Privacy Policy — Involgo Compliance Sherpa

Involgo (“Involgo,” “we,” “us”) operates the Compliance Sherpa web application (the “Service”). This policy explains what we collect, how we use it, and the rights you have over your data.

1. Information we collect

Account data: email address, display name, and authentication credentials managed by our identity provider.
Subscription & billing data: plan, status, billing cycle, and the customer identifier from our payment processor (Stripe). We do not store card numbers.
Chat content: the messages you send to BackChat, Criminal Decoder, and MVR Decoder, and the assistant’s replies.
Uploaded records: PDFs and text files you attach to a chat (Pro and Team plans).
Usage metadata: message counts per billing period and basic technical logs.

2. How we use your data

We use your data only to operate, secure, and improve the Service:

Provide responses to your questions and decode the records you upload.
Enforce plan limits and bill the correct subscription.
Detect abuse, debug errors, and meet legal obligations.

3. We do not train AI models on your data

Your chats and any records you upload are never used to train, fine-tune, or evaluate AI models — ours or any third party’s. We send messages to our underlying model providers solely to generate your reply, and we have contractual commitments with those providers that prohibit using your content for model training.

4. Security & storage

Records you upload are stored in a private, access-controlled bucket. Row-level security policies ensure that only your account can read or list your files. Data is encrypted in transit (TLS) and at rest. Chats are scoped to your account by the same row-level security rules.

5. Retention & deletion

You can delete any uploaded record at any time from your Account page. Deleted files are removed from object storage immediately. Chat history is retained for your reference until you delete it or close your account, after which it is permanently removed within 30 days. You can request full deletion of your account by emailing info@involgo.net.

6. Sharing

We share data only with the service providers required to run the Service — our cloud database/storage host, our payment processor (Stripe), and our model providers — each under a data-processing agreement. We do not sell personal data.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. Contact info@involgo.net to exercise these rights.

8. Disclaimer

Compliance Sherpa output is reference and guidance only. It is not legal advice. Always verify against the official source and consult counsel before acting.

9. Contact

Questions about this policy? Email info@involgo.net.