Privacy Policy

Last updated: September 7, 2026

This Privacy Policy explains how VisionTroy Inc. (“VisionTroy,” “the Company,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our website at https://www.visiontroy.com/ (the “Website”) and the VisionTroy software platform, including Troy and Public Troy (together with the Website, the “Service”).

1. Two roles: how this policy applies to you

In short: for our website and business contacts, VisionTroy decides how information is used. For information a club puts into the platform, the club decides — we process it on the club’s behalf.

We handle information in two different roles, and your rights depend on which applies.

• Website visitors, prospects, and business contacts. When you visit the Website, submit a contact form, attend a seminar, or correspond with us, VisionTroy decides how that information is used. This policy applies directly to you.
• Club members, guests, and staff whose information a club processes through the platform. Clubs that subscribe to VisionTroy (“Customers”) upload and connect their own information — member records, invoices, calendars, banquet event orders, communications, and similar material (“Customer Data”). For Customer Data, the club is responsible for the information and decides how it is used; VisionTroy processes it on the club’s behalf and on its instructions, as a service provider or processor. If you are a member or guest of a club, please direct privacy questions and requests to the club. We will assist the club in responding.

2. Information we collect

In short: contact details you give us, account details for platform users, the information a club chooses to put into the platform, and basic usage and device data.

Information you provide to us

• Contact and inquiry details when you fill in a form, request a walkthrough, or contact us: name, email address, phone number, club or organization, role, and the content of your message.
• Account information for Authorized Users of the platform: name, work email address, role or title, department, and login credentials.
• Support and correspondence, including emails and messages you send us.

Customer Data provided by clubs

Customers and their Authorized Users upload to, or connect to, the platform the information needed to run their operations. Depending on the club, this may include member and guest names and contact details, preferences and dietary or allergy notes, event and reservation details, staff schedules and time-off, supplier invoices, and financial records. We process this information only to provide the Service to the club.

Information collected automatically

• Usage and log data such as pages viewed, features used, actions taken in the platform (including who reviewed and approved an action), timestamps, and error reports.
• Device and connection data such as IP address, browser type, operating system, and referring pages.
• Cookies and similar technologies, described in Section 8.

Information from third parties

With a Customer’s authorization, the platform may read information from the club’s other systems (for example point-of-sale, accounting, or membership systems) or from exports the club provides. We may also receive business contact information from partners, event organizers, or publicly available sources.

3. How we use information

In short: to run and support the Service, do the administrative work a club asks for, respond to you, improve reliability, keep the Service secure, and meet legal obligations.

We use information to:

• provide, operate, secure, maintain, and support the Service;
• use artificial intelligence to read information, draft documents and messages, and prepare and coordinate work for Customer staff to review and approve (see Section 4);
• respond to inquiries, schedule walkthroughs and seminars, and provide customer support;
• send administrative messages about the Service, and, to business contacts, information about VisionTroy that may be of interest (you may opt out at any time);
• monitor and improve the performance, reliability, and features of the Service, using aggregated or de-identified information where practical;
• detect, investigate, and prevent fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our agreements.

4. Artificial intelligence and human review

In short: AI prepares the work, a person approves it, and we never use a club’s information to train models for anyone else.

The platform uses AI to do administrative work on a club’s behalf. The platform is designed so that work the AI prepares is presented to the club’s staff as a draft for review and approval before it is finalized or sent to anyone, including a club member, and every action is logged with a record of who approved it. We do not use the platform to make automated decisions that produce legal or similarly significant effects on individuals without human involvement.

We do not sell Customer Data, and we do not use Customer Data to train AI models for the benefit of other customers or third parties. The platform learns how a specific club operates from that club’s own documents, within that club’s own environment. The third-party AI and cloud services we rely on are enterprise services engaged under agreements that prohibit them from using Customer Data to train their models.

5. How we share information

In short: with the service providers who help us run the platform, with the club whose data it is, and where the law requires. We do not sell personal information.

We share information only as described here:

• Service providers (subprocessors). Companies that help us provide the Service, such as cloud hosting and infrastructure, enterprise AI model providers, email delivery, analytics, and customer support tools. They may access information only to perform services for us and are bound by confidentiality and data-protection obligations. Our infrastructure and data storage are located in the United States.
• The Customer. Information processed on a club’s behalf is available to that club and its Authorized Users according to the roles and permissions the club sets.
• Professional advisors such as lawyers, accountants, and insurers, under confidentiality obligations.
• Legal requirements. When we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of VisionTroy, our Customers, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
• With your direction or consent.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

6. Security

In short: each club runs in its own dedicated, US-hosted environment, information is encrypted, access is limited by role, and actions are logged.

Each Customer’s platform environment runs in its own dedicated, private infrastructure hosted in the United States. Information is encrypted in transit and at rest, access is limited by role and permission, and actions within the platform are logged. We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us at info@visiontroy.com.

7. Data retention

In short: we keep information only as long as needed to provide the Service and meet legal obligations, then delete or de-identify it.

We retain Customer Data for the duration of the club’s subscription and for a reasonable period afterward to allow return or deletion as provided in the club’s Subscription Agreement, after which it is deleted or de-identified unless a longer period is required by law. We retain website inquiry, account, and correspondence information for as long as needed to fulfill the purposes described in this policy, to maintain business records, and to comply with legal obligations. Aggregated or de-identified information may be retained indefinitely.

