When you use ValidatePros, we collect the following types of information:
Account information: Email address, full name, and authentication credentials when you create an account.
Business ideas & project data: Project names, descriptions, website URLs, and industry selections you submit for validation.
AI-generated reports: The validation reports, chat conversations, and analysis results generated by our AI system.
Usage data: Pages visited, features used, AI credits consumed, and general interaction patterns. We log this internally to operate and improve the service. Only the optional forwarding of events to Google Analytics is gated by your cookie consent; our first-party analytics logs are always recorded.
Payment information: Billing details are processed securely by Stripe. We store only your Stripe customer ID — never your card details.
2. How We Use Your Information
To provide the service: Generating validation reports, powering the Serena AI chat, and managing your projects.
To improve our AI models: We may use anonymized, aggregated data to improve our analysis quality. Your specific business ideas are never shared with third parties or used to train external AI models.
Third-party AI processing: Your project data is sent to Google Gemini for report generation. Google processes data according to its own privacy policy and does not retain your data for model training under our API agreement.
Analytics: We always log first-party, sanitized usage events to our own database to operate and improve the service. With your consent, we also forward the same sanitized events to Google Analytics.
We retain your data for as long as your account is active. Specifically:
Account & profile data: Retained until you delete your account.
Projects & reports: Retained until you delete individual projects or your entire account.
Chat conversations: Retained with their associated project.
Analytics & usage logs: Tied to your account and retained until you delete your account. They are not anonymized, because we use them to operate the service and investigate issues specific to your account.
Payment records: Retained as required by financial regulations (typically 7 years).
4. Data Sharing
We do not sell your personal data. We share data only with:
Google Gemini — for AI report generation and chat responses.
Stripe — for payment processing.
GoHighLevel — for lead and contact management when you sign up or complete a purchase.
Firecrawl — for analyzing website content when you import a website URL into a project.
Hosting infrastructure — to operate the service securely.
5. Your Rights
Under GDPR, CCPA, and similar regulations, you have the right to:
Access your personal data.
Correct inaccurate data via your Settings page.
Delete your account and all associated data. You can do this from .
Export your reports using the Share & Export options available on each report.
Withdraw consent for Google Analytics cookies by clicking Cookie preferences in the footer, which reopens the consent banner so you can change your choice. Note that our first-party usage logs are still recorded because they are essential to operating the service.
6. EU and UK Data Protection Rights
If you are in the European Union or the UK, you have the following rights over your personal data. Some you can exercise yourself; others need an email to us.
Right to access. You can see most of what we hold by signing into your account. For a copy of anything else, email privacy@validatepros.com.
Right to rectification. Update your name and notification preferences in Settings. If something else is wrong, email us and we'll fix it.
Right to erasure. You can permanently delete your account — including projects, reports, chat history, and usage logs — from . This is a hard delete, not a deactivation. We keep basic purchase and payment records for financial record-keeping as required by law.
Right to data portability. You can export individual reports from each report page. We do not yet offer a one-click download of all your account data — email privacy@validatepros.com and we'll put it together for you.
Right to restrict processing and right to object. Email privacy@validatepros.com telling us what processing you want limited or stopped, and we'll review it.
Right to withdraw consent. Click "Cookie preferences" in the footer at any time to reopen the consent banner and change your choice.
Right to lodge a complaint. If you think we've mishandled your data, you can complain to your local data protection supervisory authority.
We aim to respond within 30 days. We may need to verify your identity before acting on a request.
7. Cookies
We use essential cookies to operate the service (authentication, session management). We also ask for your consent to forward sanitized usage events to Google Analytics. Our own first-party analytics logs are recorded regardless of cookie consent because they are necessary to operate and secure the service. You can change your Google Analytics preference at any time by clicking Cookie preferences in the footer.
8. Security
We implement industry-standard security measures including encryption in transit (TLS), secure authentication, row-level security policies on all database tables, and rate limiting on API endpoints.
9. Contact Us
For privacy-related questions, data access requests, or concerns: