1. Who we are
Ideadrive is operated by Juho Isola, a private person from Helsinki, Finland. For questions about privacy, email: juhoisol@gmail.com. You can also connect with me on LinkedIn.
2. What we collect
- Email address (if you create an account)
- Content you enter into Ideadrive: Creative challenges, ideas, votes and comments
- Usage data (e.g., pages visited, actions taken)
- IP address (temporarily, for security and rate limiting purposes - not stored permanently)
- Payment info (handled via Stripe - see their policy https://stripe.com/privacy)
3. Why we collect it
- To provide and improve the Ideadrive service
- To communicate with you (customer support, updates)
- To analyze product usage
- To process payments
- To prevent abuse and ensure security (IP addresses are used temporarily for rate limiting and automatically deleted after a short period)
4. Legal basis (under GDPR)
- Your consent (when you sign up or join an Ideadrive session as a guest participant)
- Contractual necessity (to deliver the product)
- Legitimate interest (to improve the service and prevent abuse/ensure security - for IP address collection)
5. Data retention
We retain your data only as long as needed to provide the service or comply with legal obligations. Specific retention periods:
- Account data: Until you request deletion or close your account
- Session content: Until sessions are deleted (guest sessions are automatically deleted after 30 days)
- IP addresses: Temporarily stored in memory for rate limiting (typically 15 minutes to 1 hour, automatically deleted when rate limit windows expire)
You can request deletion at any time by sending an email to juhoisol@gmail.com.
6. Third-party data processors
We use the following third-party services to operate Ideadrive. These services process your data according to their own privacy policies:
- Supabase - Database, authentication, and real-time features
Processes: User accounts, session data, ideas, votes, comments, authentication data
Privacy policy: https://supabase.com/privacy - Vercel - Hosting and content delivery
Processes: Requests, IP addresses, logs (for hosting and performance)
Privacy policy: https://vercel.com/legal/privacy-policy - OpenAI - AI features (idea generation, method selection, challenge validation, AI review)
Processes: Challenge text, session context, ideas (for AI analysis and generation)
Privacy policy: https://openai.com/privacy - Upstash Redis - Rate limiting and quota management
Processes: IP addresses, user identifiers (temporarily, for rate limiting)
Privacy policy: https://upstash.com/privacy - Stripe - Payment processing (when billing is enabled)
Processes: Payment information, billing details
Privacy policy: https://stripe.com/privacy
All data processors are bound by their respective privacy policies and data processing agreements. We only share data necessary for the service to function.
7. Your rights
Under GDPR, you have the right to:
- Access your data
- Request correction or deletion
- Withdraw consent
- File a complaint with your local Data Protection Authority
To exercise your rights, email juhoisol@gmail.com.
8. Cookies
We don't use tracking cookies. If analytics are used, they are anonymized and cookie-free.
9. Changes
We may update this policy. If we make significant changes, we'll notify users on the site.