Privacy Policy

This policy explains what data validaid collects, why, and your choices. We keep it short and plain. Our guiding principle is YODA — Your Own Data, Always — which extends to ownership and privacy.

1. What we collect

Account data: your email and display name. Workspace content:the projects, cards, comments, tasks, and votes you create. Usage & technical data:basic logs needed to operate and secure the Service. Billing data: handled by Stripe — we never store full card details.

2. How we use it

To provide and secure the Service, process payments, respond to support requests, and send essential service emails (such as your sign-in link). We do not sell your data and do not use your workspace content to train AI models.

3. Sub-processors

We rely on a small set of providers to run validaid: Supabase(database & authentication), Vercel (hosting), Stripe (payments), and an email provider for transactional mail. Each processes data only to provide their service.

4. AI features

Optional AI Assist features send the specific card text you choose to a model provider to generate suggestions. They run only when you click, and the content is not used to train models.

5. Data retention & export

We keep your data while your account is active. You can export your workspace content at any time, and request deletion of your account and associated data.

6. Security

Access is authenticated per request, data is isolated per company, and database access is restricted to our server. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.

8. Contact

Privacy questions or requests? Reach us via the contact form.