JV8.AI — Privacy Policy

Effective Date: June 1, 2025
Operated by: KCP7 LLC (doing business as JV8.ai)
1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801
https://jv8.ai

This Privacy Policy explains how KCP7 LLC, operating as JV8.ai ("JV8," "we," "us," or "our"), collects, uses, stores, shares, and protects your personal information when you use our website, platform, and services at https://jv8.ai (the "Platform"). By creating an account or using the Platform, you agree to the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, complete onboarding, or use the Platform, we collect:

• Full name and display name
• Email address
• Password (stored in encrypted form via Supabase Auth — we never store plaintext passwords)
• Profile information including biography, location, LinkedIn URL, and website URL
• Professional network segment descriptions — written descriptions of your professional network (e.g., "CPAs in the Mountain West") that you enter manually. We do not scrape your social media contacts.
• Business offer details including your products, services, pricing, and commission structures
• Answers to daily AI training questions about your professional network and business
• Referral codes and affiliate relationship data
• Payment information (processed directly by Stripe — we do not store full card numbers)
• Commission payout information including your Stripe Connect account details
• Communications you send to us via email or support channels

1.2 Information We Collect Automatically

When you visit or use the Platform, we automatically collect:

• IP address and approximate geolocation
• Browser type, device type, and operating system
• Pages visited, features used, and time spent on the Platform
• Referral source and referral codes present in URLs
• Cookies and similar tracking technologies (see Section 7)
• Email engagement data such as open rates and click-throughs via Resend

1.3 Information from Third-Party Services

We receive information from third parties in the following circumstances:

• Stripe: payment status, subscription status, and billing events
• Social media platforms (future feature): if you choose to connect a social media account, we will collect profile data and network information as permitted by that platform's API and your authorization. You will be clearly notified before any social account connection is initiated.
• Third-party offers: if you choose to accept an invitation to explore a third-party opportunity presented on the Platform, that third party may share information about your interaction with us

2. How We Use Your Information

We use the information we collect to:

• Create and manage your member account
• Operate the AI matching engine — your offer data and network segment descriptions are processed by the Anthropic Claude AI to generate personalized match suggestions
• Deliver your daily match suggestions and weekly digest emails via Resend
• Process your subscription payments and manage billing through Stripe
• Calculate, track, and pay affiliate commissions through Stripe Connect
• Serve daily AI training questions and process your answers to improve match quality
• Award badges, calculate XP points, and maintain leaderboard rankings
• Track referral relationships and populate the affiliate commission tree
• Send you transactional emails including welcome messages, trial reminders, payment notifications, and commission statements
• Send you optional third-party opportunity invitations (you must affirmatively opt in to receive these and to share your information with any third party)
• Detect and prevent fraud including suspicious referral patterns
• Comply with legal obligations
• Improve and develop the Platform

3. How We Share Your Information

3.1 Service Providers

We share your information with trusted third-party service providers who help us operate the Platform:

3.2 Third-Party Opportunities

From time to time, we may present you with invitations to explore offers or services from third-party partners. We will never share your personal information with a third party without your explicit, affirmative opt-in consent for that specific opportunity. Clicking "I'm Interested" or a similar button on a third-party offer constitutes your consent to share your name, email, and relevant profile information with that third party. You may decline any invitation without any effect on your membership.

3.3 Other Members (Limited)

When the AI generates a match suggestion involving your offer and another member's network, the following limited information may be shared with the other member: your offer title, description, and the match suggestion content. Your full contact details are never shared without your explicit action.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of JV8, our members, or the public.

3.5 Business Transfers

If KCP7 LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform and comply with our legal obligations.

• Account data: retained for the life of your account plus 3 years after cancellation
• Commission and transaction records: retained for 7 years for tax and legal compliance
• Match suggestion history: retained for 2 years
• Email logs: retained for 1 year
• Deleted accounts: core account data is deleted within 30 days of a deletion request; anonymized statistical data may be retained indefinitely

5. Your Rights and Choices

5.1 All Members

Regardless of your location, you have the following rights:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your account and personal data (subject to legal retention requirements)
• Portability: request your data in a structured, machine-readable format
• Opt-out of third-party offers: you may opt out of receiving third-party opportunity invitations in your account settings at any time
• Opt-out of marketing emails: use the unsubscribe link in any email. Note that transactional emails such as match suggestions, commission statements, and billing notices cannot be opted out of while your account is active as they are core to the service.

