Privacy Policy

Last updated: February 15, 2026

1. Introduction

IdeaStream ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our platform.

2. Data We Collect

We collect the following types of data:

  • Account data: Email address, name (if provided via OAuth), and authentication tokens when you create an account.
  • Subscription data: Subscription tier and Stripe customer ID. We do not store credit card numbers — all payment processing is handled by Stripe.
  • Usage data: Bookmarked ideas and page visits for improving the service.
  • Technical data: Browser type, device information, and IP address collected automatically for security and analytics purposes.

3. How We Use Your Data

  • To provide and maintain the Service, including managing your account and subscription.
  • To process payments through our payment provider (Stripe).
  • To improve and personalize your experience on the platform.
  • To communicate with you about your account, updates, or support requests.
  • To comply with legal obligations.

4. Third-Party Services

We use the following third-party services:

  • Supabase: Authentication and database hosting (EU region).
  • Stripe: Payment processing. Stripe's privacy policy applies to payment data.
  • Vercel: Hosting and content delivery.

5. Data Retention

We retain your personal data only for as long as necessary to provide the Service and comply with legal obligations. When you delete your account, your personal data is removed within 30 days. Anonymized usage data may be retained for analytics purposes.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data and request a copy.
  • Rectify inaccurate personal data.
  • Erase your personal data ("right to be forgotten").
  • Restrict processing of your personal data.
  • Data portability — receive your data in a structured format.
  • Object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@ideastream.ai. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics cookies may be used in anonymized form to improve the Service.

8. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, row-level security on our database, and secure authentication via Supabase Auth.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

10. Contact

For privacy-related questions or requests, contact us at our contact page or email support@ideastream.ai.