Privacy Policy

Baptiste & Co.  ·  Effective July 1, 2026

Who We Are

Marvin is a personal advisory system operated by Baptiste & Co. ("we", "us", "our"). Questions: lvb168@gmail.com

What We Collect

• Account information — your email address and a hashed passphrase, collected when you subscribe or join.
• Conversation data — messages you send to Marvin, stored to provide continuity across sessions.
• Payment information — handled entirely by Stripe. We never see or store your card number. We receive a customer ID and subscription status from Stripe.
• Usage data — basic server logs (timestamps, request paths) for system reliability. No analytics platforms, no tracking pixels.

What We Do Not Collect

• We do not collect your name, phone number, address, or any government ID unless you voluntarily provide it in conversation.
• We do not use cookies for tracking. A session token is stored in your browser solely to keep you logged in.
• We do not run ads. We do not have ad partners.

How We Use Your Data

• To provide the Marvin advisory service you subscribed to.
• To send system emails — subscription confirmations, payment failures, and service alerts. We do not send marketing emails.
• To improve the service over time, using aggregated and non-identifiable patterns only.

Data Sharing

We do not sell, rent, or trade your data. We share data only with:

• Stripe — to process payments and manage subscriptions.
• Anthropic — your conversation messages are sent to Anthropic's Claude API to generate responses. Anthropic's privacy policy governs their handling of that data.
• Law enforcement — only if required by a valid legal process.

Data Sharing

We share data only with service providers required to operate Marvin:

• Anthropic — your conversation messages are sent to Anthropic's Claude API to generate responses. Anthropic's privacy policy governs their handling of API data. They do not use API data to train their models by default.
• Stripe — payment processing and subscription management. We never see your card number.
• Uber Direct — delivery fulfilment, only when you request a delivery.
• Google (SMTP) — email delivery infrastructure for system emails.
• Law enforcement — only if required by a valid legal process.

Data Retention

Your data is retained while your account is active. If you close your account, personal data is deleted within 30 days, except payment records retained as required by tax law.

Security

Passphrases are hashed using scrypt (a memory-hard algorithm — significantly stronger than plain SHA-256). All traffic is encrypted over HTTPS. We use JWT-based sessions with expiry and role-isolated access controls on all data.

Your Rights

• Export all your personal data — use "Export my data" in Settings → Your Data.
• Delete your account and all data — use "Delete Account" in Settings → Your Data. Stripe subscription is cancelled immediately.
• View and delete individual memories Marvin has stored — Settings → Memory.
• For requests you cannot complete in-app, email lvb168@gmail.com. We respond within 30 days.

Children

Marvin is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

Changes to This Policy

We may update this policy. We will post the new effective date above and, for material changes, notify you by email.