The Clover UniversityThe Clover University

Privacy Policy

Last updated: April 26, 2026

This Privacy Policy explains how Visualvol LLC ("Visualvol", "we"), the operator of The Clover University (the "Service"), collects, uses, and shares information when you use the Service. We are the data controller for your personal data. Our registered office is 30 N Gould St Ste R, Sheridan, WY 82801, United States.

1. Information we collect

You provide directly

  • Account information: email address, password (hashed), display name, optional avatar.
  • Profile data: institution, study field, language preference, theme preference (optional).
  • Content you upload: study materials (PDFs, notes, images), conversations, generated flashcards/exams ("Your Content").
  • Payment information (Pro users): processed by Stripe; we receive a payment status and a customer ID, but not your full card number.

Collected automatically

  • Usage data: feature usage counts (chat messages, flashcards generated, etc.) for rate limiting and product improvement.
  • Device and connection info: IP address, browser type, OS — used for security and analytics.
  • Cookies: session cookies for authentication. We do not use third-party advertising cookies.

2. How we use your information

  • To provide and maintain the Service.
  • To process AI requests on your behalf using Google Gemini (your prompts and document content are sent to Google to generate responses).
  • To prevent abuse, fraud, and enforce our Terms.
  • To bill you for paid features.
  • To send transactional emails (account confirmation, password resets, billing receipts).
  • To improve the Service through aggregated, anonymized analytics.

We do not use Your Content to train AI models. We do not sell your data.

3. Third-party processors

We use the following processors to provide the Service:

  • Supabase (USA) — database, authentication, file storage. Hosts your account, content, and metadata.
  • Vercel (USA) — application hosting and content delivery.
  • Google Gemini API (USA) — AI processing of your prompts and content. Per Google's API terms, your data sent through the API is not used to train Google models. Google Gemini API terms.
  • Stripe (USA) — payment processing for Pro subscriptions.
  • Sentry (USA) — error monitoring (may include anonymized stack traces, request URLs, user IDs).

Each processor is contractually bound by its own terms and data processing addenda to handle your data only as instructed and in compliance with applicable data protection laws.

4. International data transfers

Our processors are located in the United States. If you are in the European Economic Area, the United Kingdom, or other regions with data protection laws, your data is transferred to the US under appropriate safeguards (standard contractual clauses where required).

5. Your rights

Depending on your location, you may have rights to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Restrict or object to certain processing.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

You can delete your account at any time from settings. For other requests, email info@visualvol.com. We will respond within 30 days.

6. Data retention

  • Active accounts: data retained for as long as the account exists.
  • Deleted accounts: data deleted within 30 days of account deletion, except where retention is required by law (e.g., tax records for paid subscriptions).
  • Backups: backups are rotated and overwritten within 30 days.
  • Server logs: retained for up to 90 days for security and debugging.

7. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS), encryption at rest, row-level access controls, and least-privilege access for our team. No system is perfectly secure; if we discover a breach affecting your data, we will notify you without undue delay.

8. Children's privacy

The Service is not intended for children under 16. If you are a minor under the age of majority in your jurisdiction, parental or legal guardian consent is required where mandated by local law. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, contact us immediately at info@visualvol.com.

9. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated by email or in the Service. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Privacy questions or rights requests: info@visualvol.com.

Postal address: Visualvol LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.

Privacy Policy | The Clover University