Privacy policy

Iceberg is a service operated by Viridis Power (ABN 79 685 263 889) ("Iceberg", "we", "us"). It provides business-development intelligence for the Australian Government contract market, delivered through an MCP server that connects to the AI assistant you already use. This policy explains what data we hold, how we use it, and your choices. You can reach us any time at hello@icebergmcp.com.

Account and billing details: your name, email, company name and ABN, and payment information. Payments are processed by our payment provider; we do not store full card numbers.

The private layer you create: the contacts you load, the interactions and follow-ups you log, your saved bid responses and content library, your writing style rules, and the rules that define your market. This is your data, entered by you or your team.

Usage logs: which tools were called, when, how long they took, and whether they errored. We use this to run and improve the service. We do not log the content of your queries or their results in these usage logs.

Shared reference data: Iceberg is built on the public record of Australian Government contracts, tenders and the government directory. That information is published by government and is not personal data you provide to us.

To provide the service: build and maintain your market, map relationships, qualify tenders and help you write bids.

To operate and secure the service, handle billing, and provide support.

We do not use your data for advertising, and we do not sell it. We do not use your private data to train AI models.

Your data is hosted in Australia. Each customer organisation's private data is isolated from every other customer using row-level security, so you only ever see your own information.

Iceberg works by connecting to an AI assistant of your choice (for example Claude or ChatGPT). When you ask that assistant something and it uses Iceberg, your question and the data Iceberg returns pass through that assistant's provider, under that provider's own terms and privacy policy. We are not responsible for how a third-party assistant handles data once it leaves Iceberg. You choose which assistant to connect.

We never sell your data and never share your private layer with other customers. We use a small number of service providers to run Iceberg, including our cloud hosting and database provider, our payment provider, and our email provider. Each processes data only to provide their part of the service.

We may disclose information if required by law, or to protect the rights, safety and security of Iceberg and its customers.

We keep your data while your account is active. If you cancel, your private data (your market, your network, your content) is preserved for 30 days so you can pick up where you left off, then deleted. You can ask us to delete it sooner.

You can export everything Iceberg holds for your organisation at any time (your assistant can do this for you), correct your details, or ask us to delete your data. Email hello@icebergmcp.com and we will help.

Data is encrypted in transit and at rest, isolated per customer, and hosted onshore. Access to the Iceberg server is by a per-organisation token sent as a request header. No customer can reach another customer's data.

Our website uses only the cookies needed to sign you in and keep the site working. We do not use third-party advertising or tracking cookies.

We may update this policy as the service changes. We will post the new version here and update the date below. Material changes will be communicated to account holders.