Valley View Networks - Privacy Policy
Effective date: July 6, 2026 Last updated: July 6, 2026
We wrote this policy to be readable, not to bury you in legalese. It explains what we collect, why, who we share it with, how long we keep it, and the rights you have over your data.
1. Who is responsible for your data
Valley View Networks LLC ("VVN", "we", "us") is the data controller for the personal data described here. You can reach us at:
- Privacy, data, and legal requests: legal@valleyviewnetworks.com
- Location: State of Texas, United States (VVN operates online and does not maintain a public office address)
- EU/UK representative (if applicable under GDPR Art. 27 / UK GDPR): not currently appointed
2. The data we collect
a. Data you give us
- Account data: name, email address, username/handle, and password (stored only as a salted bcrypt hash - we never see your plaintext password).
- Profile data: headline, bio, skills, profile photo, and the other details you add to your profile.
- Content you create: the projects, documents, and files you create in the Platform.
- Calendar data: events you create or sync.
- Communications: messages you send us for support or other requests.
b. Data we collect automatically
- Usage and device data: pages and features used, interactions, approximate location derived from IP, browser/device type, and similar technical data.
- Cookies and similar technologies: including a strictly-necessary session cookie used to keep you logged in, plus any analytics/preference cookies you consent to. See Section 8 (Cookies).
- Security logs: records used to detect abuse and protect accounts (we deliberately exclude message content, passwords, tokens, and payment details from logs).
c. Data from third parties
- Sign-in providers (Google, Microsoft): if you sign in with them, we receive your basic profile (name, email, photo) and, with your consent, OAuth tokens to sync your calendar.
3. Sensitive data
Please do not post sensitive personal data (e.g. about health, race, religion, or political views) in public areas unless you intend it to be public.
4. Why we use your data, and our legal basis (GDPR)
| What we use it for | Data involved | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account | Account, profile | Contract |
| Providing core features (your profile, projects, documents, and the tools you use) | Profile, content | Contract |
| Calendar sync | Calendar data, OAuth tokens | Contract + consent for the integration |
| Isaac AI features | Session-scoped content, profile signals | Legitimate interest, and explicit consent for Private Processing features |
| Security, fraud prevention, moderation | Usage, security logs | Legitimate interest / legal obligation |
| Analytics and improving the Platform | Usage data | Legitimate interest (or consent where required) |
| Sending service and (optional) marketing emails | Account data | Legitimate interest / consent for marketing |
| Complying with law and enforcing our Terms | As needed | Legal obligation / legitimate interest |
Where we rely on legitimate interest, we have balanced it against your rights, and you can object (Section 10). Where we rely on consent, you can withdraw it at any time.
5. Isaac AI and "Private Processing"
Isaac is VVN's AI assistant. How it handles your data:
- Always user-initiated and session-scoped. Isaac only processes a conversation when a participant enables it, and only the messages from the point it was enabled onward. It does not read prior or pre-enablement history. Disabling and re-enabling Isaac resets its context.
- Third-party AI provider. Isaac is powered in part by Anthropic. Session-scoped content needed for the requested feature is processed by Anthropic as our processor under a data-processing agreement.
- Private Processing (ephemeral) features. Certain Isaac outputs are generated on demand, delivered only to you, not stored in our database, and not used to train the AI provider's models.
- Automated processing. Where an Isaac feature involves automated processing that significantly affects you, we disclose it and you can request human review by contacting legal@valleyviewnetworks.com.
- Consent and control. Isaac's Private Processing features require a separate, affirmative opt-in (never pre-checked), and you can revoke it any time in Settings. We log your consent with a timestamp.
This reflects our internal Private Processing commitments and is binding on how we operate Isaac.
6. Who we share data with
We do not sell your personal data. We share it only with service providers ("processors") who help us run the Platform, and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel | Hosting / delivery of the Platform | Technical + request data |
| Neon (PostgreSQL) | Primary database | Account, profile, content metadata |
| Amazon Web Services (S3) | File and media storage | Files you upload (encrypted at rest) |
| Pusher | Real-time notifications | Delivery metadata in transit |
| Anthropic | Powers Isaac AI | Session-scoped content (see Section 5) |
| Google / Microsoft | Sign-in and calendar sync | Profile, OAuth tokens, calendar data |
| Email provider | Transactional and account emails | Email address, message content |
| In-house analytics, and Google Analytics where used | Product analytics | Usage data |
Each processor is bound by a data-processing agreement requiring appropriate security and confidentiality. We may also disclose data: to comply with law or valid legal requests; to enforce our Terms; to protect the rights, safety, and security of users, the public, or VVN; and in connection with a merger, acquisition, or sale of assets (with notice where required).
