Who we are: Venkataiah B is the person responsible for The AI Vault, which uses the VividLabs AI name. Contact location: Chennai, Tamil Nadu, India. For privacy questions or a request about your information, contact [email protected].
Last updated: October 29, 2026. This policy covers The AI Vault website, account and learning features.
Accounts are available to people aged 13 and over. Learners aged 13–17 need permission from an identifiable adult guardian before account creation. The guardian supplies their own email first, verifies it, and completes a manual review by Pratheep or Lasya using trusted age and identity evidence. AI Vault does not accept ID uploads or keep raw ID copies. We retain the review result, a protected reference, the notice version, consent time and learner link. An email checkbox alone is insufficient.
After approval, the guardian gives specific permission for the learner’s account email, profile and course progress. Guardians can withdraw permission in the guardian portal or contact support; this suspends further learner processing while financial access records remain intact. Optional advertising, behavioural activity counters and product-update emails are disabled for younger learners. Under-13 accounts are not supported.
Cloudflare hosts the website, account database and R2 video storage. Google handles sign-in if you choose Continue with Google; we receive your verified email and, when supplied, your profile name. Resend delivers sign-in links and site-owner account notifications. Kit (formerly ConvertKit), when configured, handles the vault email sequence and customer tags. Paddle processes purchases as merchant of record; payment details are entered with Paddle, and our website stores purchase references and access records.
Google measurement and Meta Pixel are described below. Support messages are handled through our support email. These providers may process information outside your country under their own service terms and privacy policies. Companion skills run on your computer; they are not a website file-upload service.
Google measurement records lesson previews, completed registrations and verified purchases separately. Purchase events include the transaction ID, product plan, currency and purchase value excluding tax; Google Analytics can also receive the tax amount. We do not send your email address, profile details, login links or card information, including through enhanced conversions. It does not subscribe you to product emails.
Temporary India ad test, ending 1 November 2026 at 00:00 India time (31 October at 18:30 UTC): for eligible visitors whose current request our hosting provider identifies as India, Google measurement can run after the adult age check without a separate opt-in popup. An inline notice provides “Turn off Google measurement” and Measurement settings. Google may use measurement cookies and technical visit information to connect this visit to a new verified registration, lesson preview or new purchase. This is a notice-and-opt-out policy, not a recorded consent grant. Previous refusals, Global Privacy Control, younger or unknown-age visitors, staff and identified test-account exclusions remain effective. We do not import older registrations or purchases into this test.
Outside that temporary India policy, including where the country is unknown, we ask before loading Google's cookies or tag and require a current adult opt-in. You can allow or decline measurement without affecting signup, lesson playback or purchases. Ad personalization remains disabled in every region. At the test deadline the India default stops; an independent explicit permission continues under the ordinary rules.
On the sign-up page, the optional “Allow for visit and new account” choice expressly covers this visit and the new account you create by verifying your email or Google account. We connect that choice only to the account verified through that sign-up attempt, so you do not need to repeat the same permission after verification. An earlier visit-only choice does not authorize measurement for a new account. “No thanks” and leaving the choice unanswered keep sign-up available without granting measurement. You can change the verified account’s choice later in Measurement preferences. Staff and identified test accounts are excluded from customer registration conversion counts. Authorized staff may run clearly labelled TEST ONLY signups with a separate test counter; their diagnostic data expires after seven days.
We keep coded evidence of that explicit sign-up choice, including its scope, notice version, choice time and verification time, with the consent history. This evidence does not extend the seven-day retention of campaign or click identifiers. Withdrawal removes pending measurement and attribution data; the minimal record of a past choice remains subject to the consent-history and erasure rules below.
With explicit permission, or while the temporary India policy above applies, campaign parameters and Google click identifiers help connect an ad visit to a registration or later purchase. We retain authorized registration attribution and a coded signup measurement record for up to seven days, so an email or Google sign-in redirect does not lose the original campaign and an interrupted signup event can retry. India-policy events require an authorized context captured before the new registration or purchase and remain restricted by the current country, eligibility, refusal and test deadline. The record can show that Google's browser software processed an event; it does not confirm that Google received or attributed it. We do not reconstruct missing campaign data. Global Privacy Control is respected. If measurement is not configured, no Google measurement tag is loaded.
