Privacy Policy

IEI Agency LLC, a Maryland limited liability company (“IEI Ventures,” “we,” “us,” or “our”), operates the IEI Ventures brand-development service (the “Service”). You can reach us about privacy at support@ieiventures.com.

In plain English: you give us your name, email, payment information, and information about your business when you use the Service. We use that to build your brand kit and deliver it to you. We share only what we need to with the providers listed below, and we do not sell your data. The details follow.

We collect the following categories of information:

• Account and order information. Your name, email address (provided when you sign in with Google), business name, and related order details.
• Payment information. Processed by our payment processor, Stripe, Inc. We do not store your full card number. Stripe provides us with a token plus limited details (such as the last four digits and card brand) for receipts and dispute handling.
• Intake information. During the in-app intake you share information about your business, your story, your goals, your audience, your offerings, and your brand preferences. This may include personal information about you (your background and your motivations) and information about your business operations.
• Communications. Emails, messages, and support requests you send us.
• Optional feedback. Survey answers and testimonials, only if you choose to provide them.
• Usage data. Basic technical information collected automatically, such as browser type, device type, IP address, referring URL, pages visited, and timestamps.

We do not collect biometric data, precise location data beyond your IP-inferred general region, or special-category sensitive information (such as race, religion, or health) unless you choose to share it as part of your brand story.

We use your information to:

• Fulfill your purchase by producing and delivering the brand kit you ordered.
• Communicate with you about order confirmations, delivery, support requests, and service-related updates.
• Improve the Service by learning from patterns across many customers. We use anonymized or aggregated data for this; your individual story is not used as a training example for AI models.
• Maintain legal and security protections such as detecting fraud, enforcing our Terms, and responding to lawful requests.

We do not:

• Sell your personal information to third parties.
• Use your data to train external AI models. Our AI provider, Anthropic, contractually agrees not to train its models on commercial data.
• Share your information with advertisers.
• Use your story or business details in marketing materials without your explicit written permission.

We share information only with the following categories of recipients, each acting on our instructions to help us run the Service:

• Google for sign-in and authentication.
• Supabase for database and authentication infrastructure.
• Vercel for application hosting and file storage.
• Stripe, Inc. for payment processing.
• OpenRouter and Anthropic, PBC for the AI processing used to generate your brand kit.
• Our email provider to send you order updates and deliverables.
• Legal advisors, accountants, and auditors, only as needed to run our business and comply with the law.
• Law enforcement or government, only as required by valid legal process.
• A successor entity, if we are acquired or merge or sell substantially all of our assets, in which case your information may transfer subject to this policy.

We do not currently use advertising trackers such as Google Analytics or the Facebook Pixel. If we add analytics or advertising technology in the future, we will update this policy and obtain consent where required.

We retain information for the following periods:

• Personal narrative (your origin story, struggle, turning point, legacy, signature phrases, and related free-text notes) is automatically purged approximately 30 days after you accept delivery of your brand kit. After purging, those fields are replaced with a redaction marker.
• Other intake content and delivered outputs: retained for approximately 90 days after delivery, then deleted or anonymized.
• Order and payment records: retained for up to 7 years to meet tax and accounting requirements.
• Email communications: retained for up to 2 years.
• Anonymized or aggregated learnings: retained indefinitely, since they cannot be tied back to you.

You can request earlier deletion at any time (see Your rights).

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access a copy of the information we hold about you.
• Correction of inaccurate information.
• Deletion of your personal information, subject to legal retention requirements such as tax records.
• Portability of your data in a structured, machine-readable format.
• Opt out of sale or sharing for targeted advertising. We do not sell or share for targeted advertising, and we confirm this right for residents of California and other states with similar laws.
• Non-discrimination. We will not deny you service or treat you differently for exercising these rights.

To exercise any right, email support@ieiventures.com from the address associated with your purchase. We respond to verified requests within the time required by applicable law (generally within 30 days).

EU and UK residents: we do not currently serve customers in the EU or UK. If we expand to those regions, we will update this policy to reflect GDPR and UK-GDPR requirements.

We use a limited set of cookies and similar technologies:

• Strictly necessary cookies for sign-in, session, and security. These are required for the Service to work.
• Functional cookies that remember preferences within a session.
• Analytics cookies, if used, only in aggregated form to understand which pages are visited most. We do not track you across other websites.
• Advertising cookies are not used.

You can disable non-essential cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

We use industry-standard practices to protect your information, including:

• Encryption in transit using HTTPS (TLS) for data sent between your browser and our servers.
• Encryption at rest for intake content and outputs stored on our infrastructure.
• Access controls so that only authorized personnel can access customer data, and only as needed to deliver the Service.
• Payment security handled by Stripe, which is PCI-DSS Level 1 certified. We never store full card numbers.

No system is completely secure. We cannot guarantee absolute security, but we work to protect your information and will notify affected customers promptly if a breach occurs.

The Service is intended for adults (18 or older) and businesses. We do not knowingly collect information from children under 13 (or 16 where applicable). If you believe we have collected information from a child, email support@ieiventures.com and we will delete it.

The Service is operated from the United States, and our providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

We may update this policy as our practices evolve. We will post the updated policy with a new effective date, and for material changes we will notify active customers by email at least 14 days before the changes take effect.

Privacy questions or requests? Contact IEI Agency LLC at support@ieiventures.com.