Last updated: September 25, 2025
1. Introduction
IdeaValidator ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered startup validation platform.
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including:
- Account information (name, email address, password)
- Profile information (company name, industry, role)
- Business idea descriptions and validation requests
- Communication preferences and feedback
- Payment information (processed securely through Paddle, our payment processor)
- Support requests and correspondence
2.2 Usage Information
We automatically collect certain information about your use of our service:
- Log data (IP address, browser type, pages visited, time spent)
- Device information (device type, operating system, screen resolution)
- Usage patterns and feature interactions
- Performance data and error reports
- Referral sources and campaign tracking
2.3 Cookies and Tracking Technologies
We use various tracking technologies to collect information:
- Cookies (essential, functional, analytics, marketing)
- Web beacons and pixel tags
- Local storage and session storage
- Third-party analytics tools (Google Analytics, etc.)
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide, maintain, and improve our AI validation services
- Process your validation requests and generate comprehensive reports
- Personalize your experience and recommend relevant features
- Communicate with you about your account, services, and updates
- Send you technical notices, security alerts, and support messages
- Respond to your comments, questions, and support requests
- Analyze usage patterns to improve our AI algorithms and service quality
- Conduct research and development for new features
- Prevent fraud, abuse, and security threats
- Comply with legal obligations and enforce our terms
4. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:
4.1 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Cloud hosting and data storage (AWS, Google Cloud)
- AI and machine learning services (Anthropic, OpenAI)
- Payment processing (Paddle)
- Email communication (SendGrid, Mailchimp)
- Analytics and monitoring (Google Analytics, Mixpanel)
- Customer support tools (Intercom, Zendesk)
4.2 Payment Processing with Paddle
Important: Paddle acts as the merchant of record for all transactions processed through our platform.
When you make a purchase:
- Paddle is the merchant of record and processes your payment directly
- Paddle collects and processes your payment information independently
- Paddle handles all tax compliance, fraud protection, and payment security requirements
- We do not have access to or store your payment card details
- Paddle may share limited transaction information with us (such as transaction confirmation and customer email) to fulfill your order
- Paddle is responsible for all billing inquiries, chargebacks, and payment disputes
- Your payment data is subject to Paddle's privacy policy: https://paddle.com/privacy
- For any payment-related issues, you should contact Paddle directly
4.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our Terms of Service
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
5. Data Security
We implement comprehensive technical and organizational security measures to protect your personal information:
- Encryption in transit and at rest (AES-256, TLS 1.3)
- Secure authentication and access controls
- Regular security audits and vulnerability assessments
- Employee training on data protection practices
- Incident response and breach notification procedures
- Compliance with industry security standards (SOC 2, ISO 27001)
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy:
- Account information: Until you delete your account or request deletion
- Validation reports: 7 years for business records and analytics
- Usage data: 2 years for analytics and service improvement
- Communication records: 3 years for customer support purposes
- Legal compliance data: As required by applicable laws
You may request deletion of your data at any time by contacting us. We will process your request within 30 days, subject to legal retention requirements.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing of your information
- Restriction: Request restriction of processing
- Withdrawal: Withdraw consent for data processing
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, please contact us at inbox@ideavalidator.site. We will respond to your request within 30 days.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Certification schemes and codes of conduct
- Binding corporate rules
9. Third-Party Services
Our service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Key third-party services we use:
- Paddle (Payment Processing): Acts as merchant of record - see their privacy policy at https://paddle.com/privacy
- Google Analytics (Usage analytics)
- SendGrid (Email communications)
- Anthropic Claude API (AI services)
- Various social media platforms
10. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we discover that we have collected information from a child under 13, we will delete such information promptly.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to equal service and price
12. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to data portability, the right to be forgotten, and the right to object to processing.
Our lawful basis for processing your data includes: consent, contract performance, legitimate interests, and legal compliance.
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Sending email notifications for significant changes
- Displaying in-app notifications
We encourage you to review this privacy policy periodically to stay informed about how we protect your information.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
- Email: inbox@ideavalidator.site
- Address: [Your business address]
For payment-related inquiries, please contact Paddle directly through their support channels.