8. Cookies and analytics

In short: we use cookies to run the site and understand traffic. You can control them in your browser.

The Website uses cookies and similar technologies to operate the site, remember preferences, and understand how visitors use it. We use Google Analytics to measure website traffic and usage; Google’s use of that data is governed by its own privacy policy. You can control cookies through your browser settings; disabling some cookies may affect how the Website works. The platform uses cookies and similar technologies that are necessary for authentication and security.

9. Your rights and choices

In short: you can ask us what personal information we hold about you, ask us to correct or delete it, and opt out of marketing at any time. Email info@visiontroy.com and we will help.

How to make a request

To exercise any right described below, email info@visiontroy.com with the subject line “Privacy Request” and tell us what you would like us to do. So that we can respond, please include enough information for us to locate your records — for example the email address you used to contact us or the club you are associated with.

• Verification. We will take reasonable steps to verify your identity before acting on a request, usually by confirming details we already hold. We will not ask you for more information than is necessary.
• Timing. We will acknowledge your request promptly and respond within the period required by applicable law (generally 45 days, extendable once where permitted, with notice to you).
• Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and may ask you to verify your identity directly.
• Appeals. If we decline your request and the law in your state provides an appeal right, you may appeal by replying to our decision with the word “Appeal.” We will review and respond in writing. If we deny the appeal, you may contact your state attorney general.
• No discrimination. We will not deny you services, charge you a different price, or provide a different level of service because you exercised a privacy right.
• No fee. We do not charge a fee to respond, unless a request is excessive or repetitive, in which case we will tell you before proceeding.

Marketing communications

You may opt out of marketing email at any time using the unsubscribe link in the message or by contacting us. We will still send administrative messages about the Service, such as account, security, or billing notices.

United States residents

A number of states have comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. If you are a resident of a state with such a law, you may have some or all of the following rights, depending on your state:

• Know and access. Confirm whether we process your personal information, and obtain access to it and a portable copy.
• Correct. Ask us to correct inaccurate personal information.
• Delete. Ask us to delete your personal information, subject to legal exceptions.
• Details of processing. Learn the categories of personal information we collect, the sources, our purposes, and the categories of third parties with whom we share it.
• Opt out of the sale of personal information, of sharing or processing for targeted or cross-context behavioral advertising, and of profiling that produces legal or similarly significant effects.
• Limit the use and disclosure of sensitive personal information.
• Withdraw consent where we rely on your consent, and appeal a decision on your request where your state provides that right.

What we do and do not do. We do not sell personal information. We do not share personal information for targeted or cross-context behavioral advertising. We do not use personal information for profiling that produces legal or similarly significant effects, and we do not use or disclose sensitive personal information beyond the purposes permitted by law. In the twelve months before the date of this policy, we have not sold or shared personal information for those purposes.

Categories of information. The categories of personal information we may collect are described in Section 2 and include identifiers and contact details, professional or employment information, commercial information, internet and device activity, and, for Customer Data, the categories a club chooses to place in the platform. We collect this information from you, from the club you are associated with, from your use of the Service, and from the sources described in Section 2. Our purposes are described in Section 3, and the categories of recipients in Section 5.

California. California residents have the rights described above under the CCPA as amended by the CPRA. California’s “Shine the Light” law also permits residents to request information about disclosures of personal information to third parties for their direct marketing purposes; we do not make such disclosures. California residents under 18 who are registered users may request removal of content they have publicly posted.

Colorado, Connecticut, and similar states. Residents of these states have the rights described above, including the right to appeal a decision on a request as described under “How to make a request.”

Nevada. Nevada residents may direct us not to sell certain personal information. We do not sell personal information, but you may submit a request to info@visiontroy.com.

Other regions

If you are located in the European Economic Area, the United Kingdom, Switzerland, or Canada, you may have rights to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority. Where we process personal information about EEA or UK individuals, we do so on the basis of our legitimate interests in operating and marketing our business, to perform a contract with you, with your consent, or to comply with a legal obligation. Because our operations and servers are in the United States, information is transferred there; where required, we use appropriate safeguards for such transfers.

Club members and guests

If your personal information is held by a club and processed through the platform, the club decides how that information is used. Please send your request to the club directly. If you contact us instead, we will promptly refer your request to the club and assist the club in responding, as required by our agreement with them.

Do-Not-Track

Most browsers include a Do-Not-Track (“DNT”) setting. No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to them. If a standard is adopted, we will update this policy.

10. Children

In short: the Service is for adults in a business setting.

The Service is intended for use by adults in a business setting. We do not knowingly collect personal information directly from children under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

11. International transfers

In short: we are based in the United States and your information is stored there.

VisionTroy is based in the United States, and our infrastructure and data storage are located there. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards for such transfers, including the European Commission’s Standard Contractual Clauses where required. Further detail is available on request at info@visiontroy.com.

12. Links to other websites

The Website may link to third-party websites we do not control. This policy does not apply to those sites, and we encourage you to review their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Website and revise the “Last updated” date. For material changes affecting Customers, we will provide notice as required by the Subscription Agreement.

14. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

VisionTroy Inc.
4539 N 22nd St, Ste N
Phoenix, AZ 85016
United States
Email: info@visiontroy.com