Privacy Policy

For account, platform, analytics and newsletter data, the data controller is [Valimate Ltd.], [jurisdiction] (entity registration details to be confirmed; this page will be updated once registration completes).

For data collected through public landing pages, surveys and waitlists published by our users, the publishing user (the “founder”) is the data controller and Valimate acts as a data processor on their behalf. If you submitted data to such a page, please direct rights requests to the page owner; we will assist them in responding.

• Account data — email address, name, profile photo, sign-in method (password or Google), and account timestamps.
• Workspace content — conversations with AI advisors, uploaded files and sources, branding assets, validation scores and reports, and the pages you build.
• End-user submissions — responses and form data submitted to public pages hosted on Valimate, along with submission metadata such as timestamp and approximate technical identifiers used for rate limiting.
• Usage and analytics data — product usage events and page analytics, including via Google Analytics (cookies and similar technologies).
• Newsletter data — the email address you subscribe with, confirmation status, and unsubscribe preferences.
• Billing data — plan, credit balance and transaction history. Card details are handled by our payment processor and never stored by us.

• Provide the service (contract) — operate your account, workspaces, AI features, credits and published pages.
• Improve and secure the platform (legitimate interest) — analytics, abuse prevention, rate limiting, debugging and product improvement.
• Communicate with you (contract / legitimate interest) — service emails such as confirmations, invitations and receipts; product updates where permitted.
• Newsletter (consent) — we use double opt-in; every email includes an unsubscribe link.
• Legal obligations — accounting, tax and responding to lawful requests.

Workspace conversations and related context are sent to large language model providers through our AI gateway to generate responses, specialist analyses, scores and page content. We instruct providers not to use your content to train their models where such controls are offered. Do not submit third-party personal data to AI features without a lawful basis.

We compute anonymized, aggregate statistics from validation activity across the platform — for example average validation scores and outcome rates per market — and use them to ground the advice Valimate gives. These aggregates are only ever computed for groups of at least 5 ideas, contain no account identifiers, and cannot be traced back to you or your workspace. You can exclude your data from these aggregates at any time in Settings → Account → Privacy; opting out applies to future aggregate computations.

We share personal data only with service providers acting on our behalf:

• cloud hosting and database infrastructure (hosting and authentication);
• AI model providers via our AI gateway (to generate AI output);
• analytics providers (Google Analytics);
• email delivery providers (transactional email, invitations, newsletter);
• payment processors (for paid plans and credit top-ups).

We do not sell personal data. We may disclose data where required by law or to protect rights, safety and the integrity of the service.

Some processors are located outside the EU/EEA. Where personal data is transferred internationally we rely on appropriate safeguards, such as EU Standard Contractual Clauses or an adequacy decision.

• Account and workspace data: kept while your account is active, then deleted or anonymised within a reasonable period after account deletion.
• End-user submissions: kept while the page owner's account is active or until they delete them.
• Newsletter data: kept until you unsubscribe.
• Billing and transaction records: kept for the period required by accounting and tax law.
• Security and rate-limit logs: kept for a short rolling period.

Depending on your location (including under the GDPR), you have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time.

You can update your profile and delete your account in Settings. For anything else, email privacy@valimate.ai. You also have the right to lodge a complaint with your local data protection authority.

We use encryption in transit, row-level access controls in our database, rate limiting and audit logging to protect personal data. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority where required.

We use strictly necessary cookies for authentication and security, and analytics cookies (Google Analytics) to understand product usage. Visitors in regions that require consent control analytics cookies via the consent banner shown on their first visit, and can change that choice at any time via “Cookie preferences” in the footer. You can also control cookies through your browser settings; blocking necessary cookies will prevent sign-in.

We may update this policy and will post the new version here with an updated date; material changes will be announced in the app or by email. Contact for all privacy questions and requests: privacy@valimate.ai.