Legal

Privacy Policy

Last updated: March 2026

1. Who we are

Valid8it ("we", "us", "our") is a SaaS product that helps founders validate startup ideas using Reddit data and AI analysis. Our website is located at https://valid8-it.com.

If you have any questions about this policy, contact us at support@valid8-it.com.

2. What data we collect

Account data

Your email address, name, and profile information when you sign up via email or Google OAuth.

Usage data

Validation queries you submit, reports generated, and features you use within the app.

Payment data

Billing is handled entirely by Stripe. We never store your card details — only a Stripe customer ID is stored on our end.

Reddit data

Publicly available Reddit posts and comments relevant to your validation query. We access this via Reddit's public API. We do not collect or store Reddit user credentials.

Technical data

Basic analytics including page views, feature usage, and error logs to help us improve the product.

3. How we use your data

—To provide and operate the Valid8it service
—To process your validation queries using AI analysis
—To manage your account and subscription
—To send transactional emails (account confirmation, receipts)
—To improve our product based on usage patterns
—To prevent abuse and enforce our terms of service

We do not sell your data to third parties. We do not use your data to train AI models.

4. Third-party services

We use the following third-party services to operate Valid8it:

SupabaseDatabase and authentication infrastructure

StripePayment processing and subscription management

AnthropicAI analysis of Reddit data (your queries are processed by Claude)

ResendTransactional email delivery

PostHogProduct analytics and usage tracking

5. Data retention

We retain your account data and validation reports for as long as your account is active. If you delete your account, your data is removed within 30 days. Anonymised analytics data may be retained longer for product improvement purposes.

6. Your rights

You have the right to:

—Access the personal data we hold about you
—Request correction of inaccurate data
—Request deletion of your account and associated data
—Export your data in a portable format
—Opt out of non-essential communications

To exercise any of these rights, email us at support@valid8-it.com.

7. Cookies

We use essential cookies for authentication (session management via Supabase). We use PostHog analytics cookies to understand how users interact with the product. We do not use advertising cookies.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and access controls. Payment data is handled entirely by Stripe and never touches our servers.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice within the app. Continued use of Valid8it after changes constitutes acceptance of the updated policy.