Privacy Policy

1. Scope

This Privacy Policy applies to Davisville Labs LLC, davisvillelabs.com, Compass, company contact and signup forms, account and billing features, and other Davisville Labs services that link to this policy. A Davisville Labs product on another domain may also provide a product-specific privacy notice. If a product-specific notice conflicts with this policy, the more specific notice controls for that product.

2. Information we collect

Depending on the service, we may collect the following categories of information:

• Identifiers and contact information: name, email address, account identifier, login method, and contact details you provide.
• Account and authentication data: account status, authentication events, session information, and security-related records.
• Compass student and family data: grade level, interests, selected projects, project progress, notes, reflections, saved links, portfolio information, major exploration, counselor or family relationship information, and other content entered into Compass.
• Commercial and billing information: subscription plan, transaction status, payment confirmation, billing metadata, invoices, cancellation status, and related records. Full card numbers are handled by payment processors rather than stored directly by Davisville Labs.
• Research-service request data: prompts, identifiers, research parameters, API or MCP requests, evidence requests, response metadata, payment authorization metadata, and operational logs associated with agent-facing services.
• Communications: emails, support requests, feedback, form submissions, and other messages you send us.
• Device, usage, and technical data: IP address, browser, device type, referral information, pages viewed, timestamps, approximate location derived from network information, analytics events, performance data, error logs, and security logs.

3. Information we generally ask you not to provide

Unless a service specifically requests it, do not submit Social Security numbers, government identification numbers, full payment-card details, account passwords, private keys, seed phrases, medical records, highly sensitive legal information, or other information that is unnecessary for the service. Davisville Labs products are not designed as repositories for those categories of information.

4. How we use information

We may use information to provide and personalize services; authenticate users; save user work and preferences; process purchases and subscriptions; deliver paid research operations; send service, billing, security, and account communications; answer support requests; detect fraud or abuse; enforce terms; maintain security; troubleshoot and improve products; measure aggregate usage; develop new features; comply with law; preserve business records; and establish, exercise, or defend legal claims.

5. AI-supported features and agent services

Some products use AI-supported features, and some services are intended for autonomous software agents. Information submitted to an AI feature may be processed by Davisville Labs or a service provider to generate the requested output, operate the feature, secure the service, and troubleshoot performance. Users should not submit sensitive information to an AI feature unless the product specifically requests it and the user is authorized to provide it.

6. Students and minors

Compass is only for students in grades 9 through 12 who are age 13 or older. For students under 18, a parent or legal guardian should purchase, approve, and supervise use as appropriate. Davisville Labs does not offer an under-13 Compass enrollment or parental-consent pathway and does not knowingly accept personal information from children under 13 through Compass. If we learn that information from a child under 13 was submitted to Compass, we will take reasonable steps to close or restrict the related access and delete or otherwise handle the information as required by law.

Compass uses a parent or guardian eligibility confirmation rather than asking students to submit a birth date solely for age screening.

7. Cookies, analytics, and similar technology

We may use cookies, local storage, session technology, analytics, and similar tools for authentication, preferences, security, fraud prevention, product functionality, performance, and measurement. Davisville Labs currently uses Google Analytics on portions of its websites. Analytics can process information such as pages viewed, referral source, browser or device information, approximate location, and general usage patterns.

Browser "Do Not Track" signals are not governed by a single uniform standard, so our sites may not respond to every DNT signal. Where applicable law requires recognition of a legally valid opt-out preference signal, such as Global Privacy Control, Davisville Labs will handle that signal as required by law for covered processing.

8. Service providers and disclosures

We may disclose information to vendors and service providers that help us operate our services, such as hosting and security providers, database and authentication providers, payment processors, email providers, analytics providers, and AI infrastructure providers. Depending on the product, providers may include Cloudflare, Supabase, Stripe, Google, Resend, and AI-service providers. We may also disclose information when reasonably necessary to comply with law, respond to lawful process, protect users or systems, investigate abuse, enforce agreements, complete a financing or business transaction, or protect legal rights.

9. Sale or sharing of personal information

Davisville Labs does not operate a business model based on selling personal information for money. We do not knowingly sell personal information of minors. If any current or future activity constitutes a "sale" or "sharing" of personal information under an applicable privacy law, we will provide the notices, choices, and opt-out mechanisms required by that law.

10. Payments

Payments may be processed by Stripe or another payment provider. Davisville Labs may receive transaction identifiers, customer identifiers, payment status, subscription status, plan details, invoices, and related checkout metadata. Payment processors handle payment credentials under their own terms and security practices.

11. Data retention

We retain information only as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining accounts, honoring user choices, processing transactions, meeting tax and accounting obligations, resolving disputes, enforcing agreements, maintaining security, preventing fraud, and preserving necessary business records. Retention periods vary by data type, product, legal requirement, and operational need. We may retain deidentified or aggregated information that no longer reasonably identifies a person.

12. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the service and information involved. No online service, database, payment system, network, or security measure can guarantee absolute security. You are responsible for safeguarding your own credentials and promptly notifying us of suspected account compromise.

13. California privacy disclosures and rights

Davisville Labs is based in California. California's Online Privacy Protection Act requires covered commercial websites and online services collecting personally identifiable information from California consumers to post and follow a privacy policy. This page is intended to provide that company-level notice.

Depending on which California privacy laws apply to Davisville Labs and to a particular request, California residents may have rights concerning access or knowledge, correction, deletion, portability, opting out of covered sale or sharing, limiting certain uses of sensitive personal information, and non-discrimination for exercising privacy rights. Some rights, exceptions, and verification requirements depend on the law and the circumstances.

To submit a privacy request, email hello@davisvillelabs.com with the subject "Privacy Request." We may need information reasonably necessary to verify identity, authority, account ownership, or the scope of the request. An authorized agent may submit a request where applicable law permits, subject to legally permitted verification of the agent's authority.

14. Other state and international rights

Residents of other jurisdictions may have additional privacy rights. Where an applicable law gives you rights that are not described here, Davisville Labs will respond as required by that law. We may decline or limit a request when a legal exception applies, when we cannot reasonably verify the request, or when retention is required or permitted for legal, security, fraud-prevention, transactional, or other legitimate purposes.

15. Third-party links and services

Our services may link to websites, data sources, authentication providers, payment services, or other third parties. Their privacy practices are governed by their own policies, not this policy, except to the extent Davisville Labs is legally responsible for its own use of a provider.

16. Business transfers

If Davisville Labs or a product is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law and appropriate confidentiality or privacy protections.

17. Changes to this policy

We may update this Privacy Policy as products, providers, and laws change. We will post the revised policy and update the effective date. If law requires additional notice or consent for a material change, we will provide it.

18. Contact

Davisville Labs LLC
California, United States
hello@davisvillelabs.com