Privacy Policy

1 Introduction

Neville Ventures, LLC ("Company," "we," "us," or "our") operates the website nevilleventures.com and the AI Training Camp platform, a training product that provides hands-on AI proficiency exercises through a guided browser extension.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website, purchase or use the AI Training Camp platform, or interact with any of our related services (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• On the nevilleventures.com website.
• Through the AI Training Camp platform, including the sidebar browser extension and facilitator dashboard.
• In email, text, and other electronic messages between you and us.
• Through payment and provisioning systems associated with our Services.

This Privacy Policy is incorporated into and forms part of our Terms of Use and End User License Agreement. Please read this policy carefully to understand our practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this Privacy Policy.

2 Children Under 14

Our Services are not intended for children under 14 years of age. No one under age 14 may provide any personal information to or through the Services. We do not knowingly collect personal information from children under 14. If you are under 14, do not use or provide any information on our website or through the AI Training Camp platform.

If we learn we have collected or received personal information from a child under 14 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 14, please contact us at contact@nevilleventures.com.

3 Information We Collect

We collect several types of information from and about users of our Services:

3.1 Information You Provide Directly

• Participant Information: Your name (entered during onboarding), organization type selection, training path selection, and a system-assigned participant ID.
• Contact Information: Your email address when you fill out a contact form, schedule a consultation, or purchase access to AI Training Camp.
• Payment Information: When you make a purchase, payment details are collected and processed by our third-party payment processor. We do not store your credit card number or full payment card details on our servers. We receive from our payment processor: transaction IDs, subscription status, payment amounts, and the email address associated with the transaction.
• Consent Records: We record your consent timestamps and consent status when you agree to our terms and this Privacy Policy during platform onboarding.
• Communications: Records of correspondence if you contact us via email, contact forms, or other channels.

3.2 Information Collected Automatically

• Exercise Progress Data: Which exercises you have started, are in progress, or have completed; individual step completion status; completion timestamps; and pre-training and post-training assessment scores.
• Session Data: Your current exercise state, onboarding status, and consent records, stored locally in your browser.
• Access Code Data: A cryptographic hash of your access code, your assigned cohort, and validation timestamp. Your access code is transmitted to our validation server via HTTPS for verification.
• Website Analytics: Browser type and version, operating system, referring URL, pages visited, time spent, and IP address when visiting nevilleventures.com.

4 Data Collection by the Browser Extension

The AI Training Camp sidebar is a Chrome browser extension that runs in your personal browser. The extension collects and stores the following data locally on your device:

• Exercise Progress: Which exercises and steps you have completed, stored in your browser's local storage.
• Onboarding State: Your name, organization type, selected training path, and consent records.
• Access Validation: A SHA-256 hash of your access code (not the code itself), your assigned cohort, and the timestamp of your last validation.

Server Communication

The extension communicates with our servers only for the following purposes:

• Access Code Validation: When you enter an access code, it is transmitted via HTTPS to our validation server. The server responds with a validation result and cohort assignment.
• Data Downloads: When you request training data, files are downloaded from our cloud storage via HTTPS.

The extension does not maintain a persistent server connection. All data is stored locally in your browser and is not transmitted to our servers except as described above.

5 External AI Tools

AI Training Camp exercises instruct you to use external AI tools (such as ChatGPT, Gemini, or similar services) on your own device. These tools are not integrated into or operated by the AI Training Camp platform.

• We do not intercept, log, or store any prompts you submit to external AI tools.
• We do not intercept, log, or store any responses you receive from external AI tools.
• Your interactions with external AI tools are governed by those tools' respective privacy policies and terms of service.

6 Automatic Collection Technologies

Browser Extension

The AI Training Camp sidebar is a Chrome browser extension that runs in your browser. It stores exercise progress, onboarding state, and access validation data in your browser's local storage (chrome.storage.local). The extension does not capture screenshots, record your screen, or access your browsing history.

Cookies and Web Technologies

Our website (nevilleventures.com) uses minimal cookies. Third-party services embedded in our website (such as payment forms) may set their own cookies subject to their respective privacy policies. You can control cookie behavior through your browser settings.

The AI Training Camp browser extension does not use cookies. Session state is maintained through the browser's local storage on your device.

7 Third-Party Service Providers

Our Services use the following categories of third-party service providers, each of which may process information as described in their own privacy policies:

AI Service Providers

We do not directly integrate third-party AI services into the browser extension. Training exercises instruct participants to use external AI tools (such as ChatGPT or Gemini) independently. Your interactions with these tools are governed by their respective privacy policies.

Payment Processing

Our third-party payment processor handles all payment transactions. The payment processor collects payment card details, billing address, and related financial information directly. We do not have access to your full card number. Please refer to the payment processor's privacy policy for details on their data practices.

Cloud Hosting

Our access code validation API and training data downloads are hosted on cloud infrastructure. The hosting provider may collect infrastructure-level logs (IP addresses, connection metadata) as part of its platform operations.

