1. Information we collect
To provide and improve our services, we collect the following categories of information:
- Account information: When you sign up, we collect your name and email address. If you use Google authentication, we receive your basic profile information from Google.
- Questionnaire responses: Our onboarding questionnaire collects your age, country, education level, available budget, time commitment, skills, interests, business goals, and risk tolerance. This data is essential for generating personalized blueprints.
- Generated blueprint data: The business recommendations, 90-day roadmaps, risk analyses, and strategic plans created from your inputs are stored in your account so you can access them later.
- Payment information: When you purchase premium blueprint unlocks, payment processing is handled securely by Razorpay. We do not store your card details or banking information on our servers.
- Technical data: We collect standard log information, IP addresses, browser type, device information, and timestamps necessary to operate the platform securely and prevent abuse.
2. How we use your information
- To generate, store, and display your personalized business blueprints and reports.
- To manage your account, authenticate your identity, and secure your access.
- To process payments and maintain your premium unlock history.
- To improve our AI recommendation engine using aggregate, anonymized patterns — never tied to your individual identity.
- To send you transactional communications such as password resets, payment confirmations, and account security notices.
- To detect and prevent fraud, abuse, or unauthorized access to the platform.
3. Cookies and analytics
We use cookies and similar technologies to:
- Keep you signed in and maintain your session securely.
- Remember your preferences and onboarding progress.
- Analyze platform usage through privacy-focused analytics to improve user experience.
- Track referral codes when you sign up through a friend's invitation.
You can disable cookies in your browser settings, though this may affect certain features like persistent login sessions.
4. Data protection and security
Your data security is a top priority. We implement the following measures:
- All data is stored on encrypted infrastructure with access control and regular security audits.
- Database access is protected by Row-Level Security (RLS), ensuring you can only access your own data.
- Authentication is handled through industry-standard OAuth 2.0 and secure session management.
- Payment transactions are processed through Razorpay's PCI-DSS compliant infrastructure.
- We do not store passwords in plain text. Password-based accounts use secure hashing.
5. What we do not do
We do not sell your personal information. We do not share your data with advertisers, data brokers, or any third party for marketing purposes. Ever.
We do not use your personal blueprint data to train third-party AI models. Your business ideas and questionnaire responses remain strictly yours.
6. Your rights regarding your data
You maintain full control over your personal information:
- Access: View all reports, profile data, and payment history through your dashboard.
- Deletion: Delete any individual report from your dashboard at any time.
- Account erasure: Request complete deletion of your account and all associated data by emailing us.
- Correction: Update your profile information through the dashboard settings.
- Portability: Export your blueprint data in a readable format upon request.
7. Data retention
We retain your account data and generated reports for as long as your account is active. If you delete a report, it is permanently removed from our systems immediately. If you request account deletion, all your personal data is erased within 30 days, except where we are legally required to retain specific records.
8. Third-party services
We use a limited number of trusted service providers:
- Razorpay for secure payment processing.
- Google for OAuth authentication (only when you choose to sign in with Google).
- Supabase for encrypted database and authentication infrastructure.
These providers are bound by strict data processing agreements and may only use your data to perform the services we contract them for.
9. Contact for privacy concerns
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your information, please contact us at:
We respond to all privacy-related inquiries within 48 hours.