Back to Home

Privacy Policy

Last updated on January 30, 2026

1. Introduction

At BVE LABS, LLC, we believe that great digital experiences start with trust. As a premium AI and product development studio, our mission is to craft digital experiences that push boundaries, blending artificial intelligence with human creativity. We know that to deliver "thoughtful innovation," we must treat the information behind that innovation with the utmost respect.

Scope of Policy

This policy applies to all websites, mobile applications, and services owned and operated by BVE Labs LLC, including but not limited to ShiftFill AI, TeacherFill, TaxParse, EV Estimate, Secodai, Project Gosling, and Solvu.

This Privacy Policy isn't just a legal requirement; it is a declaration of how we value the people behind the data. Whether you are a client using our AI-powered design tools, a partner collaborating on smart automation, or a visitor exploring our creative work, this document explains how we handle your personal information.

We have written this policy to be as clear and human-readable as possible. We want you to understand exactly what we collect, why we need it, and how you remain in control of your digital footprint.

If you have any questions after reading this, please reach out to us directly at legal@bvelabs.com.

2. What We Collect & Why

We believe in data minimalism. We only collect the information necessary to provide our services, improve our AI models, and ensure a seamless experience for you. Here is a breakdown of the data we process and the legal basis for doing so.

Information You Provide Directly

When you engage with BVE Labs, you actively share certain information with us.

  • Account & Identity Data: This includes your name, email address, company name, job title, and phone number (for SMS-enabled services like ShiftFill AI).
    • Why we need it: To create your workspace, verify your identity, communicate with you about your projects, and send SMS notifications where you have opted in.
    • Legal Basis: Performance of a Contract.
  • Billing Information: If you purchase a paid service, we collect billing addresses and payment details (processed securely by our payment providers, not stored on our servers).
    • Why we need it: To process payments and comply with tax regulations.
    • Legal Basis: Performance of a Contract and Legal Obligation.
  • Project & Input Data: This includes the creative briefs, design assets, text prompts, or datasets you upload to our platform for AI processing or product development.
    • Why we need it: This is the raw material required to deliver our core service—crafting your digital product.
    • Legal Basis: Performance of a Contract.

Information Collected Automatically

When you interact with our platform, our systems automatically log certain technical details to keep things running smoothly.

  • Technical Usage Data: We collect IP addresses, browser types, device information, and operating systems.
    • Why we need it: To troubleshoot bugs, ensure our platform renders correctly on your device, and maintain the security of our infrastructure.
    • Legal Basis: Legitimate Interest (Network Security and Service Improvement).
  • Interaction Metrics: We track how you navigate our dashboard, which AI features you use most, and session duration.
    • Why we need it: To understand user behavior so we can refine our UX and prioritize new features that actually matter to you.
    • Legal Basis: Legitimate Interest.

SMS and Mobile Data (Twilio/Carrier Compliance)

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

3. How We Use Your Information

We don't collect data just to have it. Every piece of information serves a specific function in delivering the excellence BVE Labs is known for.

  • To Deliver Our Services: First and foremost, we use your data to build the products you asked for. This includes processing your inputs through our AI models, managing your project workflows, delivering final assets, and sending transactional notifications and SMS alerts via ShiftFill AI where you have opted in.
  • To Improve Our Platform: We analyze usage patterns to make our smart automation smarter. For example, if we see users struggling with a specific workflow, we use that insight to redesign the interface.
  • To Communicate With You: We send transactional emails (invoices, password resets) and, if you've opted in, newsletters about the latest trends in AI and design.
  • To Ensure Security: We monitor log data to detect and prevent fraud, abuse, or security incidents. This protects both your proprietary data and our platform integrity.
  • To Comply with the Law: In rare cases, we may need to process data to comply with a court order or regulatory requirement.

4. When We Share Your Information

Honesty is key here: We do not sell your personal data. We are in the business of product development, not data brokering. However, we do share data with select partners who help us keep the lights on and the servers running.

