Last updated: 11 October 2026 · Scope: the public informational website at illuvrio.com.
1. Scope
This Privacy Policy explains how ILLUVRIO LLC ("Illuvrio", "we", "us") handles personal information when a visitor accesses this website or contacts the company. The website currently presents planned products and company information. It does not offer a public user login, customer AI chat, product subscriptions, waitlist, newsletter sign-up, online purchasing or a visitor account.
This policy does not describe processing by future AiGENT, Buddy or Illuvrio Cloud customer accounts. If those services launch, their applicable privacy information and contractual data-processing terms will be published before relevant processing begins.
2. Controller and contact
The responsible company is ILLUVRIO LLC, a Wyoming limited liability company, United States, Wyoming filing no. 2026-002058448. Its registered-agent/state-filing address is 30 N Gould St, Ste N, Sheridan, WY 82801, United States. That address is identified by its public registration role and is not asserted to be the company's staffed or actual operating office.
For privacy enquiries and requests use contact@illuvrio.com. Please mention "Privacy Request" in the subject line and provide only the information necessary to identify the relevant correspondence or processing. We may take proportionate steps to verify identity before disclosing personal information.
The company's stated jurisdiction of establishment is Wyoming, United States. The website provides company information and does not offer paid services or customer accounts.
3. Categories of information
3.1 Technical connection and security information
When your browser loads the website, the hosting/network provider may necessarily process your IP address, approximate network location, timestamps, requested URLs, HTTP response codes, browser or device characteristics, referral information and events needed to deliver, monitor and protect the site. We may have access to operational and security event information depending on the configured provider features and access controls.
3.2 Emails and other voluntary correspondence
If you send an email, we process the email address and other sender/recipient information, message subject, contents, any attachments you choose to send and the metadata required to deliver and reply. Correspondence may also contain information about your employer or business if you provide it. Please do not send credentials, full payment-card details, health records or other unnecessary sensitive information.
3.3 Website analytics
Cloudflare Web Analytics is enabled on this website. Its browser beacon measures aggregate page views, referrals and website performance. According to Cloudflare's documentation, this service does not set analytics cookies or track individual visitors across different websites. Technical request processing by Cloudflare as a network provider is described separately above. We do not use the analytics feature to build individual marketing profiles. See the Cookie & Tracking Notice.
3.4 No website accounts or promotional profiling
The site code does not collect account credentials, payment information, AI prompts, uploaded documents, marketing waitlist records or newsletter preferences. No embedded third-party advertising pixels, behavioral advertising profiles, visitor chat widgets or tracking forms are included in the current site source.
We do not intentionally use this website to sell visitors' personal information or create advertising audiences. Later changes to forms, embedded videos, logins, advertising or product services will require an appropriate policy and consent review before launch.
4. Purposes and legal bases
Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following bases as appropriate to the actual processing:
| Purpose | Typical information | Legal basis |
|---|---|---|
| Deliver pages and maintain availability | Connection requests and basic technical data | Legitimate interests (Art. 6(1)(f)) in operating the informational website |
| Understand aggregate website use and performance | Cloudflare Web Analytics page-view and performance measurements; no analytics cookies or individual marketing profiles | Aggregate statistics; where technical request data is personal information, legitimate interests (Art. 6(1)(f)) in measuring site reliability, subject to applicable law |
| Protect the website, detect abuse and investigate incidents | Security events, limited access information | Legitimate interests (Art. 6(1)(f)); legal obligations where specifically applicable (Art. 6(1)(c)) |
| Respond to company or product enquiries | Voluntary email contents and contact details | Legitimate interests (Art. 6(1)(f)); pre-contractual steps at your request where appropriate (Art. 6(1)(b)) |
| Maintain necessary records and handle legal requests | Relevant correspondence, evidence and transaction-free business records | Legal obligations (Art. 6(1)(c)) or legitimate interests (Art. 6(1)(f)), depending on the record |
Our legitimate interests include communicating with people who choose to contact us, keeping the public site reliable and secure, and retaining proportionate evidence to resolve disputes. Consent is not inferred merely from visiting the site. Any future non-essential cookies or direct electronic marketing requiring consent will be introduced only with appropriate controls and notice.
5. Providers and recipients
Website delivery uses Cloudflare Pages for hosting and Cloudflare for DNS and network delivery, with associated network and security processing. Cloudflare may act as a processor or in another role depending on the exact service. Please see Cloudflare's Privacy Policy for provider-level information.
The public contact route uses Cloudflare Email Routing to a business mailbox provided by Google Workspace. Messages sent through that route can therefore be handled by Cloudflare, Google and the applicable mail-transfer infrastructure. This is a temporary inbound routing arrangement and not an invitation to send unrelated sensitive documents. We do not publish or share the private destination mailbox address on this website.
