Privacy Policy

1. Overview

This Privacy Policy explains how we collect, use, store, and share information when you visit ideas.xeviora.com, use our native apps, and use our idea feed, idea generation, deep-dive report, and landing page features, and what rights you have over your data.

1.1 Who is responsible

Ideas is a product of Xeviora, a brand operated by LIU HU, a sole proprietor, who is the controller of the personal data described in this policy (“we”, “us”, “our”). Contact: support@xeviora.com

2. Information we collect

2.1 Information you provide

• Account information: the email address and password (stored hashed) you supply at signup.
• OAuth information: when you sign in with Google or GitHub, we receive the public profile data those providers share (email, avatar, display name).
• Sign in with Apple: when you sign in with Apple, we receive a stable Apple user identifier and an email address. If you choose Apple’s “Hide My Email” option, that address is a private relay address that forwards to your real inbox, and we never see your real address. Apple shares your name only the first time you sign in, and only if you choose to share it.
• Profile (optional): the role, industries, skills, experience level, budget, available time, goal, country, age range, and gender you choose to provide, plus, in our iOS app, an optional short bio, skill tags, and years of experience. We use it only to personalise your feed, to compute the “Is this for me?” fit scores described in Section 5, and to tailor the ideas, reports, and landing pages we generate for you. Age range and gender can always be skipped.
• Submitted content: the topics, prompts, and parameters you enter into the idea wizard, report generator, and landing page generator. We use this content solely to produce the outputs you requested.
• Purchase records: your plan, subscription status, and credit transactions. Payment details are handled by Paddle or the app stores, never by us (see Section 3).

2.2 Information collected automatically

• Log data: IP address, browser type, operating system, access time, and request paths.
• Usage data: which features you use, credit consumption, and generation/report task status.
• Cookies and local storage: used to keep you signed in and remember preferences such as dark mode (see Section 8).
• Device identifier (app only): our apps generate a random identifier (a UUID) and store it on your device. If you use the app without an account, we use it so that the ideas you like, save, and view are remembered; this guest data is merged into your account and deleted from our guest records if you later sign in. We also use it to associate a push-notification registration with your device (see Section 2.3). It is not an advertising identifier: we do not access the IDFA or any other advertising ID, and we do not track you across other companies’ apps or websites.
• Daily card allowance (iOS app): to apply the free daily card allowance described in our Terms, the iOS app sends your time zone, and we count the idea cards you have viewed on the current day (using the view records above).

2.3 Push notifications (iOS app)

If you turn on daily reminders in our iOS app, we store your Apple Push Notification service (APNs) device token, the device identifier described above, your time zone, the hour you chose, whether reminders are enabled, and the date of the last reminder sent — and, if you are signed in, your account identifier. We use this only to send you the daily reminder, which is delivered through Apple’s Push Notification service. You can stop reminders at any time by turning them off in the app or in iOS Settings; tokens that Apple reports as invalid are removed, and signed-in registrations are deleted when you delete your account.

3. Payment processing

Payments on our website are processed by our reseller and Merchant of Record, Paddle.com (“Paddle”). Paddle collects and processes your payment and billing information (such as name, email, billing address, country and payment details) as an independent data controller in order to process your order, calculate taxes, prevent fraud and meet its legal obligations. We never receive or store your full card details. We receive limited order information from Paddle (such as your email, country, plan and transaction status) to provide the service. See Paddle’s Privacy Notice: https://www.paddle.com/legal/privacy.

Purchases made inside our iOS, Android, or Mac apps are processed by Apple (App Store) or Google (Google Play) under their own privacy policies; we never receive your payment details. We use RevenueCat, Inc. to manage in-app purchases: when you are signed in, the app shares your Ideas account identifier with RevenueCat as its app user ID, and RevenueCat receives the purchase and receipt data from the store (such as product, price, transaction identifier, store country, and subscription state). We receive the purchase status from RevenueCat and use it to deliver your plan and credits. See RevenueCat’s Privacy Policy: https://www.revenuecat.com/privacy.

4. How we use information

• Generate ideas, deep-dive reports, and landing pages, and maintain and improve the service.
• Handle credit consumption, subscription management, and billing.
• Send service-related emails such as email verification and password resets, and, if you turn them on, daily push reminders in the iOS app.
• Apply the free daily card allowance in the iOS app.
• Detect and prevent fraud and abuse.
• Analyze usage trends to improve the product experience.
• Comply with applicable laws and regulations.

We do not send marketing emails. The only emails we send are transactional: email verification and password resets. Receipts for purchases on our website are sent by Paddle; receipts for in-app purchases are sent by Apple or Google.

5. AI processing

To provide idea batches, deep-dive reports, and landing pages, the content you submit — together with the profile details you chose to share — is sent to our AI service providers (OpenRouter and SiliconFlow, and the model providers they route to) for processing. We do not use your content to train models, and our providers process it only to return results to you.

