Privacy Policy

1. Introduction

MDJ Marketing LLC ("we", "our", or "us") operates AI-Venture (progar.ai). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including GDPR (EU) and CCPA (California).

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Profile Data: Optional profile picture, company name, preferences
• Business Ideas: Descriptions, industry, target market, financial data
• Generated Content: Company names, logos, financial projections, analyses
• Payment Information: Processed by Stripe (we don't store card numbers)
• Communications: Feedback, support requests, emails

2.2 Automatically Collected Information

• Usage Data: Features used, analyses run, time spent, clicks
• Device Information: Browser type, OS, device ID, IP address
• Log Data: Access times, pages viewed, errors, performance metrics
• Cookies: Session cookies, authentication tokens, preferences

2.3 AI Processing Data

• Business idea prompts sent to AI models
• AI-generated analyses and suggestions
• Search queries for competitive intelligence
• Logo generation prompts

3. How We Use Your Information

We use collected information to:

• Provide the Service: Process analyses, generate content, save your work
• Authentication: Secure your account and verify identity
• Billing: Process payments and manage subscriptions
• Communication: Send receipts, updates, notifications
• Improvement: Analyze usage patterns, improve AI models, fix bugs
• Support: Respond to inquiries and troubleshoot issues
• Security: Detect fraud, abuse, and security threats
• Legal Compliance: Fulfill legal obligations

4. Third-Party Services

We use the following third-party services that may collect or process your data:

5. Data Sharing & Disclosure

We do NOT sell your personal information. We may share data in these situations:

• Service Providers: Third-party services listed above that help operate our platform
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or asset sale
• Consent: With your explicit permission
• Aggregated Data: Anonymous, aggregated statistics that don't identify you

6. Data Retention

We retain your data as follows:

• Account Data: Until you delete your account or request deletion
• Business Ideas: Until you delete them or your account
• Usage Logs: 90 days for security and debugging
• Billing Records: 7 years for tax compliance
• Feedback: Indefinitely (anonymized)

7. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Export: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing emails
• Object: Object to processing in certain circumstances
• Restrict: Request limited processing
• Withdraw Consent: Revoke consent for data processing

To exercise these rights, email support@twentytwenty.com with your request.

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication (Clerk)
• Regular security audits
• Access controls and logging
• Automated backups

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure adequate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Privacy Shield frameworks (where applicable)
• Service provider certifications (SOC 2, ISO 27001)

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Cookies & Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

See our Cookie Policy for details.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via:

• Email to your registered address
• Notice on our website
• In-app notification

The "Last Updated" date at the top indicates when changes were made.

13. Contact Us

For privacy-related questions, data requests, or concerns, contact us: