1. Information we collect
We collect the information you provide directly, including your name, email address, phone number, account details, Google account profile details when you use Google sign-in, legal acceptance records, business inputs, blueprint preferences, referral or reseller details, payment references, selected pricing tiers, promo-code usage, and subscription activation records.
We also process limited technical and usage data such as device/browser details, cookie-consent state, sign-in events, build and payment audit events, security logs needed to operate the service safely, and — where described in our Cookie Policy — privacy-friendly Vercel Web Analytics traffic data and, if you accept analytics cookies, PostHog product-analytics usage data.
2. How we use your data
We use personal data to provide the platform, deliver support, process payments, secure accounts, operate referral and reseller features, improve the product, and send launch-list or newsletter updates when you explicitly opt in to receive them.
We may also use your contact details for transactional emails such as verification links, password reset links, payment confirmation, subscription activation notices, blueprint updates, build notifications, generated-app owner access, and referral or reseller notices.
Aggregate site-traffic and, where consented, product-usage analytics help us understand which pages and features are useful and where visitors run into problems, so we can improve the product.
3. Legal basis and sharing
We rely on contract performance, legitimate interests, and consent where applicable. Consent is used for areas such as legal acceptance, cookie preferences, and optional launch-list, newsletter, or analytics-cookie communications.
We share data only with processors required to run the service, such as Supabase, Stripe, Vercel (hosting and privacy-friendly Web Analytics), OpenAI, PostHog (optional product analytics, only after you accept analytics cookies), Resend, and other email providers we use for transactional delivery. We do not sell your personal data.
4. Retention and security
We keep account data while your account is active and retain limited records afterward where needed for legal, billing, fraud, partner programme, or operational reasons.
IdeaPilot uses industry-standard safeguards including encryption in transit, access controls, audit logging, and tenant-scoped data boundaries.
5. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, export, or restriction of your personal data, subject to legal limitations.
To make a privacy request, email contact@ideapilot.ai.