Privacy Policy

Information We Collect

Information You Provide Directly

When you create an account or subscribe to our Service, we collect:

• • Account information: Your name and email address, provided through our authentication provider (Clerk). We do not collect or store passwords directly — authentication is handled entirely by Clerk.
• • Payment information: When you subscribe to our Pro plan, payment processing is handled by Stripe. We do not store your credit card number, bank account details, or other financial instrument data on our servers. Stripe provides us with a customer identifier, subscription status, and plan type to manage your account.
• • Profile preferences: Skills, budget range, niche interests, and experience level you optionally provide to personalize your experience.
• • Email preferences: Your email address and preferred digest frequency if you opt into email notifications.

Information Collected Automatically

When you access the Service, we may automatically collect:

• • Usage data: Pages visited, ideas viewed, ideas saved, and features used within the Service.
• • Device and connection information: Browser type, operating system, IP address, and referring URLs. This data is collected by Cloudflare as part of standard web delivery and security services.
• • Cookies and similar technologies: Cloudflare may set cookies for security and performance purposes. Clerk sets cookies to manage your authentication session. We do not use third-party advertising cookies or tracking pixels.

How We Use Your Information

We use the information we collect to:

• •Provide, operate, and maintain the Service
• •Manage your account and subscription status
• •Enforce usage limits based on your subscription tier (Free or Pro)
• •Deliver email digest notifications if you have opted in
• •Process payments through Stripe for Pro subscriptions
• •Protect against unauthorized access, fraud, and abuse
• •Analyze aggregate usage patterns to improve the Service (we do not sell or share individual usage data with third parties)

How We Share Your Information

We do not sell your personal information. We share information only with the following service providers, each of which processes data solely to support the Service:

• • Clerk — Authentication and identity management (name, email, session tokens)
• • Stripe — Payment processing (email, subscription plan, payment method handled directly by Stripe)
• • Cloudflare — Website hosting, CDN, DNS, and database (IP address, request metadata, account and idea data stored in D1)
• • Resend — Email digest delivery (email address, digest content)
• • Anthropic (Claude API) — AI-powered analysis of startup ideas (aggregated public data from source platforms; no personal user data is sent to the Claude API)

We may also disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Sources and AI-Generated Content

AIdeaPulse aggregates publicly available information from third-party platforms including Reddit, Hacker News, Product Hunt, GitHub Trending, Dev.to, Lobsters, NewsAPI, and Google Trends. This data is processed through AI analysis to generate startup idea briefs. The idea briefs, scores, and analyses presented on the Service are generated by artificial intelligence and are provided for informational purposes only. They do not constitute business, financial, or investment advice.

Data Retention

• •Account data is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
• •Saved ideas and preferences are deleted when your account is deleted.
• •Payment records may be retained by Stripe in accordance with their data retention policies.
• •Idea data (aggregated, non-personal) is retained indefinitely as part of the Service content library.

Data Security

We implement appropriate measures including:

• •TLS encryption on all data in transit
• •RS256 cryptographic signature verification on auth tokens
• •HMAC-SHA256 signature verification with timing-safe comparison on webhook communications
• •Cryptographic verification on payment webhook signatures
• •Rate limiting at the edge
• •Database access restricted to authenticated application services only

No method of electronic transmission or storage is 100% secure.

Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• •Access the personal data we hold about you
• •Correct inaccurate or incomplete personal data
• •Delete your account and associated personal data
• •Opt out of email digest notifications at any time through your account settings
• •Export your saved ideas and profile data

Contact [email protected] to exercise these rights. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information is collected, disclosed, or sold, and the right to opt out of the sale of personal information. We do not sell personal information.

European Economic Area Residents (GDPR)

If you are located in the EEA, our legal basis for processing includes: performance of our contract with you, your consent (email notifications), and our legitimate interests (security, fraud prevention, service improvement). You have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised "Last updated" date.

Contact Us

Email: [email protected]

Website: aideapulse.com