Fit scores. If you are signed in and have filled in your founder profile, our apps can show how well each idea fits you. To compute this, your profile (including any bio and skill tags) and the text of the idea are sent to our AI provider (OpenRouter and the model provider it routes to), which returns only a score and references to items in your profile. We store the score against your account; it is recalculated when you change your profile and deleted with your account. If you do not fill in a profile, no fit scores are computed.

6. Landing pages and the people who sign up on them

If you publish a landing page, visitors to that page can leave their email address and, optionally, their name or a short message through the page’s sign-up form. That information is collected by the page creator — the Ideas user who published the page — who decides why it is collected and how it is used. We store and process it on the page creator’s behalf, only to provide the service to them.

• How it is stored: sign-ups are saved in our database (Neon) together with the time of submission and a one-way hash of the submitter’s IP address, used only to limit spam. We never store the raw IP address.
• Who can see it: only the page creator, in their Ideas account. We do not use sign-ups for our own purposes, we do not email the people who sign up, and we do not sell or share the data.
• How it is deleted: sign-ups are permanently deleted when the page creator deletes the landing page or closes their account. If you signed up on a page and want your details removed, ask the page creator, or email us at the address below with the page link and we will delete them.

Page creators are responsible for having a lawful basis to collect sign-ups and for how they use them, as set out in our Terms of Service. You can report a page from the link at the bottom of every public page.

7. Information sharing

We do not sell your personal information. We may share necessary information with third parties in the following cases:

7.1 Service providers

• Paddle (payments on our website): our reseller and Merchant of Record, acting as an independent data controller (see Section 3).
• Apple (App Store in-app purchases, Sign in with Apple, and the Apple Push Notification service for iOS reminders).
• Google (Google Play in-app purchases).
• RevenueCat (in-app purchase management): receives your account identifier and store purchase data and reports purchase status to us (see Section 3).
• OpenRouter and SiliconFlow (AI model aggregators): perform inference on the content you submit. The underlying model vendors operate under their own privacy and data-handling rules.
• Resend (email delivery): sends transactional emails (verification, password reset) on our behalf.
• Vercel and Neon (hosting and database): host the application and store your account and content data.
• Google and GitHub (sign-in): used when you choose to sign in with one of them.

7.2 Legal requirements

We may disclose information when required by law or when reasonably necessary to protect the rights, property, and safety of Ideas, our users, or the public.

8. Cookie policy

Ideas uses the following types of cookies and local storage:

Our session cookies are host-only (scoped to ideas.xeviora.com) and are not shared with any other site. We do not use advertising or analytics cookies. You can manage or delete cookies through your browser settings at any time, though doing so may affect some features.

9. Storage and security

• Account and content data is stored in a secured PostgreSQL database (Neon), with passwords hashed by Better Auth.
• Generated ideas, reports, and landing pages are stored against your account so you can revisit and export them.
• We use HTTPS, access controls, and other industry-standard security practices.
• That said, no internet transmission is ever fully secure and we cannot guarantee absolute security.

10. Data retention

• Account information: kept for the lifetime of your account and deleted within 30 days after closure.
• Generated ideas, reports, and landing pages: retained until you delete them or close your account.
• Landing page sign-ups: retained until the page creator deletes the page or closes their account, or until we delete them on request.
• Credit transactions: retained for two years to resolve billing disputes.
• Access logs: retained for no more than 90 days.
• Push-notification registrations: retained until you turn reminders off, the token becomes invalid, or you delete your account.

11. Your rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access: review the personal information we hold about you.
• Correction: correct inaccurate information (most fields can be edited in your account settings).
• Deletion: delete your account and associated data yourself — in our apps under Account › Delete account, or in Settings on our website — or ask us to do it.
• Export: receive a copy of your data in a portable format.
• Objection: object to or ask us to restrict certain processing.
• Complaint: lodge a complaint with a relevant data-protection authority.

To exercise these rights, email us at support@xeviora.com. We aim to respond within 30 days.

Deleting your account does not cancel an active subscription. Cancel a subscription bought in our apps in your Apple ID subscription settings or in Google Play › Subscriptions, and a subscription bought on our website from your account’s billing page, before deleting your account — otherwise it may keep renewing.

12. International transfers

Our service providers process data in the United States and other countries, which may have different data-protection laws from where you live. Where required, these transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

13. Children’s privacy

Ideas is not intended for individuals under 16 years of age. If we discover that we have collected personal information from a minor, we will delete it promptly. Please contact us if you believe a minor has provided us with personal information.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the service or via email. Continued use of Ideas after changes take effect constitutes acceptance of the updated policy.

15. Contact us

If you have questions or complaints about this Privacy Policy, please contact us:

Email: support@xeviora.com