01Who is responsible
Validore is operated by Shashank V in India. For privacy questions, access or deletion requests, or a grievance, contact aegixchainai@gmail.com. Identify the account involved; do not email passwords, full payment-card details, or API keys.
02Information we handle
- Account: email, authentication identifier, sign-in information, plan, and preferences. Supabase handles passwords and authentication.
- Your work: briefs, interview questions and answers, self-reported evidence, clarity feedback, reports, and planning documents. We record the processing-notice version when you start the optional founder interview.
- Usage and payments: job status, model usage, credits, payment references, subscription status, and purchases. Card details are handled by the payment processor, not stored in Validore.
- Optional rewarded ads: ad-session identifiers, completion references, timestamps and earned-credit entries when you choose to watch an ad.
- Security: a random browser identifier, user agent, and network address may be used to limit abuse and recognize recent account activity. Hosting and authentication providers also maintain operational logs.
- Public research: source URLs, short excerpts, official observations, units, observation periods, retrieval dates, and expiry information.
03Why we use it
We use information to authenticate you, save your work, tailor follow-up questions, run requested analysis, provide exports, account for credits and payments, prevent abuse, and respond to support or rights requests.
Where applicable, processing relies on providing the requested service, legal obligations, and legitimate interests in operating and securing it. Where consent is required, we request it for the relevant activity. Optional interviews can be skipped or stopped. Essential service processing remains necessary to deliver requested reports.
04AI processing and live search
When you request analysis, relevant brief details, answers, and evidence are sent to the configured AI gateway and downstream model provider. Routing supports PixRouter, OpenCode, and OpenRouter; direct OpenAI, Google, or Anthropic processing is possible when enabled. Fallbacks can involve more than one configured provider. A custom OpenRouter key uses that account and its provider settings.
Provider retention, training, and international-processing practices vary by service, model, and account. We do not promise that every free model or gateway offers zero retention or excludes training. We do not train our own models on private briefs or answers, or add them to the shared public research library.
Live research sends topical queries to search services and retrieves public pages. Queries should use public market terms. Avoid confidential inventions, contact details, credentials, health information, or customer records in your brief. Clarity feedback is decision support, not a measure of intelligence or a guarantee of business success.
05Private answers and shared research
Interview history and feedback are scoped to your account and idea. Agents use them to identify unanswered questions and inform your reports and planning tools. Other founders cannot request your answers through the research library.
Public source material can be saved internally and refreshed after live retrieval, so later analysis can reuse it. Records preserve provenance, observation dates, and expiry. Search snippets remain weak evidence. Storing text does not verify a claim, and the research library is not a public listing of your startup.
Reports containing your answers or derived feedback remain account data. Downloaded copies are under your control. The report-sharing route currently requires the owner to sign in.
06Providers and transfers
| Service | Purpose |
|---|---|
| Render or Cloudflare, depending on deployment | Application hosting and operational request logs; Cloudflare may also provide DNS and delivery. |
| Supabase / PostgreSQL | Authentication and saved workspace data. |
| Upstash Redis | Rate limits, temporary locks, and public research caches. |
| Inngest | Background jobs and durable steps, including relevant briefs and intermediate research. |
| Configured AI providers | Context needed for requested analysis and tailored questions. |
| Search and open-data services | Topical queries and public requests: public indexes, World Bank, optional SearXNG, Tavily, Serper, and SerpAPI. |
| Stripe | Payments when checkout is enabled. Razorpay checkout is currently unavailable. |
| AppLixir and its advertising partners | Optional video ads and completion verification after you choose to watch. Their privacy choices and notices apply to ad delivery. |
Only configured services are used. Processing may occur outside India; locations depend on provider settings. The operator must maintain appropriate vendor agreements and transfer arrangements where required. We may disclose information when legally required or necessary to protect the service or people.
07Optional rewarded advertising
When available, Credits lets you choose to watch an AppLixir video for 10 earned credits after the provider confirms completion. Declining an ad does not prevent access to your existing credits or workspace. Validore sends an opaque, temporary session identifier to match the completion; we do not include your email, startup brief, founder answers or reports in the ad request.
The ad player and its partners can receive network and device information and use cookies or similar storage for delivery, measurement and, where you consent, personalization. Use the privacy choices shown by the player. Watching an ad is optional and is separate from acknowledging our cookie notice. See the Cookie Policy. Earned credits have no cash value and cannot be withdrawn.
08Retention and deletion
Account information and saved work are kept while needed for your workspace. Clear an interview from its controls and download account data in Settings. Clearing an interview does not rewrite existing reports or exported files.
For account closure or deletion of reports and briefs, email the privacy contact from your account address. We verify the request, explain any information that must be retained, and respond within applicable legal deadlines. Accounting records may need statutory retention. Routine retrieval excludes expired public records; scheduled maintenance removes old research revisions and old browser-activity records.
Backups, authentication logs, hosting logs, and background-job history follow the retention configured with those providers. Active-storage deletion is not an immediate purge of every backup or downloaded copy. Ask for retention details before submitting sensitive material.
09Your rights and choices
Depending on applicable law, you may request access, correction, export, erasure, restriction, objection, consent withdrawal, or grievance redressal, and complain to the appropriate authority. Rights may have legal exceptions. Contact aegixchainai@gmail.com; we may need proportionate information to verify ownership.
Our Cookie Policy explains storage and optional ad choices. You can stop watching ads at any time; this does not reverse processing already performed. Optional analytics and session replay are not enabled. Founder clarity feedback does not make legally binding decisions about you.
10Security and age limits
The service is for people aged 18 or over. Access controls, request limits, server-side credentials, and provider transport security reduce risk, but no online system is risk-free. Use a unique password, protect your email, and report suspected exposure to the contact above.
11Changes to this notice
The version above identifies this notice. Updates are published here, with additional notice or fresh consent where applicable law requires it. Review the notice before a new use of the service.
Operated by Shashank V, India.
Manage your account