Email Delivery

We use a third-party email delivery service to send access credentials and onboarding instructions to participants. The email service receives the recipient's email address and the message content.

Provisioning Infrastructure

We use cloud services for access code management and cohort assignment, including serverless functions and a managed database.

We do not control these third parties' practices. If you have questions about a specific provider's practices, contact us and we will direct you to the relevant provider's privacy policy.

8 How We Use Information

We use information that we collect about you or that you provide to us, including any personal information:

• To deliver and manage your AI Training Camp session, including guiding you through exercises and tracking your progress.
• To display your progress on the facilitator dashboard so your instructor can guide and support you during training.
• To process your payment and send purchase confirmations, access credentials, and session details.
• To send administrative communications such as session reminders, access instructions, and service updates.
• To measure training effectiveness by comparing pre-training and post-training assessment scores.
• To improve the quality and content of our exercises, training paths, and platform through anonymized and aggregated analytics.
• To detect and address technical issues, security incidents, or fraudulent activity.
• To fulfill any other purpose for which you provide the information.
• For any other purpose with your consent.

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.

9 Information Disclosure

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this Privacy Policy:

• To Service Providers: To third-party vendors, contractors, and service providers who perform services on our behalf (payment processing, cloud hosting, AI services, email delivery) and need access to your information to carry out their work. These providers are contractually obligated to use your information only for the purposes of providing services to us.
• To Facilitators: Your name, exercise progress, and assessment scores may be shared with authorized facilitators and instructors during and after your training session. This is essential to the training experience.
• To Your Employer or Sponsor: If your AI Training Camp access was purchased by or on behalf of your employer or sponsoring organization, we may share your training progress, assessment scores, and completion status with the authorized representative of that organization. We do not share verbatim AI interaction details with employers or sponsors. You will be informed during onboarding if your session is employer-sponsored.
• For Legal Compliance: To comply with any court order, law, or legal process, including responding to any government or regulatory request.
• For Enforcement: To enforce or apply our Terms of Use, EULA, and other agreements.
• For Protection: If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Neville Ventures, LLC, our customers, or others.

10 Your Rights & Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in any marketing email or by contacting us.

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

We recognize and honor Global Privacy Control (GPC) signals and similar universal opt-out mechanisms as valid opt-out requests.

Virginia Residents (VCDPA)

If you are a Virginia resident, you may exercise rights to access, correct, delete, and obtain a portable copy of your personal data. You also have the right to opt out of the processing of your personal data for targeted advertising, sale, or profiling. If we deny your request, you have the right to appeal by contacting us, and we will respond to your appeal within sixty (60) days.

Other US State Privacy Laws

Residents of Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska, and Rhode Island may have additional rights under their respective state privacy laws, including the right to access, delete, correct, and port personal data, and the right to opt out of targeted advertising, data sales, and certain profiling activities. To exercise any of these rights, contact us using the information in Section 15.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at contact@nevilleventures.com. We will respond to your request within thirty (30) days (or the timeframe required by applicable law). We may need to verify your identity before processing your request.

11 Data Retention

We retain different types of data for different periods:

• Exercise Progress and Assessment Scores: Retained for up to 24 months for training effectiveness analysis, then anonymized or deleted.
• Payment Records: Retained as required by applicable tax and accounting regulations (typically 7 years).
• Contact Information: Retained for up to 24 months after your last interaction with us, unless you request earlier deletion.
• Consent Records: Retained for the duration required by applicable law.
• Browser Extension Data: Data stored in your browser's local storage persists until you uninstall the extension or clear your browser data. You can reset your data at any time through the extension.

12 Data Security

We implement reasonable technical and organizational measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include:

• Encrypted Connections: All data transmitted between the browser extension and our servers uses HTTPS encryption.
• Access Controls: Access codes are validated via our API. Access code hashes (not plaintext codes) are stored locally.
• Infrastructure Security: Our API and data hosting infrastructure is hosted on a commercial cloud platform with managed identity authentication, network security groups, and role-based access controls.
• Service Provider Security: Third-party service providers who process personal information on our behalf are contractually required to implement appropriate security measures.

The safety and security of your information also depends on you. Where we have given you credentials for access to certain parts of our Services, you are responsible for keeping those credentials confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk.

13 Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected individuals without unreasonable delay and within the timeframe required by applicable law (typically 30-60 days from discovery);
• Provide notification via email to the address associated with your account;
• Include in the notification: a description of the incident, the types of information involved, the steps we are taking in response, and recommendations for protecting yourself;
• Notify applicable regulatory authorities as required by law.

14 Policy Changes

It is our policy to post any changes we make to this Privacy Policy on this page with a notice that the Privacy Policy has been updated. The date the Privacy Policy was last revised is identified at the top of this page.

If we make material changes to how we treat our users' personal information, we will notify you through a notice on the website home page and by email to the email address you have provided to us at least thirty (30) days before the changes take effect.

You are responsible for periodically visiting our website and this Privacy Policy to check for any changes.

15 Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, to exercise your rights regarding your personal information, or to report a data security concern, contact us at: