Privacy Policy
How iVision Studios LLC collects, uses, shares, keeps, and protects personal data for Vision and its websites.
Last updated November 6, 2026
Contents
This Privacy Policy explains how iVision Studios LLC, a Virginia limited liability company (“iVision”, “we”, “us”, or “our”), collects, uses, shares, keeps, and protects personal data in connection with Vision and our websites runonvision.com and developers.runonvision.com (the “Websites”).
In plain words
This explains what we know about you, why, where it’s kept, who helps us look after it, how long we keep it, and how to ask us to see, fix, or delete it. The short version: we collect what we need to run Vision and bill for it, we keep it on servers in the United States, we never sell it, and we don’t use it for advertising.
1. Scope and definitions
In plain words
This covers our websites, your Vision account, and billing. It works differently for the information your business keeps in Vision, such as your clients’ details. That information belongs to your business, and your business decides what happens to it. We only look after it.
1.1 What this Policy covers. This Policy applies to personal data that we collect and decide how to use (as a “controller”), namely:
- (a) information about visitors to our Websites, including people who send us the early-access form;
- (b) Account Information: information about the businesses that use Vision and the individuals who use it on their behalf (“Users”), including Owners and Billing Contacts; and
- (c) information about people who contact us for support, sales, or any other reason.
1.2 Customer Data. Businesses that use Vision (“Customers”) put information into it, such as details of their own clients, leads, contacts, invoices, appointments, and tasks (“Customer Data”). For personal data within Customer Data, the Customer is the controller and iVision is a processor (sometimes called a service provider): we process it only on the Customer’s instructions and under our Terms of Service, including Section 12 (Data processing terms). This Policy describes how we handle Customer Data as a processor in Section 6, but the Customer’s own privacy notice governs why and how it collects and uses that data. If you are a client or contact of a Vision Customer and want to exercise your rights, please contact that business. If you contact us instead, we will pass your request to it, where we can identify it, and help it respond.
1.3 Definitions. “Personal data” means information that is linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified data or publicly available information. Capitalized words not defined here have the meanings in our Terms of Service.
2. Personal data we collect
In plain words
We collect what you give us (your name, email, business details, and billing contact), what Vision records as you use it (such as important changes and errors), and almost nothing else. Our website uses Google Analytics to see which pages people visit, never for ads. Card numbers go straight to our payment processor: we never see or store them.
2.1 Information you give us.
| Category | Examples | Source |
|---|---|---|
| Early-access requests | First name and email. If you choose to give them, your business name, team size, kind of business, what slows you down most, what you use today, how you heard about Vision, and whether you have used software to run a business before. Whether you ticked the box to get tips and news while you wait. We also record when you sent the request and your browser type. | You, through the form on runonvision.com |
| Account and User details | Name, email address, business name, role and permissions in the Account, and any other details you add to your profile | You, or the Owner or Admin who invites you |
| Sign-in details | Password (kept by our sign-in service only in a one-way protected form, never in readable form) and two-step sign-in settings | You |
| Billing Contact details | Name, email address, billing address, and billing history | You |
| Payment details | Card or bank account details, entered directly into our payment processor’s secure pages. iVision does not receive or store full card numbers. | You |
| Communications | The content of emails and support requests you send us, and our replies | You |
2.2 Information collected automatically.
| Category | Examples | Source |
|---|---|---|
| Server and security logs | IP address, browser type and version (user agent), the page or address requested, the date and time, and the result | Your browser or device, recorded by our servers |
| Account activity records | Changes to settings, permissions, API Keys, and billing, recorded with who did what and when | The Service |
| API activity | Which API Key made a call, when, and the result | The Service |
| Error details | Technical details of errors in the Service, recorded in our own server logs to help us fix them. We do not send error reports to other companies. | The Service |
2.3 Information from others. We receive payment status, such as a successful or failed charge, from our payment processor. If an Owner or Admin invites you to Vision, we receive your name and email address from them.
2.4 What we do not collect. We do not knowingly collect sensitive data, such as precise geolocation, health, biometric, or genetic data, or data revealing racial or ethnic origin, religious beliefs, sexual orientation, or citizenship status. Customers must not put such data in Vision (see our Terms of Service, Section 13.1(j)).
3. How we use personal data
In plain words
We use your information to run Vision, bill for it, keep it secure, answer you, and tell you about things that affect your account. We email you about early access only if you asked. We don’t sell your information, and we don’t use it to advertise to you.
