Privacy Policy

We collect the minimum information needed to run IZONUS Proof. Most usage data stays on your device and is never sent to our servers.

• Email address — only when you check out via Stripe.
• Payment information — processed by Stripe. We never see or store card numbers, CVCs, or full payment details.
• Usage data — duel history, plan type, monthly usage counters. Stored in your browser's localStorage only. Never transmitted to us.
• BYOK API keys — Anthropic, OpenAI, and Google keys you optionally provide. Stored in your browser's localStorage only. Sent directly to the relevant provider per request and not logged by us.
• Skill submission data — when you voluntarily submit a skill via /submit: skill name, GitHub URL, optional email, optional handle, category, and optional description.
• IP addresses and basic server logs — via our hosting provider (Vercel). Retained for approximately 30 days for security and abuse-prevention purposes.

• To process payments and manage your subscription.
• To provide the benchmarking service — running duels, generating scores, and showing results.
• To respond to skill submissions, support requests, and account questions.
• To detect abuse, enforce rate limits, and protect the platform.

We do not sell your data to third parties. We do not use your data for advertising. We do not train AI models on your data.

We rely on a small number of vendors to deliver IZONUS Proof. Each operates under their own privacy policy:

• Stripe — payment processing. stripe.com/privacy
• Vercel — hosting and infrastructure. vercel.com/legal/privacy-policy
• Anthropic API — AI scoring. Your BYOK key (or our server key on the Free / shared tier) is used per request. We do not store individual API request payloads.

If you live in California, you have these rights:

• The right to know what personal information we collect about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. (We do not sell personal information.)
• The right to non-discrimination for exercising any of the above.

To exercise any of these rights, email support@izonus.io.

If you live in the European Economic Area, we process your data under the following legal bases: contract performance (to deliver the service you subscribed to) and legitimate interests (to operate, secure, and improve the platform).

You have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data (where we have no overriding legal obligation to retain it).
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to lodge a complaint with your local supervisory authority.

Data controller: IZONUS Proof / izonus.io. To exercise any of these rights, contact support@izonus.io.

• Stripe customer data — retained per Stripe's policy for the lifetime of your subscription and as needed for tax and accounting requirements.
• Skill submissions — retained until you request deletion.
• Server logs — approximately 30 days via Vercel.
• Browser localStorage — stays on your device. Cleared when you clear browser data or use IZONUS Proof's built-in clear-data tools.

We use essential cookies only. Specifically:

• izonus_plan_client — remembers your subscription tier so the right features unlock.
• izonus_auth — keeps you signed in during pre-launch.

We do notuse advertising or tracking cookies. The only third-party cookies set on our domain come from Stripe's checkout flow when you upgrade to a paid plan.

Questions about this policy or your data? Email us — we read every message.