Privacy Policy

IndivieuOS is a product and technology platform operated by Indivieu LLC ("Indivieu," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, process, retain, and protect personal information when you use IndivieuOS and its products and services, including SalesVieu, Viera, and other IndivieuOS products, as well as our websites, integrations, and related services.

This Privacy Policy also explains the choices and rights that may be available to you regarding your personal information.

If you have questions about this Privacy Policy or would like to exercise a privacy right, contact us at:

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we process in connection with:

• IndivieuOS
• SalesVieu
• Viera
• Other current and future IndivieuOS products, modules, applications, and services
• Indivieu websites and online properties
• Customer accounts and workspaces
• Authorized third-party integrations
• Sales, support, billing, and other communications with Indivieu

Indivieu LLC is the company responsible for IndivieuOS and the products and services offered within the IndivieuOS ecosystem.

Our primary corporate website is www.indivieu.com. IndivieuOS and its products may also operate through product-specific websites, subdomains, applications, or other online properties.

This Privacy Policy does not govern third-party websites, applications, or services that you access independently of Indivieu, even if those services integrate with IndivieuOS. Those third parties maintain their own privacy practices and policies.

Data handling varies by product and service path. SalesVieu has its own product workspace and service path; IndivieuOS account, export, Files, and Viera controls do not automatically describe or control SalesVieu data handling. See the product-specific disclosures in this policy where verified, and do not assume an OS approval or privacy setting applies to a separately operated product.

2. Our Role When Processing Personal Information

Our role with respect to personal information depends on the circumstances in which we process it.

Information We Process for Our Own Business Purposes

When you create an account, visit our website, communicate with us, purchase a subscription, or otherwise interact directly with Indivieu, we generally determine the purposes for which that information is processed.

Depending on applicable law, Indivieu may be considered a controller, business, or similar responsible party for that information.

Customer-Controlled Workspace Data

IndivieuOS is primarily a business platform. Our customers may upload, connect, create, or otherwise make information available through their IndivieuOS workspaces and through products operating within the IndivieuOS ecosystem.

This may include information about their:

• Leads
• Prospects
• Customers
• Employees
• Contractors
• Business partners
• Vendors
• Other business contacts

When we process personal information contained within a customer's workspace on that customer's behalf, the customer generally determines why that information is processed and how it is used.

In those circumstances, Indivieu generally acts as a processor, service provider, contractor, or similar provider on behalf of the customer.

If your personal information has been provided to IndivieuOS by one of our customers and you wish to exercise rights relating to that information, you may need to contact that customer directly. We will assist our customers with applicable privacy obligations as required by law and our agreements with them.

3. Information We Collect

The information we collect depends on how you interact with IndivieuOS, which IndivieuOS products you use, and which features, integrations, and services you enable.

A. Account and Profile Information

When you register for or use an account, we may collect information such as:

• Name
• Email address
• Company or organization name
• Job title or role
• Account credentials
• Workspace membership
• Account preferences
• Subscription information

Clerk provides account identity, authentication, session, and organization-membership services. IndivieuOS also keeps local account and membership records needed to provide product features.

B. Billing and Transaction Information

When you purchase a paid product or service, we may collect:

• Billing name
• Billing address
• Subscription details
• Transaction history
• Payment status

Payment card information is generally collected and processed directly by our payment service providers.

Indivieu does not intend to store full payment card numbers on its own systems.

C. Customer Workspace Data

Customers may create, upload, import, synchronize, or otherwise process business information through IndivieuOS and its products.

Depending on the products and features used, this may include:

• Contact and lead information
• Company information
• CRM records
• Deal and opportunity information
• Pipeline information
• Sales activities
• Tasks
• Notes
• Playbooks
• Scripts
• Proposals
• Documents
• Customer relationship information
• Business communications
• Other information entered into or synchronized with the platform

Files are organization-scoped. File metadata is stored separately from file bytes, which are held in private object storage. Supported uploaded content is scanned before it becomes available. Authorized users can trash, restore, or permanently delete files; cross-app file shares require an explicit, expiring, read-only share. Trashing a file is not the same as permanent deletion.

D. Communications and Business Activity Data

Depending on the IndivieuOS products and features used, IndivieuOS may process information relating to sales, marketing, operations, customer relationships, or other business communications, such as:

• Call notes
• Meeting notes
• Email-related information
• Calendar information
• Communication history
• Sales activity
• Conversation summaries
• Transcripts or other communication content made available through supported features or authorized integrations

In-app support reports are handled by the IndivieuOS API and database. Optional support diagnostics are selected separately for each report, are off by default, and are limited to coarse screen-size and online/offline information. Email links open your email application; we did not identify a separate external support-ticketing provider in the reviewed application configuration.