3.1 Purposes. We use the personal data described in Section 2 to:
- (a) create and operate Accounts, sign Users in, and provide the Service;
- (b) process Subscription Fees, and manage billing, failed payments, Suspension, return, and cancellation as our Terms of Service describe;
- (c) send service messages, such as invitations, security alerts, sign-in emails, billing notices, and notices of changes to our Terms or this Policy;
- (d) respond to early-access requests, enquiries, and support requests, including by recording early-access requests in iVision’s own customer records; use the optional answers to an early-access request to tailor our emails to you, help you set up Vision, and decide what to build next (the answers never change your place in line); and, only if you tick the box for it, send you tips and news about Vision while you wait;
- (e) protect the Service, our Customers, and others, including by detecting, investigating, and preventing fraud, abuse, and security incidents;
- (f) understand how the Service is used and performing, fix problems, and improve it, using information that is aggregated or de-identified where practical;
- (g) comply with law, including tax and accounting rules, and enforce our agreements; and
- (h) any other purpose that we describe to you when we collect the information, with your consent where the law requires it.
3.2 Marketing. We send early-access and product news by email only to people who asked for it or who are Customers, and every such email lets you unsubscribe. Service messages that relate to your Account, such as billing and security notices, are not marketing and continue while you have an Account.
3.3 What we never do. We do not sell personal data. We do not use personal data for targeted advertising. We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use Customer Data to train AI models.
4. How we share personal data
In plain words
We share information only with the companies that help us run Vision (listed in Section 5), when the law requires it, or if iVision’s business is ever sold. Never for money, and never for advertising.
4.1 Subprocessors and service providers. We share personal data with the companies listed in Section 5, which process it on our behalf under written contracts, only to provide their services to us.
4.2 Within your business’s Account. Information about you as a User, such as your name, role, and activity in the Account, is visible to other Users of the same Account according to the permissions the Account gives them.
4.3 At your direction. We share information when you ask us to, including when you connect a Third-Party Service to your Account, in which case that service’s own privacy notice applies.
4.4 Legal and safety reasons. We may disclose personal data if we believe in good faith that it is required by law, subpoena, court order, or other legal process; that it is needed to protect the rights, property, or safety of iVision, our Customers, or others; or that it is needed to investigate or prevent fraud, security incidents, or a breach of our Terms of Service. Where the law allows, we will tell the affected Customer before disclosing its Customer Data and give it the chance to object.
4.5 Business transfers. If iVision is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its business, personal data may be transferred as part of that transaction, subject to this Policy or a notice at least as protective.
5. Where data is stored and who processes it
In plain words
Vision runs on servers we rent in the United States. Our own mail server sends Vision’s emails. Payments for Vision go through our payment processor. Our domain names are managed by a DNS company. Our team is told about early-access requests through our internal messaging service. Google Analytics shows us how people use our website. That’s the full list today, and we’ll keep it up to date.
5.1 Storage location. We store and process personal data in the United States. Vision, including its databases and its sign-in service, runs on virtual private servers that iVision rents from IONOS Inc. We operate the software on those servers ourselves; IONOS provides the server hardware, network, and facilities.
5.2 Backups. We make regular backups of Vision’s databases and keep them in the United States.
5.3 Subprocessors. We use the following companies to process personal data:
| Company | What they do for us | Personal data involved | Location |
|---|---|---|---|
| IONOS Inc. | Server hosting for Vision, our websites, and our mail server | All data in the Service, Account Information, Customer Data, logs, and email we send | United States |
| Stripe, Inc. | Subscription billing and payment processing for Vision | Billing Contact details, payment details, and billing history | United States |
| Cloudflare, Inc. | Domain name system (DNS) for runonvision.com, and registrar for that domain | None of the content of the Service. Requests to our websites and to Vision go directly to our servers, not through Cloudflare. | United States and worldwide network |
| Google LLC (Google Analytics) | Measuring how people use runonvision.com | Pages visited, rough location, device and browser, how you arrived, and a cookie ID. Never names, email addresses, or form answers. | United States |
Our team is notified of each early-access request through our internal messaging service. The notification contains the first name, business name, team size, kind of business, and email address given in the request.
5.4 Email. Emails from Vision, such as sign-in emails, invitations, reminders, and invoices that Customers send to their clients, are sent through a mail server that iVision operates itself, hosted by IONOS as in Section 5.3. We do not use a third-party email delivery company.
