Privacy Policy
Last updated: April 2026
1. Information We Collect
Account information. When you sign up we collect your email, name, and authentication identifiers. If you connect Google sign-in we receive your basic profile info.
Evaluation inputs. The niche names, descriptions, target customers, pricing, channels, budgets, and other inputs you provide in the evaluation wizard, together with the AI-generated analysis results.
Usage data. Logs of feature usage (searches, evaluations, exports), device and browser metadata, and basic analytics events used to improve the Service.
Payment data. Card and billing details are collected and stored by Stripe; we receive a customer ID and subscription status only — never raw card numbers.
2. How We Use Information
We use your data to: provide and operate the Service; generate AI analyses you request; manage subscriptions and billing; send transactional emails (receipts, security notices); improve product features and reliability; detect abuse and enforce our Terms; comply with legal obligations.
We do not sell your personal information.
3. Data Storage and Security
Account data, evaluations, and saved niches are stored in our managed Supabase database, encrypted in transit (TLS) and at rest. Access is restricted by Row-Level Security policies so that one user cannot read another user's evaluations.
We follow industry-standard practices for vulnerability management, secret rotation, and least-privilege access. No system is perfectly secure — please use a strong, unique password.
4. Third-Party Services
We share the minimum data required to operate with the following providers:
- Stripe — payment processing (email, billing details).
- SerpApi — Google Trends and Google Shopping queries (only the niche query string is sent).
- Reddit API — public community signal lookups (only the niche query string is sent).
- AI model providers (Anthropic, Google, OpenAI as applicable) — your evaluation inputs and prompts are sent to generate analysis. These providers process data per their own privacy and data-retention policies.
5. Cookies
We use first-party cookies for authentication, session management, and basic analytics. We do not use third-party advertising cookies. You can disable cookies in your browser, but core features (sign in, saved niches) require them.
6. Your Rights
Depending on your jurisdiction (GDPR, CCPA, and similar), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, please use our contact form.
7. Data Retention
We retain your account data and evaluations for as long as your account is active. If you delete your account we remove personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes (typically up to 7 years for billing records).
8. Contact
For privacy questions or requests, please use our contact form.