Other users see the data you choose to share with them - for example, your public profile fields.
7. International transfers
Our providers may process data in countries outside yours, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards - such as the EU Standard Contractual Clauses (and the UK Addendum), adequacy decisions where available, or other lawful transfer mechanisms. You can ask us for more detail at legal@valleyviewnetworks.com.
8. Cookies and similar technologies
We use a strictly-necessary session cookie to keep you signed in (this is required for the Platform to work). With your consent where required, we may use additional cookies for analytics and preferences. EU/UK users are shown a cookie consent banner and can manage non-essential cookies at any time. See our Cookie Policy for the full list.
9. Your rights
Depending on where you live, you have some or all of these rights. We honor them for all users where practical.
Under the GDPR / UK GDPR you can:
- Access a copy of your personal data (we provide a full export - see below).
- Rectify inaccurate data (edit most of it directly in your profile).
- Erase your data ("right to be forgotten") - see Section 11.
- Restrict or object to processing based on legitimate interest, including analytics and AI processing.
- Port your data in a machine-readable format.
- Withdraw consent at any time (e.g. for Isaac Private Processing, marketing, or integrations) without affecting prior processing.
- Not be subject to solely automated decisions that significantly affect you without the right to human review (see Section 5).
- Complain to a regulator. The United States has no single privacy supervisory authority; you may contact the U.S. Federal Trade Commission (FTC) or the Office of the Texas Attorney General, and California residents may contact the California Privacy Protection Agency (CPPA). If you are in the EU/UK, you may contact your local supervisory authority.
Under the CCPA/CPRA (California) and similar US state laws you can:
- Know what categories of personal information we collect and why.
- Access and delete your personal information.
- Correct inaccurate personal information.
- Opt out of "sale" or "sharing" of personal information. VVN does not sell your personal information, and we provide a "Do Not Sell or Share My Personal Information" link in the footer regardless.
- Non-discrimination - we will not deny service or charge you differently for exercising your rights.
How to exercise your rights: use the in-Platform tools (export and deletion in Settings) or email legal@valleyviewnetworks.com. We respond within 30 days (extendable where the law allows). We may need to verify your identity first.
- Data export (access / portability): request a full export of your account data, profile, projects, documents, and calendar events as a downloadable file.
10. How long we keep data (retention)
| Data | Retention |
|---|---|
| Account & profile | Until you delete your account |
| Calendar events | Up to 1 year after deletion |
| Uploaded files (S3) | Until you delete them or close your account |
| Isaac Private Processing summaries | Ephemeral - never stored |
| Security logs | A limited period for security and fraud prevention |
11. Deleting your account
You can delete your account from Settings. Deletion runs with a 14-day grace period during which you can cancel. After that, we erase your personal data, including your account record, profile, uploaded files in S3, and OAuth tokens. Some data may be retained where the law requires or for legitimate security purposes. Backups are purged on our normal cycle.
12. How we protect your data
- Encryption in transit: all traffic uses HTTPS/TLS; real-time uses secure WebSockets; HSTS is enforced.
- Encryption at rest: passwords are bcrypt-hashed; sensitive tokens and 2FA secrets are encrypted at the application layer; uploaded files use S3 server-side encryption.
- Multi-factor authentication (MFA): you can turn on app-based two-factor authentication for your account, and we email you when a new device signs in.
- Access controls & minimization: we limit who and what can access personal data, and we deliberately keep secrets and sensitive details out of logs.
- No system is perfectly secure, but we maintain technical and organizational measures appropriate to the risk, and we have an incident-response process (including breach notification to authorities within 72 hours where GDPR requires, and to affected users where the risk is high).
13. Children
The Platform is for users 16 and older. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact legal@valleyviewnetworks.com and we will delete it.
14. Changes to this policy
We may update this policy. If changes are material, we'll notify you (by email or in-Platform notice) before they take effect. We review this policy at least annually. The "Last updated" date at the top shows the current version.
15. Contact us
- Privacy, data, and legal requests: legal@valleyviewnetworks.com
- Location: Valley View Networks LLC, State of Texas, United States
You also have the right to lodge a complaint with a regulator (in the U.S., the FTC or the Texas Attorney General; California residents, the CPPA).