Privacy Policy

Effective Date: September 23, 2026

This Privacy Policy ("Policy") describes how Seek & Swell, LLC, operator of InspoVault ("Seek & Swell," "Company," "InspoVault," "we," "us," or "our"), collects, uses, discloses, retains, and otherwise processes personal information in connection with InspoVault. This Policy is intended to provide notice regarding our privacy practices. It does not create contractual rights beyond those created by applicable law.

1. Scope

This Policy applies to personal information processed through InspoVault websites, applications, software, customer-support interactions, and related services. InspoVault is currently offered only to users located in the 50 United States and the District of Columbia. This Policy does not govern third-party websites, platforms, or services that we do not control.

2. Age Requirement

InspoVault is intended only for persons who are at least 18 years old. We do not knowingly offer accounts to children or intentionally collect personal information from children through accounts intended for them. If we learn that an ineligible minor has provided personal information through an InspoVault account, we may restrict or delete the account and associated information as appropriate. If you believe a minor has provided information in violation of this Policy, contact: support@inspovault.com

3. Categories of Information We Collect

Depending on how you use InspoVault, we may process the following categories of information.

A. Account and Identity Information

This may include:

email address;
authentication user ID;
workspace ID;
account creation date;
email-confirmation status;
sign-in timestamps;
account role information;
and authentication/session information.

We do not receive your plaintext account password.

B. Legal Acceptance Information

We may maintain records showing:

the version of the Terms you accepted;
the Privacy Policy version acknowledged;
date and time of acceptance;
acceptance context;
and related account identifiers.

For subscription purchases we may also maintain records showing:

plan;
billing interval;
price and currency presented;
recurring-billing disclosure version;
date and time of consent;
associated checkout identifiers;
and account/workspace identifiers.

These records may be retained as evidence of transactions, consent, compliance, and the parties' agreement.

C. Subscription and Billing Information

This may include:

selected plan;
billing interval;
subscription status;
trial dates;
subscription-period dates;
scheduled cancellation;
payment-problem status;
Stripe customer ID;
Stripe subscription ID;
Stripe Checkout identifiers;
invoices and payment-related metadata received from payment providers;
and transaction status.

Our payment processor, rather than InspoVault, generally collects complete payment-card details.

D. User Content

Depending on the features you use, User Content may include:

saved URLs;
titles;
folders;
tags;
notes;
Brand Voice information;
prompts;
product or supporting context;
reference materials;
generated scripts;
transcripts;
media identifiers;
and other information you intentionally provide or direct the Service to process.

E. Usage and Entitlement Information

We may process information such as:

Script Generations used;
Transcription Minutes or seconds used;
Brand Voice counts;
plan limits;
usage-period dates;
request identifiers;
AI-generation status;
transcription status;
provider-job identifiers;
attempt counts;
duration information;
whether usage was charged;
failure information;
and duplicate/reuse information.

F. Support and Administrative Information

When you contact support or when authorized personnel investigate an operational problem, we may process:

your account identifiers;
support communications;
subscription state;
current usage;
content counts;
operational statuses;
safe error information;
and customer-support access records.

Administrative access may be logged for security and accountability.

G. Technical, Device, and Security Information

We and our service providers may process technical information such as:

IP address;
browser type;
operating system;
device characteristics;
timestamps;
session identifiers;
network information;
request metadata;
authentication events;
security events;
error information;
diagnostic information;
and logs reasonably necessary to operate and protect the Service.

4. Sources of Information

We may obtain personal information:

directly from you;
automatically through your interaction with the Service;
from our authentication infrastructure;
from payment providers;
from AI providers when they return requested results or operational information;
from transcription providers;
from cloud, hosting, and infrastructure providers;
from third-party platforms when necessary to provide functionality you request;
and from legal, security, fraud-prevention, or support processes.

5. How We Use Information

We may use personal information to:

create, authenticate, secure, and maintain accounts;
provide Vault functionality;
provide script generation;
provide transcription;
provide Brand Voice functionality;
organize and retrieve saved information;
associate related content;
prevent unnecessary duplicate processing;
determine subscription eligibility;
administer Trials;
enforce plan limits;
process subscriptions and payments;
maintain legal and recurring-billing consent records;
provide subscription acknowledgments and required notices;
provide customer support;
diagnose failed or stuck operations;
detect and prevent fraud, abuse, or unauthorized activity;
secure the Service;
maintain logs and audit trails;
enforce our Terms;
comply with law and legal process;
establish, exercise, or defend legal claims;
improve reliability, performance, usability, and product functionality;
and create aggregated or de-identified analytics.