  • Essential Service Providers: We trust third-party vendors to handle specific technical tasks. These include:
    • Cloud Hosting Providers (to store your data securely).
    • Payment Processors (to handle credit card transactions).
    • Customer Support Tools (to help us manage your tickets).
    • SMS Service Providers (Twilio for ShiftFill AI messaging - phone numbers are never shared for marketing purposes).
    • Note: We have strict Data Processing Agreements (DPAs) with these providers to ensure they protect your data as rigorously as we do.
  • Business Transfers: If BVE Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal. We will notify you via email and a prominent notice on our website if this happens.
  • Legal Requirements: We may disclose information if required by law, such as in response to a subpoena, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Your Privacy Rights

Regardless of where you are located, we believe you should have control over your data. We extend GDPR and CCPA/CPRA rights to all our users globally.

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectify: Ask us to fix any inaccurate or incomplete personal data.
  • Delete: Request that we erase your personal data (the "right to be forgotten"), subject to certain legal retention requirements.
  • Portability: Ask for a copy of your data in a structured, machine-readable format to take elsewhere.
  • Opt-Out: Unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails, or text "STOP" to opt out of SMS messages.
  • Withdraw Consent: If we are processing data based on your consent, you can change your mind at any time.

How to Exercise These Rights:
Send an email to legal@bvelabs.com with the subject line "Privacy Rights Request." We aim to respond to all verified requests within 30 days.

6. Data Security

We treat your data with the same care we treat our own code. We employ industry-standard technical and organizational measures to protect your information.

  • What We Do: We use encryption in transit (TLS/SSL) and at rest. We enforce strict access controls (least privilege principle) so that only employees who need to see your data to do their jobs can access it. We also conduct regular security audits.
  • Our Honest Limitation: While we strive for creative and technical excellence, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we promise to be transparent.
  • Breach Notification: In the unlikely event of a data breach that compromises your rights, we will notify you and the relevant regulatory authorities within the timeframes required by applicable law (typically 72 hours under GDPR).

7. Data Retention

We do not hoard data. We keep your personal information only as long as necessary to fulfill the purposes outlined in this policy.

  • Active Accounts: We retain your account data for the duration of our relationship plus a reasonable buffer period (usually 12 months) to allow for account reactivation.
  • Financial Records: We are legally required to keep transaction records for tax and accounting purposes for at least 7 years.
  • Technical Logs: Server logs and technical data are typically retained for a short period (e.g., 90 days) for security monitoring before being deleted or anonymized.
  • Marketing Data: If you opt out of marketing, we retain your email on a "suppression list" to ensure we don't accidentally email you again.

8. Cookies & Tracking

We use cookies to make our platform work and to understand how it's being used. We do not use cookies to track your behavior across unrelated websites.

  • Essential Cookies: These are necessary for you to log in and navigate the site. You cannot switch these off.
  • Analytics Cookies: These help us see which pages are popular and where users get stuck. You can choose to opt out of these.

You can manage your cookie preferences through your browser settings or via the cookie banner on our website.

9. Children's Privacy

BVE Labs provides professional B2B services. Our platform is not designed for, nor do we knowingly collect data from, children under the age of 18.

If we discover that we have inadvertently collected personal information from a child, we will take immediate steps to delete that data. If you are a parent or guardian and believe your child has provided us with information, please contact us immediately.

10. International Transfers

BVE Labs operates with a global mindset. Our primary servers may be located in the United States or other jurisdictions. This means your data may be transferred to, and processed in, countries other than the one in which you live.

When we transfer data across borders, we ensure appropriate safeguards are in place. For transfers from the EEA/UK to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data remains protected to the same high standard.

11. Changes to This Policy

Technology evolves, and so will our business. We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.

  • Minor Changes: We will update the "Last Updated" date at the top of this page.
  • Material Changes: If we make significant changes that affect your rights, we will notify you actively—usually via email or a prominent banner on your dashboard—before the changes take effect.

We encourage you to review this page periodically to stay informed about how we are protecting your information.

12. Contact Us

We value open dialogue. If you have questions about this policy, concerns about your data, or just want to discuss our approach to privacy, our virtual door is open.

Thank you for trusting BVE Labs with your business and your data.