Privacy
Policy.

1. Data We Collect

We collect personal data through the following channels:

• Full Name — to address you correctly.
• Company / Organization — to understand your context.
• Work Email — to respond to your inquiry.
• Area of Interest & Industry — to route your inquiry appropriately.
• Message — any additional information you choose to share.

Account registration: email, password (hashed), full name, organization, country, age attestation (18+).
Research workspace: project topics, research questions, uploaded documents, document feedback and comments, review/validation records, phase progress.
Payments: payment requests and confirmations, amounts, currency, payment references, and bank-transfer receipts. Payments are confirmed manually by our team; we do not process card data.
Notifications: in-app notification records and a delivery log of transactional emails sent to you.
Research request: domain, problem description, current state, desired outcome, user thoughts.
Newsletter: email address.
Analytics (with consent): page views, device, browser, country-level location, session duration via Google Analytics. IP anonymized.

We also store a theme preference (light/dark) in your browser's local storage. This is not personal data and is not transmitted to any server.

2. How We Use Your Data

• To respond to your inquiry and schedule consultations.
• To operate your research workspace: delivering documents, collecting feedback, tracking phase progress, and managing reviews and validations.
• To process and confirm payments, and to keep payment audit records.
• To send transactional notifications (document, feedback, and payment events) by email and in-app.
• To communicate with you about potential engagements.
• To improve our services and website content.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Processors

We use the following third-party services to operate the platform. Each has its own privacy policy:

• Formspree — processes contact form submissions and delivers them to our email. View their privacy policy.
• Vercel — hosts this website and runs the serverless functions that power accounts, documents, and notifications. View their privacy policy.
• Supabase — provides managed PostgreSQL database, authentication, file storage, and realtime infrastructure for accounts and workspace data. View their privacy policy.
• Resend — handles transactional email delivery (sign-in links, notifications, payment confirmations). View their privacy policy.
• Google Fonts — delivers web fonts used on this site. Google may collect IP addresses as part of font delivery. View their privacy policy.
• Unsplash — provides imagery used in page hero sections. No personal data is transmitted to Unsplash by website visitors. View their privacy policy.

4. Data Retention

We retain form submissions for up to 24 months after our last communication with you. Account and research-workspace data is retained while your account is active. When you delete your account (self-service in Account Settings, or by emailing us), your personal data is permanently anonymized, meaning name, email, and profile details are erased, while anonymized project and payment records are retained for audit and legal purposes. You may request earlier deletion of marketing data at any time (see Section 6).

5. Cookies & Local Storage

This website uses the following storage mechanisms: Essential local storage: We store your theme preference (light/dark mode) and consent choices in your browser local storage. No personal data is stored in cookies or local storage. Analytics cookies (with consent): If you consent, we use Google Analytics cookies (_ga, _ga_G8G913L5TV) to collect anonymous usage data. IP addresses are anonymized. You can reject analytics cookies at any time using the consent banner or by clearing your browser storage.

You can clear local storage at any time through your browser settings without affecting site functionality.

6. Your Rights

Depending on your jurisdiction (GDPR, NDPR, CCPA, or others), you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — request that we limit processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — withdraw consent at any time without affecting prior processing.

You can delete your account and anonymize your personal data directly in Account Settings. To exercise any of these rights or for data-protection enquiries, email us at vlthrlab@agentmail.to. We respond to valid requests within 30 days. If a personal-data breach occurs, we will notify affected users and the Nigeria Data Protection Commission within 72 hours where required by law.

7. Security

We take reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS) and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we work to protect your data using industry-standard practices.

8. International Transfers

Your data may be processed by our third-party processors in jurisdictions outside your country of residence, in particular Vercel (United States, hosting and serverless functions), Supabase (managed database region as configured for the project), Resend (email delivery), and Formspree (contact form). We select processors that provide adequate safeguards for international data transfers in compliance with the Nigeria Data Protection Act 2023 and other applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page whenever we make changes. We encourage you to review this page periodically.

10. Contact

For any questions or requests regarding this Privacy Policy or your personal data, contact us at vlthrlab@agentmail.to.