5.5 AI service providers. Vision does not send personal data to any AI service provider today. Before that changes, we will add each such provider to Section 5.3, with what it processes and where.
5.6 Third-Party Services you connect. If you connect a Third-Party Service, such as your own calendar or email account, that provider is not our subprocessor. It acts under its agreement with you and its own privacy notice.
5.7 Changes to this list. We will update this Section before a new subprocessor begins processing personal data, and will notify Customers as our Terms of Service, Section 12.4, describe.
6. Customer Data we process for Customers
In plain words
Your business decides what goes into Vision and why. We store it, show it to the people you allow, and do only what you ask. We don’t look through it, sell it, or use it for anything of our own.
6.1 Instructions only. We process Customer Data only to provide the Service to the Customer, on its instructions, as our Terms of Service describe. We do not sell Customer Data or use it for advertising, and we do not combine it with data from other Customers except as needed to operate the Service.
6.2 Staff access. iVision personnel access Customer Data only as needed to provide, secure, support, or maintain the Service, to investigate a suspected breach of our Terms, to comply with law, or at the Customer’s request or with its permission.
6.3 Messages sent for Customers. When a Customer sends an invoice, receipt, or reminder to one of its clients through Vision, we process the recipient’s name, email address, and the content of the message on the Customer’s behalf.
6.4 Website forms. When a Customer connects a form on its own website to Vision, the information that visitors enter in that form is sent to the Customer’s Account as Customer Data.
7. How long we keep personal data
In plain words
We keep your information while your Account is open. When a Subscription stops, we keep your business’s data for at least 60 days, so you can come back or get a copy. After that, a person at iVision may delete it: never automatically. We keep billing records as long as tax law requires.
7.1 Retention periods.
| Data | How long we keep it |
|---|---|
| Account Information and Customer Data | For as long as the Account is active. After Suspension or cancellation, for at least 60 days, counted from the day Suspension began or cancellation took effect. Customer Data is then deleted only by a person at iVision, never automatically, and only after we email the Account’s Billing Contacts at least 7 days before, as our Terms of Service, Section 11, describe. |
| Deletion on request | Within 30 days after we confirm a request, except data we must keep by law |
| Backup copies | Until they are overwritten or expire in the normal course |
| Billing and tax records | For as long as tax and accounting laws require |
| Server and security logs | For as long as we need them to keep the Service secure and running |
| Early-access requests | Until you become a Customer, until you ask us to delete them, or until we no longer need them to contact you about Vision, whichever comes first |
| Support communications | For as long as needed to resolve the request and keep a record of how we resolved it |
7.2 De-identified data. We may keep information that has been de-identified or aggregated so that it can no longer reasonably be linked to an individual. We keep it in that form, and we do not try to re-identify it.
8. How we protect personal data
In plain words
Connections to Vision are encrypted, each person sees only what they’re allowed to, two-step sign-in is available, and access to our servers is restricted. No system is perfectly secure. If something goes wrong that affects your information, we’ll tell you as the law requires.
8.1 Safeguards. We use administrative, technical, and physical safeguards designed to protect personal data, including:
- (a) encrypted connections (TLS) between your browser or software and Vision;
- (b) role-based permissions, so each User sees only what the Account allows;
- (c) optional two-step sign-in for every User;
- (d) administrative access to our servers limited to authorized iVision personnel; and
- (e) regular backups.
8.2 No guarantee. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8.3 Breach notification. If a breach of security affects personal data that we hold as a controller, we will notify affected individuals, and the Office of the Attorney General where required, as Virginia law, Va. Code § 18.2-186.6, and other applicable laws require. For Customer Data, we will notify the Customer as our Terms of Service, Section 12.8, describe.
9. Your rights and how to use them
In plain words
You can ask us what we hold about you, ask us to correct it, delete it, or give you a copy. Just email us. We reply within 45 days and don’t charge for it. If we say no, you can ask us to look again, and if you’re still unhappy, you can complain to the Virginia Attorney General.
9.1 Your rights. On the model of the Virginia Consumer Data Protection Act, Va. Code § 59.1-575 et seq., you may ask us to:
- (a) confirm whether we process your personal data, and give you access to it;
- (b) correct inaccuracies in your personal data;
- (c) delete personal data provided by or obtained about you;
- (d) give you a copy of personal data that you provided to us, in a portable and, where technically feasible, readily usable format; and
- (e) stop processing your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not do any of these.