We may also share the minimum necessary information with professional advisers, infrastructure support personnel, service providers or competent authorities where justified and legally permitted. We do not disclose correspondence to independent marketing brokers or sell site-visitor data. Supplier access should follow appropriate confidentiality, security and contractual arrangements.
6. International data transfers
ILLUVRIO LLC is a U.S. company. Network and email suppliers operate internationally, so personal information may be handled in the United States or other countries outside a visitor's home jurisdiction. We do not claim that all website or email information remains exclusively in the EU.
Where GDPR or other applicable law requires a specific transfer mechanism, the company is responsible for using an available lawful mechanism, such as an applicable adequacy decision or standard contractual clauses with any necessary assessments and additional safeguards. Which mechanism applies depends on the precise supplier entity, its certification status, contractual arrangements and actual data route. You may request information about relevant transfer safeguards at the contact address above, subject to confidentiality and legal limits.
7. Retention of Contact Information
We retain personal information submitted through email correspondence only for as long as reasonably necessary to respond to inquiries and manage related communications.
Routine correspondence, including email addresses and message content, is generally deleted within 12 months of the last substantive interaction, unless an ongoing business relationship, legal obligation, or legitimate need to establish or defend legal claims requires longer retention.
Spam and irrelevant messages are generally deleted within 30 days.
Email delivery and deletion may also be subject to the technical retention and backup procedures of our service providers.
Privacy and security requests are retained until resolved, plus the limited period reasonably needed to demonstrate how they were handled or meet legal obligations. Host/CDN and security events follow the infrastructure provider's applicable retention settings and the period necessary for operation or incident response. Material relevant to a legal obligation, complaint or claim may be retained for the applicable statutory or limitation period, with access restricted to that purpose.
8. Security
We take a proportionate approach to website and email security, including transport encryption where available, minimum necessary access, provider security controls and incident-response procedures. No internet transmission or email service can be guaranteed completely secure. Avoid sending passwords or unnecessary confidential information by ordinary email.
9. Rights under EU/EEA and UK data-protection law
Depending on applicable law and the circumstances, you may have rights of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, data portability where applicable, and withdrawal of consent for consent-based processing. Withdrawing consent does not invalidate earlier lawful processing. Statutory exceptions and identity-verification requirements may apply.
You can send a request to contact@illuvrio.com. We will assess the applicable rights and response deadline. You may also complain to the competent data-protection supervisory authority in your jurisdiction. Information about EU authorities is available through the European Data Protection Board.
10. Rights under U.S. state privacy laws
Certain U.S. states grant eligible residents additional privacy rights, depending on the law's coverage thresholds, exclusions and the type of information processed. If a law applies to our actual operation, we will handle verified requests as required and provide additional disclosures or opt-out mechanisms if necessary. The current site does not intentionally engage in targeted advertising or sell personal information collected through the site.
Do Not Track and cross-site collection
This informational website does not change its operation in response to a browser Do Not Track signal. Cloudflare Web Analytics remains enabled; it does not use individual cross-site visitor profiles. We do not permit advertising partners or embedded social-media services to collect personal information through this site about your activities over time and across different websites. Browser privacy tools may block the analytics beacon.
11. Cookies and similar technologies
The site does not install advertising pixels or application-set tracking cookies. Cloudflare Web Analytics is enabled and uses a cookie-free performance beacon. Cloudflare may also use security-related cookies or similar mechanisms where strictly necessary for network protection, depending on the enabled controls. See the separate Cookie & Tracking Notice.
If non-essential advertising tracking, embedded media, new analytics technologies or similar browser processing is added, we will update this policy and implement consent and withdrawal controls when required before enabling them.
12. Third-party websites and external content
Links to external sites are provided for convenience and are subject to those operators' policies. The initial website does not embed externally hosted videos, third-party social-media feeds, personalized advertising units or other external services designed to recognize visitors across websites. Images of AiGENT, Buddy and devices are illustrative presentations of proposed software, not interactive processing of visitor prompts.
13. Children's information
This corporate and product-information site is not directed to children and has no child account, social game, purchase feature or children's registration form. The presence of Buddy as a mascot does not make the website a children's data service. If we learn that personal information was submitted by a child in circumstances requiring removal or parental action, we will take steps required by applicable law.
14. Automated decision-making
The current website does not use automated decisions that produce legal or similarly significant effects about visitors, nor does it profile visitors for AI-driven customer eligibility or behavioral advertisements. Any later AI product service or automated processing would need its own disclosures.
15. Changes and contact
We will update this policy if the website's processing, service providers, international-transfer arrangements, contact route or applicable services change. A significant change will be communicated in a proportionate way where required. The revision date appears at the top.
Privacy enquiries: contact@illuvrio.com