Privacy Policy

Who we are

Validdy is an independently operated SaaS product at validdy.com. For any privacy question or request, contact us at support@validdy.com.

What we collect

We collect the following categories of data:

• Account data — your email address, and your name if you sign in with Google or add it in Settings.
• Startup/profile data — anything you enter in Settings about your startup (name, website, industry, stage, description).
• Survey data you upload — the PMF survey responses (CSV or Excel) you submit for analysis, including any free-text answers respondents gave.
• Payment data — handled entirely by Stripe. We never see or store your card details; we only receive confirmation that a payment succeeded.
• Newsletter data — your email address, only if you voluntarily subscribe via the form on the homepage.
• Basic technical data — standard server logs (IP address, browser type, timestamps) generated automatically by our hosting provider.

How we use your data

We use the data above to:

• Create and secure your account, and let you sign back in.
• Generate your PMF report by sending your survey responses to Anthropic's Claude API for analysis.
• Process your $1 report payment via Stripe.
• Send essential account/service emails (magic-link sign-in, receipts) via Resend.
• Send newsletter updates, only if you subscribed, via Resend — you can unsubscribe at any time.
• Keep the service reliable and secure (error monitoring, abuse prevention).

Who we share it with

We don't sell your data, and we don't share it for advertising purposes. We do share the minimum necessary data with the service providers ("processors") that run Validdy on our behalf:

• Supabase — hosts our database and handles authentication (stores your account, startup, and survey data).
• Anthropic (Claude API) — receives the survey responses you upload, solely to generate your analysis report.
• Stripe — processes payments as merchant of record (Managed Payments); Validdy never handles or stores your card number.
• Resend — sends transactional emails (magic links, receipts) and the opt-in newsletter.
• Vercel — hosts the application and its serverless functions.
• Cloudflare — manages our domain, DNS, and inbound email routing.

Cookies and local storage

Validdy does not use advertising or analytics tracking cookies. We use only two functional pieces of storage: a cookie that remembers your chosen language (English/Ukrainian), and a browser localStorage value that remembers your light/dark theme preference. Neither is used to track you across other sites.

Data retention

We keep your account, survey, and report data for as long as your account is active, so you can return to past reports. If you'd like your account and associated data deleted, email support@validdy.com and we'll remove it, subject to any records Stripe is legally required to retain for tax/accounting purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@validdy.com. If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

International data transfers

Our service providers (listed above) may process data in the United States or other countries outside your own. Where required, we rely on those providers' own safeguards (such as Standard Contractual Clauses) for these transfers.

Children's privacy

Validdy is a B2B tool intended for founders and product teams. It is not directed at, and we do not knowingly collect data from, children under 16.

Changes to this policy

We may update this policy as Validdy evolves. If we make material changes, we'll update the "last updated" date above.

Contact us

Questions about this policy or your data? Email support@validdy.com.