Privacy Policy
We believe in radical transparency. This document explains exactly what data we collect, why we need it, and how you stay in control — in plain language.
Data Controller
Valideum (“we”, “us”, “our”) is the data controller responsible for your personal information collected through this website and platform (“Service”).
For any privacy-related queries, contact us at: privacy@valideum.com
Data We Collect
We collect only what is necessary to provide the Service:
- Account dataEmail address and hashed password (stored securely via Supabase Auth). Passwords are never stored in plain text.
- Idea contentBusiness idea text you submit for validation analysis. This is the core of our service.
- Payment metadataTransaction records processed via Stripe. We never store card numbers or full payment credentials — these remain exclusively with Stripe.
- Support communicationsMessages and replies exchanged via our support channel.
- Usage logsServer-side access logs (IP address, browser, pages visited) retained for security and operational purposes.
We do not currently use third-party analytics cookies or marketing tracking pixels. Should this change, this policy will be updated and users notified in advance.
Legal Basis for Processing
Under EU GDPR (Article 6), we process your data under the following lawful bases:
Processing your idea, delivering validation reports, and managing your account.
Server security logging, abuse prevention, and service improvement.
Retaining transaction records required by applicable tax and accounting law.
Where we ask for permission before optional communications or new data uses.
How We Use Your Data
- Authenticate your account and maintain session security
- Run AI-powered analysis of your submitted business ideas
- Process payments and issue receipts via Stripe
- Respond to your support requests
- Send transactional emails (magic links, campaign status updates)
- Maintain platform security and prevent fraudulent activity
- Comply with legal obligations
Data Retention
We retain personal data for as long as your account is active or as needed to provide the Service, subject to the following:
Your GDPR Rights
Under GDPR you have the right to:
Request a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data (“right to be forgotten”).
Limit how we process your data in certain circumstances.
Receive your data in a machine-readable format.
Object to processing based on legitimate interests.
To exercise any right, email privacy@valideum.com. We respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
Security
We implement industry-standard safeguards including TLS encryption in transit, bcrypt-hashed passwords, Row-Level Security (RLS) database policies, and API key rotation practices. No system is 100% secure; in the event of a breach affecting your rights, we will notify you within 72 hours as required by GDPR Article 33.
Policy Changes
We may update this policy to reflect changes to our practices or legal requirements. When we do, we will revise the “Last updated” date at the top and, for material changes, notify you by email or an in-app notice at least 14 days before the change takes effect.
Still have questions?
Reach our Data Protection contact directly.