Privacy Policy

Last updated: June 2026

At IdeeaTa.ai, your privacy and data security are our top priorities. This Privacy Policy explains how we collect, use, protect, and, where applicable, share your personal data in accordance with the General Data Protection Regulation (GDPR).

1. What Data Do We Collect?

When you use IdeeaTa.ai, we may collect the following categories of data:

• Authentication and Profile Data: Name, email address, profile picture (when you log in via Google or Facebook using Firebase Auth).
• User Generated Content: Business ideas entered, business plans generated, budget options, and shared links. These are safely stored in our Firestore database to allow you to access them from your dashboard.
• Transaction Data: If you upgrade to premium features, we do not directly collect or store your card details. All payment processing is performed securely by Lemon Squeezy. We only receive payment confirmation and a transaction ID.
• Technical and Usage Data: IP address, browser type, device used, and basic analytics data collected to optimize the platform and prevent abuse (e.g., rate limiting).

2. How Do We Use Collected Data?

• To provide the service: Processing your idea through AI APIs (Google Gemini) to return your business plan.
• To save history: Storing plans in Firebase so you can access and edit them later.
• To process payments: Validating access to the "Interactive AI Studio" following payment through Lemon Squeezy.
• For support and security: Preventing fraud, investigating errors (bug tracking), and providing technical support if you contact us.
• Communication: Sending you transactional emails (receipts, password resets) and, occasionally, onboarding emails from which you can unsubscribe at any time.

3. Data Sharing with Third Parties

We do not sell your personal data. Data is shared exclusively with service processors (sub-processors) strictly necessary for platform operation:

• Google (Firebase / Firestore): For database hosting, authentication, and plan storage.
• Google (Gemini AI): To generate the text. Note that we only send the text fragments (prompts) entered by you. We do not send your personal identification data to the AI model.
• Lemon Squeezy: To safely process your payments.
• Google AdSense: If advertisements are displayed, advertising providers may use their own technologies for personalized ads (see Cookies Policy).

4. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have the following rights:

1. Right of Access: You can request a copy of the data we hold.
2. Right to Erasure ("Right to be forgotten"): You can request the permanent deletion of your account and all plans from our database by sending an email to the address below. Data will be deleted within 30 days.
3. Right to Rectification: You can ask us to correct incorrect data.
4. Right to Withdraw Consent: You can revoke your agreement for cookies or marketing communications at any time.

5. Data Security

• Encryption: Data transmitted between your browser and our servers, as well as the Firestore database, are encrypted in transit and at rest.
• Shared Links: If you use the "Share" feature of a business plan, the generated URL will be public to anyone who has the link, so please treat it responsibly.

6. Contact

To exercise your GDPR rights or for other privacy questions, you can contact us at: [email protected].