Privacy Policy
At XpertVex, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data.
Privacy at a Glance
- • Account information (name, email)
- • Startup validation data
- • Usage and analytics data
- • Payment information (encrypted)
- • Provide AI validation services
- • Improve our platform
- • Send service communications
- • Ensure security and compliance
Personal Information
When you create an account or use our services, we collect personal information such as your name, email address, phone number (optional), company information, and billing details. For credit purchases, we collect payment information which is processed securely through third-party payment processors and not stored on our servers.
Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, credits consumed, evaluation history, time spent, IP addresses, browser types, device information, and technical data about your system. This helps us improve our services and detect potential security issues.
Business Information
Information about your startup ideas, market research queries, business concepts, target markets, and analysis results that you submit through our platform for AI-powered validation. This data is encrypted and used solely to generate your personalized evaluation reports.
AI-Generated Data
We store the AI-generated reports, market analyses, competitor insights, and recommendations created specifically for your business ideas. These reports remain associated with your account and can be accessed through your evaluation history.
Cookies and Tracking
We use cookies and similar tracking technologies to maintain your session, remember your preferences, analyze platform usage, and improve user experience. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.
Service Provision
To provide, maintain, and improve our AI-powered startup validation services, generate personalized market research reports, deliver competitor analysis, process credit purchases and subscriptions, manage your account, and maintain your evaluation history.
AI Processing
Your business ideas and submitted information are processed by Google Gemini AI to generate comprehensive startup evaluations. We use advanced prompting techniques to ensure relevant, data-driven analysis. Your data is sent to Google's AI services under strict confidentiality agreements.
Platform Improvement
To analyze usage patterns, improve our AI algorithms and prompting strategies, enhance user experience, develop new features based on user needs, and conduct research using anonymized, aggregated data. Individual business ideas are never shared in identifiable form.
Communication
To send you service-related communications, purchase confirmations, credit balance updates, new features announcements, billing notifications, security alerts, and respond to your support inquiries. You can opt-out of marketing communications while continuing to receive essential service notifications.
Security and Compliance
To detect and prevent fraud, unauthorized access, security breaches, comply with legal obligations, enforce our Terms of Service, protect user rights and platform integrity, and maintain accurate financial records for billing and taxation purposes.
Third-Party Services
We share data with trusted third-party service providers: Google AI (Gemini API) for generating evaluations, MongoDB Atlas for secure database hosting, EmailJS for transactional communications, Vercel for platform hosting, and payment processors for handling transactions. All providers are bound by strict confidentiality and data protection agreements.
Legal Requirements
We may disclose information when required by law, court order, subpoena, or government request, to protect our rights, property, or safety, or that of our users or others, to enforce our Terms of Service, or to investigate potential violations and fraud.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as part of the business transaction. We will notify affected users and provide options regarding their data before any such transfer occurs.
Anonymized Data
We may share anonymized, aggregated data that cannot identify individual users with partners, researchers, or the public to demonstrate platform effectiveness, industry trends, or for academic research purposes. No specific business ideas are ever disclosed.
Security Measures
We implement industry-standard security measures including AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, secure authentication using NextAuth.js, regular security audits, access controls limiting data access to authorized personnel, automated backup systems, and intrusion detection monitoring.
Data Retention
We retain your account information and evaluation history as long as your account is active or as needed to provide services. Credit purchase records are kept for 7 years for accounting and legal compliance. You can request deletion of your data at any time through account settings or by contacting support@xpertvex.com.
International Transfers
Your data may be transferred to and processed in countries other than your own, including the United States where our servers are located. We ensure appropriate safeguards are in place through standard contractual clauses and data protection agreements compliant with GDPR and other international regulations.
Your Security Responsibilities
You are responsible for maintaining the confidentiality of your account credentials, using a strong unique password, enabling two-factor authentication when available, logging out of shared devices, and notifying us immediately of any unauthorized access at security@xpertvex.com.
Your Rights and Choices
You have the right to access your personal data and request a copy in a portable format.
You can update or correct your personal information through your account settings or by contacting us.
You may request deletion of your personal data, subject to certain legal and operational requirements.
You can opt-out of marketing communications at any time through your preferences or unsubscribe links.
For EU users, we comply with GDPR including rights to data portability, erasure, and restriction of processing.
California residents have specific rights under CCPA including the right to know what data we collect and opt-out of sale (we don't sell data).
Questions About Privacy?
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to contact us.