Privacy Policy

Last updated: March 2026

1. Who we are

Ideas by Subhadra is operated by Subhadra AI. This policy explains how we collect, use, and protect your personal data when you use our service at https://ideas.subhadra.ai.

2. What we collect

Account data: email address and name (provided at sign-up).
Usage data: niches you search, reports generated, and timestamps.
Payment data: transaction IDs and amounts processed through PayPal. We do not store your PayPal password or full payment credentials.
Technical data: IP address, browser type, and device information collected automatically for security and rate limiting.
Analytics: if enabled, Google Analytics 4 collects anonymised usage statistics (pages visited, session duration). You can opt out using the cookie banner or your browser settings.

3. How we use your data

To provide and improve the service (generate reports, process payments, send transactional emails).
To authenticate you and protect your account (OTP login, session management).
To prevent abuse (rate limiting, fraud detection).
To understand usage patterns and improve the product (analytics).

4. Legal basis

We process your data based on: (a) your consent (account creation, analytics), (b) contractual necessity (delivering reports you request and payments you make), and (c) legitimate interest (security, abuse prevention).

5. Data sharing

We do not sell your personal data. We share data only with:

Service providers: Supabase (database hosting), Resend (transactional email), PayPal (payment processing), Google Cloud (infrastructure), Google Analytics (if enabled).
AI providers: Google AI and Firecrawl for report generation. Your niche query is sent to these services; they do not receive your email or account details.
Law enforcement: if required by law.

6. Data retention

Account data and reports are kept until you delete your account.
When you delete your account, we remove your personal data and reports from our database.
Operational logs and pipeline traces (including third-party tools) may be retained for up to 14 days for debugging.
Payment records may be retained as required by tax/accounting law.

7. Your rights

You can:

Access your data via the Settings page.
Delete your account and data from Settings at any time.
Withdraw consent for analytics by dismissing or declining the cookie banner.
Contact us for data export or any privacy questions.

8. Cookies

Session cookie (ideas_session): essential for keeping you logged in. HttpOnly, secure, expires after 7 days.
Analytics cookies (Google Analytics 4): optional, used only if you consent.

9. Security

We use HTTPS, hashed OTP codes, HttpOnly session cookies, and rate limiting to protect your data. Passwords are not used; login is via one-time email codes.

10. Changes

We may update this policy. Material changes will be noted with an updated date at the top.

11. Contact

For privacy questions, contact us at subhadra.ai/contact.

Terms and Conditions