Privacy Policy

This Privacy Policy explains what information Idea Validator (“we,” “us”) collects, how we use it — including how it is processed by artificial intelligence — and how it is stored. By using the Service you agree to the practices described here and in our Terms of Service.

• Account information: when you sign up, our authentication provider (Clerk) collects your email address and basic profile information.
• Idea submissions: the title, description, target market, monetisation plan, price point, and any follow-up messages you enter to generate a Report or chat with the AI consultant.
• Usage data: validation counts, timestamps, and a cookie used to track whether you have used your free validation before creating an account.
• Billing information: if you subscribe to a paid tier, payment details are collected and processed directly by our payment processor (Stripe) — we do not store full card numbers.
• Consultant profile data: if you sign in to the Consultant Directory using LinkedIn, we receive your name, email address, and profile photo from LinkedIn via Sign In with LinkedIn (OpenID Connect), and store them along with the title, company, and bio you enter yourself. This is a separate sign-in from the founder account above and does not give us access to your LinkedIn connections, messages, or activity — only the identity information you authorize at sign-in.

To generate a Report, the idea details you submit — and, if you use the consultant chat, your messages — are sent to a third-party large language model provider for processing. Public web search results and, where relevant, publicly available Reddit posts related to your idea may also be retrieved and sent to the model as supporting context.

Do not submit information you consider highly confidential, trade secret, or personally sensitive, since it will be transmitted to and processed by this third-party AI provider in order to generate your Report. We do not control how the AI provider internally processes requests, though we select providers that contractually restrict use of API inputs for training their models.

• To generate and display validation Reports and feasibility studies;
• To maintain your account and validation history;
• To enforce free-tier usage limits and prevent abuse;
• To operate, maintain, and improve the Service; and
• To communicate with you about your account or the Service.

We do not sell your personal information.

Account records and validation history (including the idea details and Report content) are stored in our hosted database provider (Supabase). Data is transmitted over encrypted connections and access to the database is restricted to authenticated server-side requests using a private service key that is never exposed to your browser.

We retain your account and validation history for as long as your account remains active, or as needed to provide the Service, resolve disputes, and comply with legal obligations. If you are not signed in, a single free validation Report may be temporarily held in your browser’s local session storage and is not retained by us once your session ends.

We share limited data with the following categories of third-party service providers, solely to operate the Service:

• AI model provider — to generate Reports and chat responses from your idea submissions.
• Authentication provider (Clerk) — to manage founder account sign-up, sign-in, and sessions.
• LinkedIn — to authenticate consultants and provide their name, email, and profile photo when they sign in to the Consultant Directory.
• Database host (Supabase) — to store account and validation records.
• Payment processor (Stripe) — to process subscription payments, if applicable.
• Search and Reddit data providers — to retrieve publicly available web and social content used as research context for your Report.

We do not share your data with third parties for their own marketing purposes. We may disclose information if required by law or to protect the rights, safety, or property of Idea Validator or others.

We use a small number of essential cookies, including one that records whether you have used your one free validation, so that the Service can determine when to prompt you to create an account. We do not use third-party advertising or tracking cookies.

You may request access to, correction of, or deletion of your personal data and validation history by contacting us. If you delete your account, we will remove your stored personal data within a reasonable period, except where we are required to retain it for legal or legitimate business purposes.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy can be directed to the contact information provided on our website.