// LEGAL
Last updated: July 2026 · Compliant with UK GDPR and Data Protection Act 2018
Black Vault Intelligence Ltd ("BVI") is the data controller for personal data collected through this platform. We are registered with the Information Commissioner's Office (ICO) in the UK.
Contact: privacy@blackvaultintgelligence.com
BVI currently operates in the United Kingdom only. US and Canadian services are coming soon.
Account Data
Full name, email address, password (hashed), country, city, business name, business type, subscription tier.
Financial Data
Transaction records you upload or enter manually — amounts, dates, descriptions, categories. This data is used solely to power your AI agents.
AI Chat Data
Messages you send to our AI agents (FINN, SAGE, ARIA, MAX, REX) and the responses generated. Stored to maintain conversation history.
Payment Data
Subscription status, billing cycle, Stripe customer ID. We do not store card numbers — all payment data is held by Stripe.
Technical Data
IP address, browser type, device information, pages visited, session data. Used for security and platform improvement.
| PURPOSE | LEGAL BASIS |
|---|---|
| Providing the BVI platform and AI agents | Contract performance |
| Processing payments and managing subscriptions | Contract performance |
| Sending account and service emails | Contract performance |
| Improving our AI models and platform | Legitimate interests |
| Security monitoring and fraud prevention | Legitimate interests |
| Legal compliance and record keeping | Legal obligation |
| Marketing emails (with your consent) | Consent |
We do not sell your data. We share it only with the following sub-processors to operate the platform:
Supabase
Database and authentication · EU/US
Anthropic
AI agent processing (Claude) · US
Stripe
Payment processing · US/EU
Vercel
Platform hosting · US/EU
Data transfers outside the UK are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.
Right of Access
Request a copy of all data we hold about you
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Delete your account and personal data
Right to Restriction
Limit how we process your data
Right to Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw marketing consent at any time
Right to Complain
Lodge a complaint with the ICO at ico.org.uk
To exercise any right, email privacy@blackvaultintgelligence.com. We will respond within 30 days.
We use essential cookies to keep you logged in and functional cookies to remember your preferences. See our Cookie Policy for full details.
We protect your data using encryption in transit (TLS) and at rest, access controls, and regular security monitoring. Financial data is stored in isolated, access-controlled databases.
In the event of a data breach that affects your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.
We may update this Privacy Policy. We will notify you by email of any material changes at least 30 days before they take effect.
Data Controller: Black Vault Intelligence Ltd
Email: privacy@blackvaultintgelligence.com
If you are unhappy with how we handle your data, you have the right to complain to the ICO: ico.org.uk/make-a-complaint