Privacy Policy for Virtues

Effective Date: November 21, 2025

1. Introduction

Welcome to Virtues (“we,” “us,” or “our”). We operate the website virtues.com (the “Site”) and provide a personal AI platform designed to align technology with human flourishing (the “Service”).

We are committed to maintaining the trust and confidence of our users. This Privacy Policy outlines how we handle the information we collect across both our public Site and our private Service.

2. Our Core Privacy Principle: Sovereignty & Security

Virtues is built on a “Sovereign AI” architecture designed to maximize your privacy and control. We operate as a “hardware-software” hybrid company: we manage the infrastructure (servers) for you, but the data within those instances belongs exclusively to you.

• No Data Access: We cannot see your data, tables, SQL databases, or content. Our access is limited to high-level “hosting” metadata (e.g., account information, billing, and server identification) necessary to maintain your service.
• No AI Training: We do not use your personal data, communications, or any other information processed by your AI to train our models or any third-party models.
• Single-Tenant Architecture: Your data is processed in an isolated environment dedicated to you.
• Encryption: Your personal data is encrypted at rest (AES-256) and in transit (TLS).

3. Information We Collect

A. Information You Provide to Us

• Account Information: When you create an account, we collect your email address and basic profile information.
• Newsletter: When you visit our Site, we collect your email address if you voluntarily provide it to subscribe to our newsletter.
• Payment Information: We use a third-party payment processor (e.g., Stripe). We do not store your credit card details.

B. Information Collected from Connected Accounts

You may choose to connect third-party accounts to your personal AI to enhance its intelligence.

• Google Calendar: If you connect your Google account, we access your calendar data (read-only) to allow your AI to understand your schedule, energy patterns, and help you plan your day.
• Google API Services User Data Policy: Virtues’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Financial Data (Plaid): Through our integration with Plaid, we may process data such as transaction history and account balances. This data is encrypted and stored in your isolated instance. We do not see or monetize this data.

C. Cookies and Tracking Technologies (The Site)

We use cookies and similar tracking technologies on our Site through third-party service providers to enhance your experience and understand how our Site is used.

• Retention.com: When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.
• Opt-Out: You may opt out of receiving this advertising by visiting app.retention.com/optout.

4. How We Use Your Information

• To Provide the Service: To verify identity, manage your account, and sync encrypted data to your isolated instance.
• AI Processing: We use high-performance AI providers (such as Google Vertex AI and Cerebras) to power your personal intelligence. These services are configured for Zero Data Retention (ZDR): your inputs and outputs are processed in real-time and are never stored, logged, or used to train the underlying models by these providers.
• To Communicate (Service): Important updates, security alerts, and administrative messages.
• To Communicate (Marketing): Sending you our newsletter and updates about Virtues (only if you have opted in).

5. Data Sharing and Disclosure

A. Service Providers

We engage trusted third-party service providers (e.g., Google Cloud, Cerebras, AWS) for hosting and processing. They are subject to strict confidentiality and security obligations. As a “Sovereign AI” platform, we ensure these providers do not have access to your personal data for their own purposes and that all AI inference is performed under ZDR protocols.

B. Plaid Technologies, Inc

We use Plaid Technologies, Inc. (“Plaid”) to gather your data from financial institutions. By using our service, you grant Virtues and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy.

C. Legal Requirements

We may disclose your information (such as your account email) if required by law. However, because we do not store your personal AI data on our own corporate servers, we typically have no user-generated content to provide to third parties.

6. Data Security & Retention

• Security: We employ state-of-the-art security measures, including AES-256 encryption for data at rest and TLS for data in transit.
• Retention: We retain your account information only as long as your account is active. If you choose to delete your account, your isolated server instance and all associated data are purged from our infrastructure within 30 days.

7. Your Rights

GDPR (European Users)

If you are in the European Economic Area, you have the right to access, rectify, or erase your personal data, as well as the right to data portability and the right to object to certain processing.

CCPA (California Users)

California residents have the right to know what personal information is collected, the right to delete that information, and the right to opt-out of the “sale” of personal information (though we do not sell your data).

Other Jurisdictions

We respect privacy rights globally and will honor requests to access or delete your data in accordance with applicable local laws.

8. Children’s Privacy

Our Site and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly.

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@virtues.com.