We process this information only to the extent required to provide the applicable functionality or as otherwise described in this Privacy Policy.

E. AI Prompts, Inputs, and Outputs

When you use Viera or another AI-powered feature within IndivieuOS, we may process:

• Prompts and questions
• Instructions
• Files or content submitted to AI features
• Relevant workspace context
• AI-generated responses
• Feedback regarding AI responses
• Technical information necessary to operate and improve AI functionality

OS Viera. OS Viera setup and chat are blocked unless the OS data-policy approval switch is explicitly enabled after verification. If enabled, a request may include your question, recent conversation turns, and one selected authorized context group: workspace details, authorized project details, or excerpts from one selected readable text document. The OS route redacts recognized sensitive formats, but its filter does not identify every sensitive or personal detail. The browser keeps up to 24 sanitized messages in the current tab; the OS API does not persist chat history. Clearing history removes that browser copy, not any copy already received by an external service.

SalesVieu Viera. SalesVieu uses a separate, stateful chat service and a separate Viera credit ledger; the OS approval switch does not control or approve SalesVieu. The reviewed SalesVieu service source uses Google's Gemini Developer API SDK with a server-configured API key, not a Vertex AI client. Its current model fallback list is Gemini 3.1 Pro Preview, Gemini 3 Flash Preview, Gemini 2.5 Pro, and Gemini 2.5 Flash; the model selected for a particular request depends on availability. Chat requests may include your current message, up to ten earlier turns, an optional editor draft, and workspace context assembled by the service. The browser keeps chat messages in component memory, and the reviewed chat route does not persist the transcript. A separate credit ledger stores usage-operation metadata and a SHA-256 request hash, not the raw prompt. Clearing the chat clears that browser copy only and does not delete information already received by Google. The product owner confirmed that active billing for the deployed Google project remains unknown, so we cannot determine whether paid or unpaid Gemini API terms apply. Provider-side retention/deletion, processing location, log retention, and subprocessor details also remain unverified. Do not submit secrets, credentials, unnecessary personal information, or sensitive or confidential information while these provider settings remain unverified.

Google terms. Google's Gemini API Additional Terms, effective March 23, 2026, distinguish unpaid and paid Developer API services. For unpaid services, submitted content and responses may be used to improve products and machine-learning technologies and may be processed by human reviewers. For paid Gemini API use, the terms require a Cloud project with an active billing account and say prompts and responses are not used to improve Google's products, while allowing limited safety, prohibited-use, and legal or regulatory logging and transient storage or caching in any country where Google or its agents maintain facilities. The SalesVieu source uses the Gemini Developer API, but its active billing status remains unknown. The OS Viera downstream API surface and billing status are also unverified. We do not assume any particular Google service terms apply without confirming the actual connection and billing.

Google's published feature rules also differ by service. Gemini Developer API terms say Grounding with Google Search stores prompts, supplied context, and output for 30 days. Google's Google Cloud data-governance guidance says Vertex AI Search grounding stores prompt-derived queries and supplied context for up to three days when used. Google Cloud guidance describes implicit caching for supported Vertex AI models for up to 24 hours, while explicit context-cache expiry is configured separately. These feature rules are conditional and do not establish that either Viera service uses them. The reviewed SalesVieu chat path does not configure Search grounding or an explicit prompt cache; whether implicit caching applies is unknown. The OS Viera grounding and cache settings remain unverified. Provider retention/deletion, processing location, applicable agreements, and subprocessor chains are not confirmed. Do not submit secrets, credentials, or unnecessary personal information.

F. Information From Third-Party Integrations

If you authorize an integration, we may receive information from the connected service.

For example, connecting a CRM such as HubSpot may allow IndivieuOS or an IndivieuOS product to access authorized categories of information such as:

• Contacts
• Companies
• Deals
• Pipeline records
• Activities
• Notes
• Tasks
• Other CRM information made available through the integration

The specific information available to Indivieu depends on the permissions you authorize and the functionality of the third-party service.

You may be able to disconnect integrations through IndivieuOS or through the applicable third-party service.

G. Information From Third-Party or Public Sources

Where permitted by law and relevant to the services we provide, we may receive business information from:

• Data providers
• Business directories
• Publicly available sources
• Customer-authorized services
• Business partners

This may include professional or business contact information and company-related information.