6. Artificial Intelligence Providers

When you use AI-powered features, information necessary to perform the requested operation may be transmitted to an artificial-intelligence service provider, currently including Anthropic. Depending on your request, this may include:

prompts;
Brand Voice information;
product context;
reference material;
source content;
and other information you intentionally provide for generation.

AI providers process information subject to our arrangements with them and their applicable privacy and service terms. Provider practices, features, and retention terms may change over time. You should not submit highly sensitive or regulated information to AI features unless the Company has expressly agreed that the Service supports that use.

7. Transcription Providers

When you request transcription, information necessary to perform that request may be transmitted to a transcription service provider, currently including VideoTranscriber.ai. This may include:

media URL;
media/provider identifiers;
information needed to locate the media;
and operational information regarding the request.

The transcription provider may return:

transcript content;
timing information;
media duration;
job status;
billing-duration information;
and error or diagnostic information.

We use this information to provide the transcript, prevent unnecessary duplicate processing, meter plan usage, and troubleshoot failures.

8. Payments and Stripe

We use Stripe for payment processing and subscription management. Stripe may process information including:

payment-card information;
billing information;
email;
transaction information;
device information;
fraud-prevention information;
and payment-method information.

We generally receive transaction and subscription metadata rather than your complete payment-card number. Stripe processes information under its own agreements and privacy practices.

9. Hosting, Database, Authentication, and Infrastructure Providers

We use third-party infrastructure to operate the Service. Depending on our current architecture, providers may include services such as:

Lovable or Lovable Cloud;
Supabase;
cloud hosting or database providers;
authentication providers;
email providers;
security providers;
and logging or operational infrastructure providers.

These providers may process personal information to the extent necessary to perform services for us. Our infrastructure providers may change as the Service evolves.

10. How We Disclose Information

We may disclose personal information to:

Service Providers We may disclose information to vendors and contractors that perform services for us, including: hosting;
database infrastructure;
authentication;
payments;
artificial intelligence;
transcription;
email;
security;
customer support;
error logging;
and related infrastructure.

Legal and Safety Disclosures We may disclose information where we reasonably believe disclosure is necessary to:

comply with law;
respond to legal process;
enforce agreements;
investigate fraud or abuse;
protect the Company;
protect users;
protect intellectual property;
protect security;
or protect the rights, property, or safety of another person.

Corporate Transactions Information may be disclosed or transferred in connection with:

financing;
merger;
acquisition;
corporate restructuring;
reorganization;
bankruptcy;
sale of assets;
or transfer of all or part of the Service.

With Your Direction We may disclose information when you direct us to do so or otherwise provide valid consent.

11. No Sale or Behavioral Advertising Sharing

We do not currently sell personal information for monetary consideration. We also do not currently share personal information for cross-context behavioral advertising or targeted advertising as those concepts are defined by applicable U.S. state privacy laws. We do not currently operate a third-party advertising network within InspoVault. If these practices materially change, we will update this Policy and provide legally required notices and choices before engaging in the new practice where required.

12. Cookies, Browser Storage, and Similar Technologies

InspoVault may use cookies, browser storage, tokens, or similar technologies necessary for:

authentication;
maintaining sessions;
security;
preserving application state;
and core Service functionality.

We do not currently describe non-essential advertising cookies because the Service does not presently use them. If we later introduce analytics, advertising, or other non-essential tracking that requires additional disclosure or consent, we will update our practices and notices as required.

13. Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information from information processed through the Service. We may use and retain such information for lawful purposes, including:

analytics;
fraud prevention;
security;
reliability;
capacity planning;
research;
service improvement;
and product development.

Where required by applicable law, we will maintain de-identified information in de-identified form and will not attempt to re-identify it except as permitted by law.

14. Retention

We retain personal information for no longer than reasonably necessary for the purposes for which it is processed, taking into account:

account status;
the nature of the information;
provision of the Service;
subscription and transaction requirements;
security needs;
fraud and abuse prevention;
legal obligations;
dispute resolution;
enforcement of agreements;
audit requirements;
establishment or defense of legal claims;
and applicable limitation periods.

Different categories of information may have different retention periods.

15. Account Deletion

You may permanently delete your account through the Service where that feature is available. Following account deletion, we delete or de-identify personal information associated with the active account in accordance with our then-current systems and retention practices, subject to legitimate exceptions. Information may be retained where reasonably necessary for:

billing and transaction records;
tax or accounting requirements;
fraud and abuse prevention;
security;
legal compliance;
dispute resolution;
audit records;
enforcement of agreements;
evidence of legal or recurring-billing consent;
establishment or defense of legal claims;
and other purposes permitted or required by law.

