Privacy

This page describes the GraineVault product: the website, accounts, vault, and research briefs. Safeguards and the controls you already have in the product are on the Data protection page.

• Account. Email address, a password handled by the authentication provider, and your first and last name if you enter them. If you sign in with Google, we receive the identity details Google shares for that sign-in.
• Ideas. Titles, descriptions, voice recordings, photos, and PDFs you upload, plus the text extracted from those files and the research generated from them.
• Contact messages. The name, email, and message you send from the contact form. These are stored so we can reply. Other accounts cannot read them.
• Billing. If you subscribe, Stripe processes the payment. GraineVault stores your plan, billing interval, and the Stripe customer and subscription identifiers needed to recognize Pro. Card numbers are entered on Stripe and are not stored in the vault.

• Session cookies that keep you signed in, set by the authentication provider.
• A short-lived cookie, about ten minutes, used only to return you to the page you were opening after sign-in.
• A preference on your device for whether the sidebar is collapsed.

• Create and secure your account
• Store your ideas and files, and show them only to you
• Transcribe voice, extract text from snapshots, and draft research
• Apply the free-plan idea limit and run Pro billing

Idea text, transcripts, and text extracted from files are sent to OpenAI so the brief can be written. Free and Pro research can use web search. Pro investigation searches more broadly before the brief is written.

Put into an idea only what you are comfortable sending to that provider. Leave out passwords, access keys, and other people's private information.

These services process data to run GraineVault. Idea content and account data are not sold.

• Supabase — accounts, the database, and private file storage for recordings and snapshots
• Stripe — checkout, subscriptions, and the billing portal
• OpenAI — transcription, text extraction, and research, including web search where that step runs

Those providers may process data in the countries where they operate, which can differ from where you live.

Cookies are used to keep your session and to remember a sign-in return path. GraineVault does not set advertising cookies.

Ideas and their files stay until you delete them. Contact messages stay until we no longer need them to handle your request. Deleting an idea removes that idea and its stored recording or file. Billing identifiers stay for as long as they are needed to run the subscription and meet payment-record obligations. Session cookies follow the authentication session. The sign-in return cookie expires after about ten minutes.

• Edit your name on Profile
• Delete an idea, including its file, from the idea page
• Cancel Pro from Settings, which opens the Stripe billing portal
• Sign out from the account menu
• Delete the whole account from Profile. That removes the login, ideas, and files, and cancels Pro if you have it

You can also email codegraines@gmail.com or use the contact form.

If the privacy law where you live gives you rights to access, correct, delete, or object to certain uses, those rights still apply. The controls above are how most of them are exercised in the product today.

GraineVault is a tool for working through startup ideas. It is not directed at children, and accounts should be created by someone old enough to agree to the Terms.

When these practices change, this page is updated and the date at the top changes with it.