H. Usage, Device, and Technical Information

When you use our websites, IndivieuOS, or other IndivieuOS products, we may automatically collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages or screens visited
• Features used
• Date and time of activity
• Session information
• Referring URLs
• Error information
• Performance information
• Log data
• Approximate geographic information derived from an IP address

We use this information to operate, secure, analyze, and improve our services. Our analytics SDK may collect page views, click and rage-click activity, and technical or session metadata. Session recording is disabled in the current SDK configuration. Custom marketplace and agency-service events use predefined event names and bounded service, category, placement, and state values; they do not include report text, search text, file contents, AI prompts, or authenticated account profile fields. The SDK may use anonymous visitor or session identifiers. Provider-specific analytics retention and location have not been verified.

I. Support and Communications

If you communicate with us, we may collect the information contained in those communications, including:

• Support requests
• Feedback
• Emails
• Survey responses
• Product questions
• Business communications

4. How We Use Information

We may use personal information to:

• Provide and operate IndivieuOS and its products
• Create and administer accounts
• Authenticate users
• Provide functionality within SalesVieu and other IndivieuOS products
• Generate Viera and other AI-assisted responses
• Synchronize authorized third-party integrations
• Provide customer support
• Process subscriptions and payments
• Maintain and improve platform functionality
• Personalize the user experience
• Analyze product usage and performance
• Develop and test new features and IndivieuOS products
• Detect errors and troubleshoot technical issues
• Detect, investigate, and prevent fraud, abuse, or unauthorized activity
• Protect the security and integrity of IndivieuOS
• Enforce our agreements and policies
• Communicate service notices and operational information
• Send product news and marketing communications where permitted by law
• Maintain business and accounting records
• Comply with legal obligations
• Establish, exercise, or defend legal claims

Where required by applicable law, we rely on an appropriate legal basis for processing personal information.

5. Artificial Intelligence

Certain IndivieuOS products and features use artificial intelligence.

For example, Viera may use workspace context together with information you provide to generate answers, recommendations, summaries, insights, or other output.

Information necessary to fulfill an AI request may be transmitted to an AI service provider.

Viera's model provider is Google Gemini, but the OS Viera service and SalesVieu chat are separate product paths. The OS service's downstream API surface and settings remain unverified; SalesVieu source uses the Gemini Developer API SDK, while its deployed billing status remains unknown. Do not assume the paths share provider settings or that paid terms apply without verifying each active billing project.

AI Outputs

Artificial intelligence can produce inaccurate, incomplete, outdated, or unexpected results.

AI-generated content is provided as an assistive tool and should be reviewed before being relied upon for important business decisions.

IndivieuOS AI features are not intended to independently make decisions that produce legal or similarly significant effects concerning individuals unless specifically disclosed and permitted under applicable law.

Information Submitted to AI Features

Users are responsible for ensuring that they have appropriate authorization to provide information to IndivieuOS and its AI features.

Do not submit secrets, credentials, or personal information that is not necessary for the requested feature. Sensitive-format filtering is limited and does not guarantee that all such information will be found. Do not submit confidential or sensitive information to an AI feature while its provider settings remain unverified.

6. How We Disclose Information

We may disclose personal information in the following circumstances.

Service Providers and Subprocessors

The providers identified for current IndivieuOS services and their general processing roles are listed below. Which provider receives information depends on the product, feature, and integrations enabled for your workspace.

This list was reviewed on November 6, 2026. Provider-specific contractual references are not published here. We have not verified provider-specific processing countries or transfer mechanisms, so this list does not claim a particular region or safeguard. For current verified details, contact privacy@indivieu.com.

We did not identify a separate external support-ticketing or support-email provider in the reviewed application configuration. In-app support reports use IndivieuOS and its listed hosting/database provider; email links open your email application.

Third-Party Integrations

When you choose to connect IndivieuOS or an IndivieuOS product with another service, information may be exchanged with that service according to the permissions you authorize.

Third-party services are also governed by their own privacy policies.

Within Your Organization

Information within a customer workspace may be accessible to authorized users and administrators of that organization according to applicable account permissions.

Professional Advisors

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisors where reasonably necessary.

Business Transfers

If Indivieu is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

Legal and Safety Requirements

We may disclose information when we reasonably believe doing so is necessary to:

• Comply with applicable law
• Respond to lawful requests or legal process
• Protect the rights or property of Indivieu
• Protect our customers or users
• Prevent fraud or abuse
• Investigate security incidents
• Protect the safety of individuals
• Establish, exercise, or defend legal claims

7. Sale and Sharing of Personal Information

Indivieu does not sell personal information for monetary consideration.

We do not use customer workspace data for unrelated third-party advertising.

Depending on the technologies used on our public websites, certain analytics or advertising activities may be considered a "sale," "sharing," or use for targeted advertising under some privacy laws even where no money is exchanged.

