Privacy Policy

Effective date: 7 March 2026

1. Introduction

IAM Research Suite (“we”, “us”, or “our”) is a research productivity platform operated from South Africa. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service. By using IAM Research Suite, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

Account data via Google Sign-In: When you authenticate with Google OAuth, we receive your name, email address, and profile picture. We store these in our database to identify your account.
User-created content: Timelines, items, notes, and any files you upload to the service.
Usage data: We use Vercel Analytics to understand how the service is used. This data is anonymous and does not use cookies or track you across other sites.

3. How We Use Your Information

To provide, operate, and maintain the service
To identify you across sessions and associate your content with your account
To improve features based on anonymous usage patterns
We do not sell your personal information to third parties

4. Third-Party Services

We use the following third-party services to operate IAM Research Suite:

Google — Authentication (OAuth)
Convex — Database (stores your name, email, phone number, and profile image)
AWS S3 — File storage for uploaded images and documents
Vercel — Hosting and anonymous analytics
Anthropic — AI features powered by the Claude API
ElevenLabs — Text-to-speech functionality

Each provider processes data according to their own privacy policies and applicable law.

5. Data Retention

Your personal data and content are retained for as long as your account is active. If you request deletion of your account, we will remove your personal data and user-created content within a reasonable timeframe, unless retention is required by law.

6. Your Rights (POPIA)

Under the Protection of Personal Information Act (POPIA), you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Object to the processing of your personal information
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at mark@yellow-llama.com.

7. Security

We implement industry-standard security measures including HTTPS encryption for all data in transit. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Contact

For privacy-related questions or requests, contact us at mark@yellow-llama.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users. Your continued use of the service after changes take effect constitutes your acceptance of the updated policy.