Privacy Policy

1. Introduction

Welcome to Brainstorm Buddie (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile application (collectively, the “Service”).

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and display name when you create an account
• Business Ideas: Project names, business ideas, and related content you submit for analysis
• Chat Messages: Questions and conversations you have with our AI assistant
• Payment Information: Payment details processed securely through Stripe (we do not store credit card information)

2.2 Automatically Collected Information

• Usage Data: Information about how you use the Service, including features accessed and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience
• Analytics Data: We use Firebase Analytics to understand app usage patterns

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI-powered business reports and analysis using Anthropic Claude AI
• Generate logos using Google Gemini AI (for Pro and Premium users)
• Process your payments and manage subscriptions
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate our Service:

• Firebase (Google): Authentication, database (Firestore), and analytics
• Anthropic Claude AI: Business report generation and chat responses
• Google Gemini AI: Logo generation for Pro/Premium users
• Stripe: Payment processing for subscriptions
• Vercel: Hosting and deployment

Each of these services has their own privacy policies governing their use of your information. We encourage you to review their policies.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With third-party service providers who assist in operating the Service (listed above)
• Legal Requirements: To comply with legal obligations, court orders, or government requests
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. You may delete your account at any time, which will remove your personal information from our active databases. However, some information may be retained in backup systems for a limited period or as required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and personal information
• Opt-Out: Opt out of marketing communications (we currently do not send marketing emails)
• Data Portability: Request your data in a machine-readable format
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at privacy@brainstormbuddie.com or through your account settings.

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Secure authentication through Firebase Auth
• Regular security assessments and updates
• Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@brainstormbuddie.com.

12. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

You also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: