Privacy Policy

Last updated: December 29, 2024

1. Introduction

IdeaLabs ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at idealabs.io (the "Platform").

By using the Platform, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, username, profile picture, and password when you create an account
  • Profile Information: Bio, preferences, and other optional details you choose to provide
  • Content: Ideas, comments, backing amounts, and other content you submit to the Platform
  • Payment Information: Billing address and payment details processed through our payment provider (Polar/Stripe)
  • Communications: Messages you send to us or other users through the Platform

2.2 Information Collected Automatically

  • Device Information: Browser type, operating system, device type, and unique device identifiers
  • Usage Data: Pages visited, features used, time spent on pages, and interaction patterns
  • Log Data: IP address, access times, referring URLs, and server logs
  • Cookies and Tracking: Session cookies, authentication tokens, and analytics data

2.3 Information from Third Parties

  • OAuth Providers: If you sign in with Google or GitHub, we receive your name, email, and profile picture from those services
  • Payment Processors: Transaction confirmations and subscription status from our payment partners

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide Services: To operate, maintain, and improve the Platform
  • Account Management: To create and manage your account, process subscriptions, and provide customer support
  • Communication: To send you service-related notifications, updates, and promotional materials (with your consent)
  • Personalization: To customize your experience and show relevant content
  • Analytics: To understand how users interact with the Platform and improve our services
  • Security: To detect, prevent, and respond to fraud, abuse, and security threats
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Public Information

Certain information is publicly visible by design, including:

  • Your username and profile picture
  • Ideas you post and comments you make
  • Ideas you have backed (unless you choose to back anonymously, if available)

4.2 Service Providers

We share information with third-party vendors who help us operate the Platform:

  • Supabase: Database hosting and authentication services
  • Polar/Stripe: Payment processing and subscription management
  • Google: OAuth authentication and analytics
  • Hosting Providers: Cloud infrastructure services (Deno Deploy)

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

  • Court orders, subpoenas, or other legal processes
  • Government requests from law enforcement agencies
  • To protect our rights, privacy, safety, or property
  • To investigate potential violations of our Terms of Service

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform of any such change.

5. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements
  • Maintain business records for legal and tax purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are legally required to retain it.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

6.1 Access and Portability

You can request a copy of your personal data by contacting us at privacy@idealabs.io.

6.2 Correction

You can update most of your information directly in your account settings. For other corrections, contact us.

6.3 Deletion

You can request deletion of your account and associated data. Note that some information may be retained for legal or legitimate business purposes.

6.4 Marketing Opt-Out

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or adjusting your account settings.

6.5 Cookie Preferences

You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of sensitive data at rest
  • Regular security assessments and monitoring
  • Access controls and authentication requirements
  • Secure development practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your own.

We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy, including using standard contractual clauses approved by regulatory authorities.

9. Children's Privacy

The Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@idealabs.io.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Australian Privacy Principles

For users in Australia, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This includes:

  • Collecting only necessary personal information
  • Being transparent about how we handle your information
  • Allowing you to access and correct your personal information
  • Taking reasonable steps to protect your information from misuse

If you have concerns about how we handle your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date at the top
  • Sending you an email notification (for significant changes)

Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: privacy@idealabs.io
General Support: support@idealabs.io
Data Deletion Requests: privacy@idealabs.io

We aim to respond to all privacy-related inquiries within 30 days.