Privacy Policy
Last updated: August 14, 2026
Controller
Inoculis LLC, 2108 N ST, STE N, Sacramento, CA 95816, USA. Email: cb@mvp.sv.
The short version
Your documents are not stored on our servers. A document you upload is held in memory for the duration of one extraction, sent to our AI processor, and the result is returned to your browser. The obligation register you build lives in your browser’s local storage, not in our database. What we do keep is account metadata: who you are, how many documents you have used, and what you have purchased.
What we collect
Account data — name, email address, company, and role, collected at registration, plus a verification code that expires after 15 minutes.
Usage and billing metadata — a per-email count of documents processed, purchased credit balances, and purchase records (amount, date, Stripe checkout reference). Card details go directly to Stripe and never reach us.
Security and log data — IP address, approximate location derived from it, user agent, and requested pages, used for abuse prevention and rate limiting.
Documents — processed transiently as described above; never written to disk, a database, or logs on our side.
Processors we use
Vercel (hosting, USA) · Anthropic (AI processing of document text, USA — Anthropic does not use API data to train its models) · Upstash (metadata store, USA/EU) · Stripe (payments) · Resend (transactional email) · Cloudflare (DNS). Each processes data under its own data-processing terms with appropriate transfer safeguards.
Cookies and analytics
We set one strictly necessary session cookie after email verification. Traffic is measured with Vercel Web Analytics, which does not use cookies or track you across sites. There is no advertising tracking.
Retention
Account and usage metadata are kept while your access remains active; purchase records as long as commercial law requires. Verification codes expire after 15 minutes. Documents are not retained at all — our AI processor retains API inputs transiently under its commercial terms before deletion.
Your rights
Depending on where you live (including under GDPR and CCPA), you can request access to, correction of, or deletion of your personal data, and object to or restrict processing. Email cb@mvp.sv and we will handle it — deleting an account removes the lead record, quota counters, and credit balance tied to your email. You can also complain to your local supervisory authority.