Where applicable law gives individuals the right to opt out of those activities, we will provide an appropriate method for exercising that right.

We will also honor legally required browser-based opt-out signals, such as Global Privacy Control, where applicable to our processing.

8. Marketing Communications

We may send you information regarding:

• New IndivieuOS products
• New features
• Product updates
• Educational materials
• Promotions
• Events
• Other Indivieu products and services

You may unsubscribe from marketing emails using the unsubscribe instructions included in those messages.

You may still receive transactional or service-related communications necessary to administer your account or provide our services.

9. Cookies and Similar Technologies

We may use cookies and similar technologies to:

• Keep users signed in
• Authenticate sessions
• Remember preferences
• Maintain security
• Understand how our websites and products are used
• Measure performance
• Diagnose technical issues
• Improve our products

Some cookies may be necessary for the service to function.

We may also use analytics technologies to understand website and product activity.

OS Settings → Privacy links to personal-data export and account deletion inside Account, workspace app-access controls, and support reporting. App grants are administrator-managed. Support diagnostics are optional for each report, off by default, and limited to screen-size category and online/offline state. You can uncheck them before submission; a retry sends the same original report. Starting a different report resets that choice. This is not a persistent account-wide preference and does not erase a report already submitted.

The current OS does not offer an analytics opt-out switch: the installed browser SDK does not expose a supported stop/opt-out method. Privacy actions do not disable required authentication, billing, security, operational logging, or audit processing, and do not control telemetry in independently operated products or third-party services. Startup timings are held only in the browser tab and can be cleared in Appearance & startup.

Where required by law, we will obtain consent or provide controls for non-essential cookies or similar tracking technologies.

You may also control certain cookies through your browser settings. Disabling cookies may cause portions of our services to function incorrectly.

10. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against:

• Unauthorized access
• Unauthorized disclosure
• Alteration
• Loss
• Misuse
• Destruction

Depending on the applicable system and service, these safeguards may include measures such as encryption in transit, access controls, authentication controls, monitoring, and logical separation of customer workspaces.

Protected SalesVieu and billing operations check authenticated organization context. Billing and SalesVieu seat management require administrator access. Cross-origin browser access to the API is configured with an explicit allowlist. Credential-bearing authorization and cookie headers are configured for log redaction. Billing card details are handled by Stripe rather than stored by IndivieuOS.

We design IndivieuOS and its products to restrict access to customer information based on authorization and legitimate business need.

However, no internet transmission, software platform, or data-storage system can be guaranteed to be completely secure.

Customers and users are responsible for maintaining the confidentiality of their credentials and for promptly notifying us of suspected unauthorized account activity.

11. Data Retention

We retain information according to its type, purpose, ownership, and applicable requirements. There is no single verified retention period for all IndivieuOS data. The current platform behavior and known limits include:

• Organization workspace records remain when a member leaves, an app is removed, or a subscription changes. No coordinated organization-termination deletion process or general production deletion period is currently implemented.
• Files can be explicitly trashed, restored, or permanently deleted by an authorized user. A scheduled 30-day Trash purge runs in development only; production and staging do not run that worker.
• Removing an account deletes the user's OS login and selected personal records after confirmation and recent authentication. It does not delete organization-owned files or app data, billing records, or service requests. Support reports and actions linked to the account currently are removed with the account.
• Personal and organization export downloads expire after 24 hours. Exports are generated on demand and are not permanent archives; an organization export is not a complete backup and does not contain file bytes.
• Authentication security events have a separate 180-day deletion rule. Resolved billing-recovery records have a separate 90-day cleanup rule. These do not establish a general retention period for other data.
• Provider-held data, analytics, operational logs, and backups may have separate handling. Their retention and deletion periods have not been verified across all providers and systems.

See our Data Processing Overview for a versioned summary of processing roles, current data flows, retention limits, provider disclosures, and the DPA request path. Its review status and non-contractual scope are stated on that page.

12. Your Privacy Rights

Depending on where you live and the laws that apply to our processing, you may have rights regarding your personal information.

These rights may include the right to:

• Access personal information we maintain about you
• Confirm whether we are processing your personal information
• Correct inaccurate personal information
• Delete certain personal information
• Port certain information in a usable or machine-readable format
• Opt out of certain targeted advertising
• Opt out of the sale or sharing of personal information where applicable
• Opt out of certain profiling or automated decision-making where applicable
• Limit certain uses of sensitive personal information where applicable
• Withdraw consent where processing is based on consent
• Object to certain processing activities where applicable
• Appeal certain decisions regarding a privacy request where applicable
• Exercise your rights without unlawful discrimination

These rights are subject to exceptions and limitations under applicable law.

