Parties

• Stripe: payment processing. Stripe is PCI-compliant and handles card data directly; VioVerse never receives raw card information.
• Clerk: authentication provider, if and when account sign-in is enabled. Clerk handles email and session management for authenticated accounts.
• Vercel: hosting provider for the frontend web application.
• Render: hosting provider for the backend analysis service.

These providers process data on our behalf under their own privacy and security commitments. No other third parties receive your credit report or analysis output.

4. Data Retention

Uploaded PDFs are deleted from our servers after analysis completes. The structured output of the analysis (findings, flags, metadata) is held in your session and is removed when the session ends or when the backend is restarted or redeployed. There is no long-term storage and no account-keyed retention. You can request immediate deletion of your session data at any time (see "Your Rights" below).

5. Your Rights

You can request deletion of your session data at any time by contacting david@vioverse.io with your session reference. You can also request a copy of the data associated with your session. We will respond to deletion or access requests within a reasonable time frame, typically within 30 days.

6. Security

All data is encrypted in transit using HTTPS. Payment data is handled by Stripe, a PCI-compliant payment processor, and never touches VioVerse's servers in raw form. Uploaded PDFs are held in memory for the duration of analysis and removed from disk immediately after extraction completes. Access to backend systems is limited to authorized personnel with multi-factor authentication.

7. Children

VioVerse is intended for adults reviewing their own credit reports. The service is not directed at children under 13, and we do not knowingly collect data from children under 13.

8. Changes to This Policy

This policy may be updated from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. Substantive changes affecting how we handle existing user data will be communicated by email when possible.

9. Contact

Privacy inquiries can be directed to david@vioverse.io.