Privacy Policy | Ilvrant

Placeholder. Real Privacy Policy text is being drafted. Final copy ships before the first cohort starts.

1. Who we are

Ilvrant Limited Liability Partnership ("Ilvrant LLP", "Ilvrant", "we") is a Singapore-registered LLP. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Contact: support@ilvrant.io.

2. What data we collect

Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. We collect:

Email address (auth identifier)
Display name (real name or chosen handle)
Stripe customer ID and subscription metadata (no card numbers — Stripe holds those)
File uploads when present (e.g. instructor-school student homework photos)
Operational metadata: IP at signup events for rate-limiting, session cookies, preview-mode cookie
Submission content, drill responses, and game results — linked to the user account

3. Why we process it

Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris. We process personal data to deliver the service, manage billing through Stripe, send transactional email, and apply rate-limiting and other security controls.

4. Sub-processors

Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. We rely on the following sub-processors:

Supabase (database, auth, storage)
Stripe (payments)
Resend (transactional email)
Vercel (hosting)
Google (OAuth — only for users who choose Google sign-in)
Cloudflare (email routing for the support address)

5. Data retention

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt. Submissions are kept while your account is active and deleted within 30 days of account closure, except where we are required to retain records by law (e.g. billing records).

6. User rights

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium. You may request access, correction, deletion, export, or withdraw consent. Exercise these rights by emailing support@ilvrant.io.

7. Cookies & tracking

Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit. We use essential cookies only — auth session and a preview-mode flag. There is no analytics or third-party tracking at v1.

8. Children's privacy

Self-serve registration is for adults (18+). Neque porro quisquam est, qui dolorem ipsum quia dolor sit amet. Minor users access the platform exclusively through a participating instructor school org, where the school takes consent responsibility.

9. International transfers

At vero eos et accusamus et iusto odio dignissimos ducimus. Data may be processed outside Singapore, primarily in the United States and the European Economic Area, where our sub-processors operate.

10. Security

Itaque earum rerum hic tenetur a sapiente delectus, ut aut reiciendis voluptatibus. We protect data with encryption at rest, TLS in transit, row-level security, and periodic security review.

11. Contact

Et harum quidem rerum facilis est et expedita distinctio. For privacy or support questions, email support@ilvrant.io. This address serves as both general support and the data-protection contact.