Privacy Policy

What we collect

• Account information: email address, and either a password (stored only as a secure hash by our sign-in provider) or the Google or GitHub account you sign in with, with the name and picture it shares.
• Profile information you provide: name, country, and founder type.
• Business content you provide: ideas, diagnoses, strategy, assumptions, experiments, tasks, interview notes, evidence records, weekly reviews, decisions, and advisor conversations.
• AI usage records: which AI feature ran, when, whether it succeeded, the AI provider and model, the size of the request and response, and an estimated cost. They are used to enforce limits and budgets. The text of your prompts and the AI's answers is not stored in these records.
• Credit records: the AI credits added to and used from your balance, and why.
• Onboarding drafts, so you can resume where you left off.
• If you invite friends: an invite code for your account, which appears in your invite link. When someone signs up through your link, we record that you invited them, whether they have finished their first idea conversation, and the rewards each of you received. You see only how many friends have joined and started, never who they are, and your link doesn't contain your name or email.
• If you join the Founder Pass waitlist (with or without an account): your email, optional name, founder stage, business category, a one-line description of your idea, whether (and when) you agreed to product-update emails, where you joined from, and — only if you choose to answer — what would make you pay for Valtra today.
• Feedback you choose to send from inside the app: a usefulness rating, your answers, whether you would pay, and whether we may quote you. Feedback is only quoted if you ticked that box, and never with your name or email.
• If you report something Valtra's AI wrote: the reason you chose, any note you add, the page you were on, and a copy of the reply you reported with the AI model that wrote it, so the Valtra team can review it. Reports are read only by the team.
• Product statistics: events such as signing up, finishing onboarding, or recording evidence, with small facts about them (for example which plan or campaign). They never contain what you wrote.
• A keyed hash of your IP address when you join the waitlist, used only to stop automated sign-ups. The IP address itself is never stored, and the hash cannot be turned back into it without a secret key held on our server.
• If you pay: the payment's amount, status and Razorpay reference. Valtra never receives your card, UPI or bank details.

How we use it

• To provide the service and show your data back to you.
• To generate AI responses. Only relevant business context (for example your idea description, stage, budget range, and market) is sent to the AI provider. Your name and email address are not included in AI prompts.
• To run the invite program: to give you and the friends you invite the rewards it promises, once each.
• To protect the service from abuse, and to enforce AI usage limits and budgets.
• To understand, in aggregate, how founders use Valtra and where they come from, so we can improve it.
• Joining the waitlist means we may email you once, to tell you when the Founder Pass opens. Product-update emails are sent only if you ticked the product-updates box, and you can turn them off at any time in Settings. We also use waitlist answers to understand what founders need. Valtra does not yet send any of these emails automatically. They are not visible to other users, and nobody can read the waitlist through the app.

We don't sell your data, and we don't use it for advertising.

Who can access your data

Your records are protected by row-level security: each database query is restricted to the signed-in account that owns the data. Other users can't see your ideas, evidence or anything else you add.

Cookies and storage

Valtra uses only first-party cookies and browser storage that it needs to work. There are no advertising cookies and no third-party analytics.

• Sign-in cookies, set by Clerk and by our database provider, Supabase, when you sign in. They keep you signed in.
• fos_ref: if you arrive through a campaign link (for example one shared on LinkedIn), the campaign name, and nothing else, for 30 days, so we can see which posts led to sign-ups.
• fos_invite: if you arrive through a friend's invite link, their invite code, for 30 days or until you sign up, so the invite can be recorded.
• fos-theme, in your browser's local storage: whether you chose the light or dark theme. It never leaves your device.

None of these are used to track you on other websites.

Service providers

• Vercel hosts the app. The servers that handle your requests run in Mumbai, India.
• Clerk, in the United States, handles sign-in: your email address, password hash or Google or GitHub sign-in, and the devices you're signed in on. Account emails, such as sign-up codes and password resets, are sent by Clerk. Clerk uses Cloudflare's bot check on the sign-up and sign-in forms.
• Supabase stores your Valtra data (your ideas, evidence, decisions and settings) in Mumbai, India.
• AI requests go to Groq, in the United States, through its official API (OpenAI, Anthropic or Google Gemini only if configured). Only the business context a request needs is sent; your name and email address are not.
• Razorpay, in India, processes payments when paid access is available. Razorpay hosts checkout, so Valtra never receives your card, UPI or bank details; we send Razorpay your email address and the amount, and keep a record of the payment status.

Each provider's handling of data is governed by its own terms and privacy policy.

The Android and iOS apps

The Valtra apps show this website inside the app, so everything in this policy applies to them in the same way. The apps add no analytics, advertising or tracking of their own, and ask for no device permissions: they don't read your contacts, location, photos, files, camera or microphone. When you share an invite link or export an idea brief in the app, it goes to your phone's share sheet, and only where you choose to send it.

How long we keep it

• Your account and everything in it are kept while your account is open.
• When you delete your account, we delete it and everything in it: your profile, ideas, conversations, evidence, decisions, reviews, credits, invite code and invite records, and any reports you made about AI replies.
• We keep, with nothing linking them to you any more: AI usage records (feature, model, size and estimated cost), product statistics, and any in-app feedback you sent. They keep usage limits, budgets and product statistics accurate.
• Payment records are kept for as long as tax and accounting law requires, also no longer linked to your account.
• Waitlist entries are kept until you leave the waitlist or ask us to remove yours.

Your choices

• You can edit or delete ideas, tasks, experiments, interviews, and evidence at any time.
• You can delete your account from Settings where account deletion is enabled, on the website or in the apps, which removes your data as described above. How to delete your account explains the steps, including what to do if you can't sign in.
• You can leave the waitlist from Settings. If you joined without an account, you can ask us to remove your entry at any time, and every beta email will include a way to unsubscribe.

Contact

Questions or requests about your personal data, including access, correction or deletion: founder@valtra.tech. Our other contact details are on the Contact Us page.

If you're not satisfied with our answer to a complaint, you can complain to the Data Protection Board of India.