Meta measurement has its own opt-in, separate from Google measurement. If you allow it, the Meta Pixel measures page views, first-episode starts and vault email requests on eligible pages. Your browser then connects to Meta, which can receive technical information about the visit and use its own cookies. Meta measurement is kept off sign-in, receipt and admin pages, and pages carrying sensitive URL or referral information.
Use Measurement preferences to allow or decline Meta measurement separately. Declining or withdrawing permission does not affect lessons or purchases. Global Privacy Control overrides an allowance. Page and lesson events from before permission are discarded. The additional purchase permission below can measure a recent verified purchase from the preceding 24 hours, including a purchase completed before that additional permission was given.
Meta purchase measurement is an additional, optional account choice in My Library, separate from both Meta page/lesson marketing and Google measurement. Earlier Meta permission does not authorize sharing purchase data. After you explicitly allow both current Meta purposes, an adult account can share up to three verified India full-Vault purchases completed within the preceding 24 hours, including a purchase completed before that additional permission was given: the value excluding tax, INR currency and a coded purchase reference. We do not include your name, email, raw payment transaction ID, card details or profile in this event. Meta's browser Pixel can still receive the technical visit information and cookies described above. Receipt, sign-in and other sensitive pages remain excluded. Declining does not affect your access, checkout or purchases.
US purchase measurement with Meta is a separate optional account choice shown before checkout for eligible signed-in adults, on verified purchase completion and after profile setup, and in My Library. The earlier Library-only US purchase choice does not authorize this expanded flow. The India purchase choice and general Meta marketing choice do not authorize it. After you explicitly allow both Meta marketing and US purchase measurement, we can share verified US purchases completed within the preceding 24 hours, including before this additional choice: their value excluding tax, USD currency and coded purchase references. After you allow it, we check a few recent purchases when you return from checkout, complete your profile or visit your Library. Receipt and profile URLs are not sent to Meta, and its browser Pixel remains absent on those pages. Anonymous landing permission does not automatically become account permission. We send these events directly to Meta with available Meta ad cookies, your IP address and browser information. We do not share your name, email, phone, raw payment transaction ID, card details or profile. This measurement is limited to eligible new customer accounts after activation; staff, existing accounts and identified tests are excluded. Declining or withdrawing does not affect checkout, access or purchases. Global Privacy Control and age restrictions prevent this optional sharing.
US purchase delivery records contain coded references, amounts, currency and delivery status for up to seven days; they do not retain ad cookies, IP addresses or browser information. Withdrawal or erasure removes the account link, amount, purchase time and delivery details. A coded suppression reference remains until the seven-day expiry to prevent the same purchase being sent again. A later choice cannot undo information already received by Meta.
Age choices use a signed, HttpOnly cookie for up to 30 minutes; guardian portal sessions last up to one hour. Sensitive privacy operations require a separate fresh authentication proof lasting up to 15 minutes. Purpose, notice version, choice and time are recorded for privacy preferences; anonymous choices use a random pseudonymous browser reference. No date of birth or raw identity document is stored.
The secure, HttpOnly vault_session cookie keeps you signed in for up to 24 hours. Google sign-in uses a short-lived g_oauth_state cookie for up to 10 minutes. If an adult adds a phone number during Google signup, that first-party cookie also binds the number to that signup attempt; the number is not sent to Google. The cookie is cleared when sign-in finishes or fails, and on logout. Email sign-in links expire after 15 minutes and can be used once; only a hash of the link token is stored in the account database. A phone supplied during email signup stays with that expiring challenge until ownership is verified. Neither method uses a phone number as identity proof.
After Google measurement opt-in, or while the temporary India notice-and-opt-out policy applies, a secure, HttpOnly vault_registration_context cookie can refer to the authorized campaign context for up to seven days. The cookie contains an opaque reference, not your email or campaign details. The explicit visit-and-new-account choice can authorize both during that verified sign-up attempt; an ordinary visit-only choice does not grant account consent. The temporary India policy is checked separately for the current eligible account and does not create such a grant. Turning off Google measurement removes this first-party attribution and recovery data.
