1. Who We Are
ValaIdea (“we,” “us,” or “our”) operates the ValaIdea platform, a SaaS service that helps startup founders validate business ideas through 7-day sprints. Our website is located at valaidea.com.
For privacy-related questions, contact us at support@valaidea.com.
2. Information We Collect
Information you provide directly:
- Email address (required for account creation and authentication)
- Sprint data (idea descriptions, hypotheses, landing page content) that you submit during sprints
- Google account information if you sign in with Google OAuth
Information collected automatically:
- Sprint signal data (anonymous aggregate counts of page views, clicks, and signups on your validation landing pages)
- Basic analytics data via Google Analytics 4 (page views, referral source, device type, approximate location by country)
- Cookies and similar technologies (see our Cookie Policy)
Information we do NOT collect:
- We do not collect personal information about visitors to your validation landing pages — signal tracking counts events, not identities
- We do not collect payment card details — all payment processing is handled by PayPal
3. How We Use Your Information
- To create and manage your account
- To deliver the validation sprint service
- To generate verdicts based on signal data
- To send transactional emails (sprint updates, verdict delivery)
- To improve the platform and fix bugs
- To comply with legal obligations
We do not sell your data. We do not use your data to train AI models. We do not share your idea data with other users.
4. Third-Party Services
We use the following third-party services that may process your data:
- Supabase — Database hosting and authentication. Data stored in secure, encrypted databases.
- PayPal — Payment processing. PayPal handles all payment data. See PayPal's Privacy Policy.
- Google Analytics 4 — Website analytics. We use this to understand how visitors use our marketing site. See Google's Privacy Policy.
- Vercel — Website hosting and deployment.
- Google OAuth — Optional sign-in provider. We receive only your name and email address.
5. Data Retention
- Account data is retained while your account is active.
- Sprint data (ideas, landing pages, signal data) is retained while your account is active so you can reference past sprints.
- When you delete your account, all personal data and sprint data is deleted within 30 days.
- Anonymous, aggregated analytics data may be retained indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data (right to be forgotten)
- Export your data in a portable format
- Object to processing of your data
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email us at support@valaidea.com. We will respond within 30 days.
7. Data Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), encrypted databases, and secure authentication via Supabase. However, no method of transmission or storage is 100% secure.
8. International Data Transfers
Your data may be processed in countries outside your own. Our service providers (Supabase, Vercel, Google) maintain appropriate safeguards for international data transfers in compliance with applicable laws.
9. Children's Privacy
ValaIdea is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last updated” date. Continued use of ValaIdea after changes constitutes acceptance of the revised policy.
11. Contact
If you have questions about this privacy policy or your data, contact us at support@valaidea.com.