Privacy Policy – Validora AI
Last updated: 2026-02-17 | Version: 1.0
1. Who we are
Controller: Laura Otto Solutions
Gijsbrecht van Aemstelstraat 26, 2026 VH Haarlem, The Netherlands
Registration (KvK): 94716501
VAT: NL005104012B61
Website: https://validora-ai.com
Support: lauraottosolutions@gmail.com
2. Eligibility
You must be at least 16 years old to use Validora AI. We do not knowingly collect personal data from individuals under 16.
3. Overview
Validora AI is a SaaS web application that provides AI-powered market research insights. We process personal data to operate the service, process payments, and improve our product. We do not use your content (e.g., business ideas, prompts) to train AI models.
4. What personal data we process
4.1 Account and authentication
Email address, password (hashed; we never store plain text), account creation date, subscription status. Retention: Duration of account plus 1 year after closure.
4.2 Service usage and content
Content you submit (business ideas, prompts) to generate insights; usage counts. Text content is sent to our AI provider (Anthropic) for processing. When you opt in to include visuals, image prompts are sent to OpenAI (DALL·E) for image generation. Anthropic and OpenAI do not use API customer content to train models (API default). Retention: Content is processed in real time; we do not store prompt content long-term.
4.3 Subscription, billing and administration
Name, email, invoicing details (via Stripe), payment status, subscription plan. Retention: 7 years (Dutch statutory).
4.4 Support and communications
Support request content, contact details, attachments. Retention: 2 years tickets; 90 days attachments.
4.5 Website usage and cookies
Strictly necessary cookies: session, security. Consent typically not required.
Analytics cookies: Google Analytics. Where required by law (e.g. EEA), we obtain your consent before activating analytics. You can manage or withdraw consent via our cookie banner or browser settings.
Marketing cookies: We do not use these.
5. Legal bases
Performance of contract (Art. 6(1)(b)); Legal obligation (Art. 6(1)(c)); Legitimate interests (Art. 6(1)(f)); Consent (Art. 6(1)(a)) for analytics.
6. Sharing with third parties
Anthropic (AI text processing), OpenAI (optional image generation), Stripe (payments), Hertzner (hosting, EEA), BrightData (web scraping for competitor analysis), Google Analytics (with consent). We enter data processing agreements with these providers.
7. International transfers
User text content is sent to Anthropic for AI processing; optional image prompts are sent to OpenAI. Cross-border transfers are protected by SCCs (and related safeguards) under each provider’s DPA. Google Analytics (US) processes data with consent. We implement appropriate safeguards where required.
8. Your rights
Under the GDPR you have rights to access, rectification, erasure, restriction, objection and data portability. Submit requests via lauraottosolutions@gmail.com.
9. Complaints
You may lodge a complaint with your supervisory authority (e.g., Autoriteit Persoonsgegevens in the Netherlands).
10. Right of withdrawal (paid subscriptions)
If you purchase a paid subscription, you have a 14-day right to withdraw without reason. By requesting immediate access to digital content (e.g., premium features after payment), you consent to performance starting before the withdrawal period ends and acknowledge that you will lose your right to withdraw once you have started using the premium content. If you do not use the premium features within 14 days, you may still withdraw and receive a full refund. See our Terms of Sale for details.