Limited retained records may include:

deletion date;
masked email information;
cryptographically hashed email information;
original account/workspace identifiers;
Stripe customer or subscription identifiers;
final plan and billing state;
payment/webhook records;
legal acceptance records;
subscription-consent records;
and security or audit information.

User Content associated with an active deleted account is intended to be removed from active application systems according to the account-deletion process. Information maintained independently by third-party providers may remain subject to their own retention obligations and policies. Deletion from active systems does not necessarily mean immediate removal from every backup, security log, legally required record, or independent third-party system.

16. Your Responsibility for Sensitive Information

InspoVault is not designed for highly sensitive or specially regulated information. Do not submit information such as:

Social Security numbers;
government ID numbers;
plaintext passwords;
complete payment-card numbers;
bank credentials;
protected health information;
biometric identifiers;
genetic data;
or other highly sensitive information requiring specialized controls, unless the Company has expressly agreed in writing to support that category of information.

17. Security

We use administrative, technical, and organizational measures intended to protect information against unauthorized access, misuse, alteration, or disclosure. Measures may include:

authentication;
password-security controls;
email verification;
server-side authorization;
role and administrative-access controls;
database row-level security;
least-privilege database access;
service-role isolation;
usage and request controls;
access logging;
operational monitoring;
and account-deletion safeguards.

No security measure or method of electronic storage or transmission is completely secure. Accordingly, we cannot guarantee absolute security.

18. Your Privacy Choices and Requests

Depending on applicable law, you may have rights regarding personal information, which may include the right to request:

confirmation that we process your personal information;
access;
correction;
deletion;
a copy or portability of certain information;
information regarding categories of information collected or disclosed;
restriction of certain processing where provided by law;
opt-out rights where applicable;
and an appeal of a denied privacy request where required by applicable law.

You may submit a privacy request to: support@inspovault.com We may need to verify your identity before fulfilling a request. We may deny or limit a request where permitted by law, including where we cannot reasonably verify identity or where an exception applies. If applicable law gives you a right to appeal our decision, you may submit an appeal to the same email with the word "Privacy Appeal" in the subject line. We will not unlawfully discriminate against you for exercising applicable privacy rights.

19. State Privacy Laws

Certain U.S. state privacy laws apply only when specified statutory thresholds or conditions are met. Whether a particular law applies to Seek & Swell, LLC may depend on matters such as:

jurisdiction;
number of consumers whose information is processed;
type of processing;
revenue;
sale or sharing practices;
and other statutory thresholds.

Where an applicable law provides you a privacy right, we will honor a valid request as required by that law. Nothing in this Policy is intended to limit a non-waivable privacy right.

20. Global Privacy Control and Advertising Opt-Out Signals

Because we do not currently sell personal information or share personal information for cross-context behavioral advertising as described above, browser-based sale/share opt-out signals do not presently change those practices. If our practices change in a way that makes such signals legally applicable, we will implement appropriate handling as required.

21. Third-Party Websites and Platforms

InspoVault may allow you to save or interact with links from third-party websites or platforms. Those services are controlled by their respective operators. Their privacy practices are governed by their own policies, not this Policy. We are not responsible for the privacy practices of independent third parties.

22. International Access

InspoVault is currently offered only in the United States. We do not currently market or intentionally offer the Service to persons outside the United States. If information is nevertheless processed outside the United States through a service provider, it may be subject to the laws of the jurisdiction where processing occurs. Before intentionally expanding the Service internationally, we may revise this Policy and implement additional legal and operational measures appropriate to those jurisdictions.

23. Law Enforcement and Legal Process

We may preserve or disclose information when we reasonably believe doing so is necessary to:

comply with a valid subpoena, court order, warrant, or other legal process;
satisfy applicable law;
investigate suspected fraud or illegal activity;
protect the security of the Service;
enforce our agreements;
or establish, exercise, or defend legal claims.

Where legally permitted and appropriate, we may challenge requests we believe are invalid or overbroad.

24. Business Transfers

If Seek & Swell, LLC is involved in a merger, acquisition, financing, sale of assets, reorganization, bankruptcy, restructuring, or similar transaction, personal information may be reviewed, disclosed, or transferred as part of that transaction, subject to applicable law.

25. Changes to this Privacy Policy

We may update this Policy from time to time. The Effective Date identifies the current version. If we make material changes, we may provide notice by:

email;
a notice within the Service;
requesting renewed acknowledgment where appropriate;
or another method permitted by law.

Where applicable law requires consent rather than notice, we will obtain the required consent.

26. Contact

Questions or privacy requests may be directed to:

Seek & Swell, LLC Operator of InspoVault support@inspovault.com