Your ideas are yours. Period.

1. What we collect

• Account data: email, display name, OAuth profile picture (if you sign in with Google).
• Idea data: the descriptions, target customer, stage, and notes you enter to evaluate an idea.
• Evaluation history: scores, verdicts, evidence, and tasks generated by the engine.
• Billing metadata: Stripe handles your payment details; we only store the subscription tier and receipt references.

2. How we use it

• To run your evaluations and show you your history.
• To improve our scoring engine, using aggregated, anonymous signals only.
• To send transactional email (receipts, password reset, deletion confirmations).
• We do not sell your data, ever.

3. AI data handling & transparency

To generate insights, we transmit anonymized idea descriptions to third party AI providers (e.g., OpenAI, Anthropic, Google). We utilize enterprise grade API tiers that strictly prohibit the use of your inputs for training the providers' base models. Your competitive advantage remains yours alone.

4. International data transfers

As a Portugal based company, we process data within the European Economic Area (EEA) under GDPR standards. If data is processed by providers outside the EEA, we ensure "Standard Contractual Clauses" (SCCs) are in place to maintain the highest level of protection.

5. How long we keep it

We retain your data for as long as your account is active. When you request deletion, your account enters a 30 day grace period (recoverable from your profile), after which everything, profile, ideas, evaluations, memory, attachments, is permanently destroyed.

6. Your rights (GDPR)

As an EU based service, we honor all GDPR rights, including:

• Access & portability: download your data as JSON from your profile.
• Rectification: edit your display name and ideas from your profile and dashboard.
• Erasure ("right to be forgotten"): request deletion from your profile; permanent after a 30 day grace window.
• Objection & restriction: contact us to limit specific processing.

Contact general@hubindify.com for any data related requests.

7. Cookies & local storage

We use essential cookies to keep you signed in, and your browser's local storage to remember your language preference and session. We do not run third party ad tracking pixels.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and audited. Row level security ensures your evaluations are visible only to you.

9. Changes

We may update this policy. Material changes will be announced in app and the "Last updated" date above will change.