We offer these rights to everyone, wherever you live, whether or not a privacy law requires us to.
9.2 How to make a request. Email hello@runonvision.com with the subject “Privacy request”, or write to the address in Section 13. Owners and Admins can also correct much of their information in the Service.
9.3 Verification. We will ask for information needed to confirm your identity, for example by asking you to reply from the email address on the Account, and we use it only for that purpose. You may use an authorized agent where the law allows. We may ask for proof of the agent’s authority.
9.4 Our response. We respond within 45 days after receiving your request. Where reasonably necessary, given the complexity and number of requests, we may extend that by another 45 days, and will tell you within the first 45 days. We respond free of charge up to twice a year. We may charge a reasonable fee, or decline, if requests are manifestly unfounded, excessive, or repetitive.
9.5 Appeals. If we decline to act on your request, we will tell you why. You may appeal by replying to our decision, or by emailing us with the subject “Privacy appeal”, within 60 days after receiving it. We will respond to the appeal in writing within 60 days after receiving it, explaining what we did and why. If we deny the appeal, you may contact the Virginia Office of the Attorney General to submit a complaint, at oag.state.va.us.
9.6 Customer Data. If your request concerns Customer Data that a Vision Customer holds about you, please contact that business. See Section 1.2.
9.7 No discrimination. We will not deny service, charge a different price, or give a different level of service because you exercised these rights.
10. Cookies and similar technologies
In plain words
Our website uses Google Analytics, which sets cookies, to see which pages people visit. It is never used for ads. The Vision app uses only the cookies it needs to keep you signed in and secure. No advertising cookies, no tracking, and no analytics from other companies in the app.
10.1 Websites. runonvision.com uses Google Analytics, as Section 10.5 describes. Apart from that, runonvision.com and developers.runonvision.com set no cookies and run no advertising or tracking code, and fonts and images are served from the websites themselves. The search and page-finder boxes on runonvision.com work in your browser and do not send what you type to us. If you choose how this site explains things, your browser remembers that choice on your device. It is never sent to us.
10.2 The Service. Vision and its sign-in service use cookies and similar browser storage that are strictly necessary to sign you in, keep you signed in, protect against forged requests, and remember settings such as your view choices. Without them, Vision cannot work.
10.3 No tracking. We do not use advertising cookies, cross-site tracking, or third-party analytics in the Service.
10.4 Browser signals. We do not track you across websites, sell personal data, or use it for targeted advertising. Our website honors Global Privacy Control: when your browser sends it, Google Analytics does not load. We will honor “Do Not Track” and other signals as the law requires.
10.5 Google Analytics. runonvision.com uses Google Analytics, a service from Google LLC, to learn which pages people visit, their rough location (such as the city or region), the device and browser they use, and how they arrived, such as from a search or a link. It uses cookies to tell one visit from the next. We do not use it for ads: its advertising features are turned off, and we never send it your name, your email address, or your answers to our forms. In the European Economic Area, the United Kingdom, and Switzerland, it sets no analytics cookies. To opt out, turn on Global Privacy Control in your browser, and our website will not load Google Analytics at all, or install Google’s opt-out add-on from tools.google.com/dlpage/gaoptout.
11. Children
In plain words
Vision is for businesses and adults. We don’t knowingly collect information from children.
11.1 The Service and the Websites are intended for businesses and for individuals who are at least 18 years old. We do not knowingly collect personal data from anyone under 18, except as Customer Data that a Customer chooses to put in the Service, for which the Customer is responsible. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this Policy
In plain words
If we change this Policy in a way that matters, we’ll email Owners before it takes effect and show the new date at the top.
12.1 We may update this Policy from time to time. We will post the updated Policy on this page with a new “Last updated” date. If a change materially affects how we handle personal data, we will notify Owners by email at least 30 days before it takes effect, and, where the law requires your consent, we will ask for it.
12.2 We keep this Policy up to date whenever billing, data handling, or the features it describes change.
13. Contact us
In plain words
Questions or requests about your privacy: email us, or write to us in Williamsburg, Virginia.
iVision Studios LLC
Attn: Privacy
6604 Richmond Rd PMB 10
Williamsburg, Virginia 23188-7233
United States
Email: hello@runonvision.com