To submit a privacy request, contact:

privacy@indivieu.com

Please include sufficient information for us to understand your request and, where required, verify your identity.

We will respond within the period required by applicable law.

Where applicable, you may also designate an authorized agent to submit a request on your behalf. We may request documentation necessary to verify the agent's authority.

If we deny a privacy request and applicable law provides a right to appeal, you may submit an appeal by emailing privacy@indivieu.com and indicating that your request is a Privacy Appeal.

13. U.S. State Privacy Disclosures

Residents of certain U.S. states may have additional privacy rights under state law.

Texas Residents

Where the Texas Data Privacy and Security Act applies, Texas residents may have rights including the ability to:

• Confirm whether we process their personal data
• Access personal data
• Correct inaccuracies
• Delete certain personal data
• Obtain certain data in portable form
• Opt out of certain targeted advertising
• Opt out of certain sales of personal data
• Opt out of certain profiling
• Appeal decisions concerning privacy requests

Requests may be submitted to privacy@indivieu.com.

California Residents

Where the California Consumer Privacy Act, as amended, applies, California residents may have rights including:

• The right to know or access certain personal information
• The right to request deletion
• The right to request correction
• The right to opt out of certain sales or sharing
• The right to limit certain uses and disclosures of sensitive personal information
• The right to receive information about our collection and disclosure practices
• The right to exercise privacy rights without unlawful discrimination

Indivieu does not sell personal information for monetary consideration.

Requests may be submitted to privacy@indivieu.com.

Where required, we will honor applicable opt-out preference signals.

14. International Users

Provider-specific processing locations and international transfer mechanisms have not been verified for every listed service. The provider disclosures identify where location and transfer details remain unknown; this policy does not claim a particular processing country or transfer safeguard. Contact privacy@indivieu.com for current verified information relevant to a product or provider.

EEA, UK, and Similar Jurisdictions

Where applicable law requires a legal basis for processing personal information, our legal bases may include:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent
• Protection of legal rights and interests

Individuals in certain jurisdictions may also have the right to lodge a complaint with their applicable data-protection authority.

Where processing is based on consent, you may withdraw that consent at any time, although withdrawal does not affect processing that occurred before consent was withdrawn.

15. Sensitive Personal Information

IndivieuOS is primarily designed for business and commercial use.

Customers and users should avoid entering highly sensitive personal information into IndivieuOS or its products unless:

• The applicable feature is intended to process that information
• Processing is necessary for a legitimate purpose
• The customer has an appropriate legal basis or authorization to process it
• Appropriate contractual and security requirements have been satisfied

Sensitive information may receive additional protections where required by applicable law.

16. Children's Privacy

IndivieuOS and its products are intended for business use and are not directed toward children.

Our services are not intended for individuals under 18 years of age, and we do not knowingly collect personal information directly from children through our services.

If you believe a child has provided personal information to Indivieu in violation of this policy, contact us at privacy@indivieu.com.

17. Customer Responsibilities

Customers are responsible for:

• Ensuring they have the legal right to collect and provide information to IndivieuOS
• Providing appropriate notices to individuals where required
• Obtaining legally required consents or authorizations
• Configuring user permissions appropriately
• Managing authorized integrations
• Responding to privacy requests relating to data they control
• Using IndivieuOS and its products in accordance with applicable laws and our agreements

Customers should not use IndivieuOS or its products to unlawfully collect, process, disclose, or use personal information.

18. Third-Party Websites and Services

IndivieuOS and its products may contain links to or integrations with third-party websites, products, and services.

Indivieu does not control the independent privacy practices of those third parties.

We encourage users to review the applicable third party's privacy policy before providing information or authorizing an integration.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to IndivieuOS
• New IndivieuOS products or modules
• New features
• Changes to our data practices
• Changes to our service providers
• Legal or regulatory requirements
• Security or operational changes

When we update this Privacy Policy, we will revise the Last Updated date at the top.

If changes materially affect how we process personal information, we will provide additional notice where required by applicable law.

Where applicable law requires consent before we begin a new processing activity, we will obtain that consent as required.

We review provider changes against applicable law and customer agreements before enabling a new provider to process customer information. Any required customer notice or consent will be handled according to those requirements; this policy does not promise a fixed advance-notice period.

20. Contact Us

For questions, concerns, privacy requests, or appeals regarding this Privacy Policy or our privacy practices, contact:

For privacy requests, including access, correction, deletion, portability, opt-out, or appeals, please include Privacy Request in the subject line of your communication.