Session storage helps display your signed-in header and temporary navigation or confirmation messages. Older visits may have saved an email for checkout prefill in local storage; the current marketing entry point leads to verified account signup. Separate Google and Meta measurement choices, Google event deduplication identifiers, and coded Meta purchase attempt references also use local storage. Purchase attempt markers are used for up to 24 hours and record an SDK invocation, not confirmed delivery or ad attribution. You can clear browser storage in your browser settings; doing so can sign you out or reset remembered preferences. Optional providers may set their own measurement cookies when loaded.
Downloading a course skill does not send your project files to this website. The included scripts run locally and write their own output folder. When you ask Claude Code, Codex, or another agent to use a skill, that agent may send the files it reads to its model provider under that provider's settings and terms. Read the included README before running it on private work.
No sale of personal data. No advertising use of your email outside this vault's own course emails. No WhatsApp messaging.
Adults may add a support phone number during signup or before secure checkout. A calling-code suggestion uses Cloudflare's visitor country and can be changed. Signup contact is attached only after account ownership is verified. Checkout phone entry stays in a separate first-party intent that expires after one hour; Paddle receives an opaque reference, not the number. After an eligible completed purchase is checked, we transfer the contact or discard it if safety or erasure controls refuse the transfer, and clear the raw phone from the intent. Expired intents are removed by bounded maintenance. You can correct or remove saved contact details in My Profile or include them in a verified erasure request. Phone entry is unavailable for younger learners.
We retain active account and lifetime access records. On a verified erasure request, we remove supported optional profile, progress and activity information after review, and track completion with relevant providers separately. Payment, tax, purchase and entitlement records are retained separately and are not erased by this tool. Erasing optional learner information does not cancel a purchase.
Superseded security, consent and closed privacy-request records are kept for one year, and closed support cases for two years, subject to an applicable preservation obligation. Inactive free accounts become eligible for optional-data cleanup after two years and at least 30 days’ email warning; anyone with purchase history or an active guardian relationship is excluded from automatic expiry. Current consent and active guardian authorisations remain while needed to provide the account; protected deletion journal entries remain as needed to prevent a restored backup from recreating erased data. Minimal identity needed to prevent mistaken re-registration and protect access is retained. Sign-in challenges expire after 15 minutes; hashed rate-limit counters expire within an hour.
Cloudflare D1 Time Travel currently retains recoverable snapshots for seven days. A separate private deletion journal prevents erased optional data from being reintroduced through a restore. Provider deletion and backup confirmation remain tracked tasks; local deletion alone is not reported as complete.
You can view and edit your account profile, including the optional product-update choice, in My Profile. You can clear an episode's completion from its course page. Use Measurement preferences in the footer to change optional Google and Meta choices where available. Vault course emails provide the email provider's unsubscribe option.
Use Your privacy centre to export your own information, record a correction, erasure, grievance or nomination request, and follow its status. Account ownership is verified before disclosure, and erasure requires a separate confirmation and operator review. Pratheep and Lasya handle requests through [email protected], with a service target of 30 days. You may also email us. To request access to or a summary of your information, correction, completion, updating, erasure, or withdrawal of an optional use, email [email protected] with the subject “AI Vault privacy request.” Use the email associated with your account and tell us which request you are making. We may need to verify account ownership before disclosing or changing information. Do not include your password, card details or sign-in token.
To raise a privacy concern or follow up on an unresolved request, email the same address with the subject “AI Vault privacy concern”. A request does not automatically delete your account or change your purchase. Any retention required for financial records must be considered separately from account profile and learning information.
If a concern remains unresolved after our grievance process, you may use any complaint route available under applicable law. Where the DPDP Act’s complaint provisions apply and the Board’s process is available, this includes approaching the Data Protection Board of India after exhausting our grievance process. Consult official MeitY guidance for current commencement information and procedures; we do not imply that a future procedure is already available.
Parents and lawful guardians can use the same contact to ask about a younger learner's information or guardian consent. Please do not send identity documents or a child's private information in an initial email.
This policy is governed by the laws of India.
The AI Vault