5.2 European Economic Area and United Kingdom (GDPR)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: we process your data based on contract performance (to provide the service you signed up for), legitimate interests (fraud prevention, platform improvement), consent (third-party offers, optional features), and legal obligation (tax and financial records)
• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

Our legal representative for GDPR purposes can be contacted at: info@jv8.ai

5.3 California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act grants you the following additional rights:

• Right to know: the categories of personal information collected, the purposes for collection, and whether it is sold or disclosed
• Right to delete: request deletion of personal information we have collected
• Right to opt out of sale: we do not sell your personal information to third parties. We do not sell data.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• All data is encrypted in transit using TLS/HTTPS
• Passwords are hashed and never stored in plaintext
• Database access is restricted by row-level security policies
• API keys and secrets are stored in secure environment vaults and never exposed in frontend code
• Stripe handles all payment card data — we are not PCI-DSS compliant for card storage because we do not store card data
• Regular security reviews are conducted as the platform scales

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you within 72 hours as required by applicable law.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: required for the Platform to function, including authentication session tokens and security cookies. These cannot be disabled.
• Analytics cookies: we may use anonymized analytics to understand how members use the Platform and improve it. These do not identify you personally.
• Referral tracking: we store referral codes in your browser's localStorage to attribute signups to the correct affiliate. This data is used solely for commission calculation.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the Platform.

8. Children's Privacy

The JV8.ai Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Platform or submit any personal information. If we become aware that we have collected personal information from a person under 18, we will delete that information promptly. If you believe a minor has submitted information to us, please contact us at info@jv8.ai.

9. International Data Transfers

KCP7 LLC is based in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

For transfers from the European Economic Area or United Kingdom, we rely on Standard Contractual Clauses approved by the European Commission as the lawful transfer mechanism.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes.

The current effective date is always shown at the top of this page.

11. Use of Google APIs and Gmail Data

JV8 uses Google APIs to provide optional integration with your Gmail account. This section describes what data we access, how we use it, and how it is protected. This integration is entirely opt-in — JV8 functions fully without it.

What we access

When you choose to connect your Gmail account, you grant JV8 access only to the https://www.googleapis.com/auth/gmail.send scope. This scope allows applications to send mail on your behalf. It does not allow JV8 to read, modify, or delete any email in your inbox, sent folder, drafts, or any other Gmail data.

We also retrieve your basic Google profile email address so we can label the connected account in our UI ("Connected as you@example.com").

How we use this access

The Gmail send scope is used exclusively to send invitation emails that you, the user, have personally reviewed inside JV8. Each send requires an explicit action by you — JV8 never sends email automatically without your direct, per-message or per-batch authorization. The content of every message is composed in JV8 and reviewable before sending.

How we store this data

JV8 stores only the following Google-related data, encrypted at rest:

• The OAuth access token and refresh token issued by Google
• Your connected Google account's email address
• A history record of which messages JV8 sent on your behalf (the recipient email and a Google-issued message ID — not the message body)

We do not store the body of sent messages after the send transaction completes.

How this data is shared

We do not share Gmail data — or any data accessed via Google APIs — with any third party. We do not use it to train AI or machine-learning models. We do not use it for advertising. We do not transfer it to other applications.

How you can revoke access

You can disconnect JV8 from your Google account at any time:

• Inside JV8: go to /dashboard/recruit → Connections → click "Disconnect" on the Gmail card.
• Or via Google: visit https://myaccount.google.com/permissions → find JV8 → Remove access.

Revoking access immediately invalidates the OAuth tokens JV8 holds for your account. No further sends are possible until you reconnect.

Limited Use disclosure

JV8's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Questions

If you have questions about how JV8 handles your Google data, contact us at info@jv8.ai.

12. Contact Us

Privacy Inquiries — KCP7 LLC (JV8.ai)
Email: info@jv8.ai
Legal: info@jv8.ai
Mail: 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801
Website: https://jv8.ai

We will respond to all privacy requests within 30 days.