To run a validation we need: your account email (via Clerk authentication), the idea or research-document text you submit, and any founder profile data you choose to provide. We also store the outputs every agent produces during a run, plus billing state when you have a paid subscription.
Your idea text and run outputs are visible only to you. They are not used to train any LLM, not shared with other users, and not surfaced in any discovery / leaderboard / "trending" feature (we don't have one). Validation runs do hit third-party APIs (Google's Gemini for LLM calls; Tavily for web search) which receive the search-query strings or prompt content needed to complete the request — both providers honour no-training agreements in their commercial terms.
Account, billing, and run data are stored in Supabase (Postgres + Storage), encrypted at rest. Stripe holds payment-method details — we never see your card number. Backups follow the underlying providers' retention policies.
You can request a full export of your data, ask us to delete your account and runs, or amend any field you control, by emailing hello@vibealchemyapp.com. Deletion is final and complete within 30 days. GDPR / CCPA requests are honoured.
We use a minimal set of cookies for authentication (Clerk) and CSRF protection. We do not run cross-site advertising trackers. Product analytics, if enabled, are scoped to anonymised feature-usage events.
Material changes will be announced via email and dated on this page. If you continue using the product after a change, you are accepting the new policy.