Privacy Policy

1. Overview

Ideas (“we”, “our”, or “the service”) respects your privacy. This Privacy Policy explains how we collect, use, store, and share information when you visit ideas.xeviora.com and use our idea feed, idea generation, and deep-dive report features, and what rights you have over your data.

By using Ideas, you agree to the information practices described in this policy. If you do not agree, please discontinue use of the service.

2. Information we collect

2.1 Information you provide

• Account information: the email address and password (stored hashed) you supply at signup.
• OAuth information: when you sign in with Google or GitHub, we receive the public profile data those providers share (email, avatar, display name).
• Payment information: subscription payments are handled directly by Paddle. We store only your subscription status, plan, and billing records — never your card details.
• Submitted content: the topics, prompts, and parameters you enter into the idea wizard and report generator. We use this content solely to produce the ideas and reports you requested.

2.2 Information collected automatically

• Log data: IP address, browser type, operating system, access time, and request paths.
• Usage data: which features you use, credit consumption, and generation/report task status.
• Cookies and local storage: used to keep you signed in and remember preferences such as dark mode (see Section 5).

3. How we use information

• Generate ideas and deep-dive reports, and maintain and improve the service.
• Handle credit consumption, subscription management, and billing.
• Send service-related notifications such as password resets and billing confirmations.
• Detect and prevent fraud and abuse.
• Analyze usage trends to improve the product experience.
• Comply with applicable laws and regulations.

We do not use your personal information for marketing emails. The only emails we send are transactional: email verification, password resets, and billing confirmations.

4. Information sharing

We do not sell your personal information. We may share necessary information with third parties in the following cases:

4.1 Service providers

• Paddle (payments): processes subscriptions and billing as our Merchant of Record, under its own privacy policy.
• OpenRouter and SiliconFlow (AI model aggregators): perform inference on the topics and prompts you submit. The underlying model vendors operate under their own privacy and data-handling rules.
• Resend (email delivery): sends transactional emails (verification, password reset) on our behalf.
• Vercel and Neon (hosting and database): host the application and store your account and content data.

4.2 Legal requirements

We may disclose information when required by law or when reasonably necessary to protect the rights, property, and safety of Ideas, our users, or the public.

5. Cookie policy

Ideas uses the following types of cookies and local storage:

Our session cookies are host-only (scoped to ideas.xeviora.com) and are not shared with any other site. You can manage or delete cookies through your browser settings at any time, though doing so may affect some features.

6. Storage and security

• Account and content data is stored in a secured PostgreSQL database (Neon), with passwords hashed by Better Auth.
• Generated ideas and reports are stored against your account so you can revisit and export them.
• We use HTTPS, access controls, and other industry-standard security practices.
• That said, no internet transmission is ever fully secure and we cannot guarantee absolute security.

7. Data retention

• Account information: kept for the lifetime of your account and deleted within 30 days after closure.
• Generated ideas and reports: retained until you delete them or close your account.
• Credit transactions: retained for two years to resolve billing disputes.
• Access logs: retained for no more than 90 days.

8. Your rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access: review the personal information we hold about you.
• Correction: correct inaccurate information (most fields can be edited in your account settings).
• Deletion: request deletion of your account and associated data.
• Unsubscribe: opt out of the daily digest at any time.
• Complaint: lodge a complaint with a relevant data-protection authority.

To exercise these rights, email us at support@xeviora.com. We aim to respond within 30 business days.

9. Children's privacy

Ideas is not intended for individuals under 16 years of age. If we discover that we have collected personal information from a minor, we will delete it promptly. Please contact us if you believe a minor has provided us with personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the service or via email. Continued use of Ideas after changes take effect constitutes acceptance of the updated policy.

11. Contact us

If you have questions or complaints about this Privacy Policy, please contact us:

Email: support@xeviora.com