Privacy Policy

1. Introduction

IdeaBridge ("we", "us") operates ideabridge.ai and related applications. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data when you use our AI-powered creator–brand collaboration platform.

2. Information We Collect

We collect the following categories of information:

• Account data: name, email address, and role (creator or brand).
• Profile and portfolio data: bio, niche, rate card, and portfolio items you add.
• Connected social account metrics: audience and engagement data from platforms you connect.
• Usage data: pages visited, features used, and interactions with the service.
• Cookies: session and preference cookies described in Section 5.

3. How We Use Information

We use collected information to:

• Provide and operate the service, including accounts, campaigns, and messaging.
• Power AI features such as AI Match and AI Chat.
• Improve the product and develop new features.
• Communicate with you about your account and the service.

4. AI Processing

User content is processed by the OpenAI API to provide AI features. Prompts may include profile or campaign context needed to produce relevant matches and drafts.

Per OpenAI's API terms, your data is not used to train OpenAI's models. (Assumption — verify current OpenAI data-usage terms before publishing.)

5. Cookies & Tracking

We use essential cookies for authentication sessions (Supabase Auth) and privacy-friendly analytics. We do not run cross-site ad tracking at MVP.

6. Sharing & Subprocessors

We do not sell personal data. We share data only with the subprocessors needed to operate the service:

• Supabase — hosting, authentication, and database.
• OpenAI — AI processing for match and chat features.
• Email provider — transactional email (post-MVP).
• Hostinger — infrastructure.

7. Data Retention

We retain your data while your account is active. You may request deletion at any time; deletion is completed within 30 days (assumption).

8. Your Rights

You may request access, correction, deletion, or export of your personal data. California residents have CCPA rights, including the right to know and delete; we do not "sell" data under the CCPA. For EU/EEA users, we process data under GDPR legal bases including contract performance and legitimate interest.

9. Security

We encrypt data in transit (TLS) and at rest, enforce row-level security in our database, and follow least-privilege key management.

10. Children's Privacy

The service is not directed to anyone under 18, and accounts require users to be 18 or older.

11. International Transfers

Data may be processed in the United States and other regions where our subprocessors operate.

12. Changes to This Policy

We will notify you of material changes via email or an in-product banner before they take effect.

13. Contact

Questions about this policy? Contact us at support@ideabridge.ai (assumption).