Privacy Policy
We are committed to protecting your data and giving you transparent control over it. This policy explains what information we collect, how we use it, and the safeguards we maintain.
Last updated: 2 November 2026 · GDPR & CCPA aligned
Information we collect
We collect the minimum information needed to operate the service and support your simulations.
- Account details such as name, email, phone number, and billing address.
- Workspace content including ideas, simulation inputs, generated insights, and attachments you upload.
- What you type into the Idea Refiner, so it can reply and help you shape your Lean Canvas and variables.
- API access requests: your name, work email, organisation, role, optional website and country, the reason you give, and the IP address the request came from.
- Technical data needed to run and secure the service, such as IP addresses and error reports in our server logs. We do not use analytics or advertising trackers.
- Support communications that you share with our team by email.
How we use your data
Data processing is limited to purposes compatible with delivering and improving Idea Simulator.
- Provide, maintain, and improve the Idea Simulator platform.
- Personalize simulations, dashboards, and notifications for your team.
- Detect, investigate, and prevent security incidents or abusive behavior.
- Comply with legal obligations, audit requirements, and enforce our Terms.
Sharing with third parties
We rely on a small number of service providers: our hosting provider, our email delivery provider, a payment provider when you upgrade, and AI model providers (such as Groq and Google Gemini) that process what you type into the Idea Refiner to generate its replies. Each processes data only to provide its service to us.
We may disclose information to comply with law, respond to valid legal process, or protect the rights and safety of our users. If legally permitted, we will notify you before sharing your information with authorities.
Retention & security
Workspace data remains encrypted at rest and in transit. Production access is limited to approved personnel with multi-factor authentication. We retain personal data for as long as you maintain an account or as required by law.
- API access requests: the IP address is deleted after 30 days. Declined requests, and requests we never answered, are deleted after 12 months. Approved requests are kept while your access is active.
- The Idea Refiner keeps your conversation in your browser for the current tab only; it is not stored in your account.
Your rights & choices
Residents of the European Economic Area, United Kingdom, and California have additional rights, which we extend to all users.
- Access and export your personal data in a portable format.
- Request correction of inaccurate or incomplete information.
- Delete your account and associated personal data, subject to legal retention requirements.
- Object to certain processing activities or withdraw consent where consent is the legal basis.
International data transfers
Some of our service providers, including our AI model providers, may process data outside your country. When data is transferred across borders we rely on Standard Contractual Clauses and other approved safeguards to protect your information.
Updates
We review this policy at least annually. Significant changes will be announced via email and an in-app banner before the effective date. Continued use of Idea Simulator after updates constitutes acceptance of the revised policy.