Privacy Policy

MarketFit.AI ("we", "us") provides an AI-powered service that analyses startup ideas. This policy explains what personal data we collect when you use the Service, why we collect it, and what rights you have.

If you have questions, contact us at [email protected].

Account data: your email address, password hash, and any profile fields you provide.

Content you submit: startup ideas, descriptions, URLs, and any other text you enter for analysis.

Usage data: pages viewed, features used, timestamps, approximate location derived from IP, browser and device information.

Payment data: when you subscribe, our payment processor (Stripe) collects your billing details. We receive a transaction reference and subscription status — we do not store your full card number.

Communications: messages you send us through support or email.

To provide the Service: process your input, generate analyses, store your reports, and let you sign in across devices.

To run our business: take payments, prevent fraud and abuse, and meet legal and tax obligations.

To improve the Service: understand which features are used, debug issues, and improve the quality of our AI output. We use aggregated or anonymised data wherever possible.

To communicate with you: send transactional emails (sign-in, billing, important changes) and, if you opt in, product updates.

We process personal data on the following legal bases: performance of our contract with you (providing the Service), our legitimate interests (security, improvement, communication), your consent (non-essential cookies, marketing emails), and legal obligations (tax, accounting, responding to lawful requests).

We share data only with service providers needed to run the Service, under appropriate contracts: cloud hosting, payments (Stripe), email delivery, error monitoring, and AI providers that process your prompts to generate output.

We do not sell your personal data. We may disclose data when required by law or to protect our rights.

We use a small number of essential cookies to keep you signed in and to remember your preferences. These cannot be disabled while using the Service.

We also use a limited set of analytics cookies to understand how the Service is used. You can accept or decline these from the cookie banner shown on your first visit; your choice is stored locally in your browser and you can change it any time by clearing site data.

We keep your account and report data while your account is active. If you delete your account, we delete or anonymise personal data within 30 days, except where we are required to keep it longer (for example, invoices for tax purposes).

Aggregated and anonymised data that no longer identifies you may be kept indefinitely.

We use industry-standard measures to protect your data, including encryption in transit (TLS), encryption at rest for stored data, access controls, and regular reviews of our infrastructure.

No system is 100% secure. If a breach affects your data we will notify you and the relevant authorities as required by law.

Some of our service providers may process data outside your country. Where this involves transfers from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

Depending on where you live, you have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing or withdraw consent.

You can exercise these rights by emailing [email protected]. You also have the right to complain to your local data-protection authority.

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated through the Service or by email.

Questions or requests about your data? Reach us at [email protected].