Privacy Policy

Effective date: April 6, 2026
Last updated: April 9, 2026

Superidea LLC ("Superidea", "we", "us", or "our") operates the Superidea platform accessible at app.superidea.ai and the Superidea desktop application (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address
Name (if provided)
Password (stored as a bcrypt hash — we never store plaintext passwords)
Sign-in method (email/password or Apple Sign In)

1.2 Onboarding Information

During onboarding we collect optional profile data to personalize your experience:

Your role (e.g. content creator, marketer)
Primary goals and platforms you use
Social media handles (e.g. @username on Twitter/Instagram)
Team size and referral source

This data is stored in your user profile and used solely to improve AI response quality within the Service.

1.3 Content You Add to Boards

When you add content to a board, we process and store:

URLs you submit (social posts, videos, webpages)
Extracted text, metadata, and transcripts from those URLs
Documents and files you upload (PDFs, audio, video)
Text notes and rich-text content you write directly

This content is stored in your account and used to provide AI chat and analysis features.

1.4 AI Usage Data

When you send messages in AI chat, we send your message and any selected board content to third-party AI providers (listed in Section 4) to generate a response. We do not train AI models on your content.

1.5 Payment Information

Credit purchases are processed by Stripe. We do not store your full card number or banking details. We store:

Transaction ID and payment provider reference
Package purchased, amount paid, and credits credited
Invoice details (name, email, address) for GST/tax compliance

1.6 Usage and Analytics Data

We collect product usage events (e.g. boards created, content added, models used) via PostHog to understand how the Service is used and improve it. This includes:

Feature interactions and click events
Session recordings (if enabled)
Browser type, operating system, and approximate location (country/city level)

We do not sell analytics data to third parties.

1.7 Technical Data

We automatically collect:

IP address
Device and browser information
Timestamps of actions
Error logs

2. How We Use Your Information

Purpose

Legal Basis (GDPR)

Provide and operate the Service

Performance of contract

Authenticate your account

Performance of contract

Process payments and issue invoices

Performance of contract / Legal obligation

Personalise AI responses using your persona and board content

Performance of contract

Improve the Service via analytics

Legitimate interests

Communicate service updates and security notices

Legitimate interests / Legal obligation

Comply with laws and prevent abuse

Legal obligation / Legitimate interests

We do not use your content to train AI models. We do not sell your personal data.

3. Data Storage and Security

Your data is stored on cloud infrastructure hosted in the United States and European Union.

We implement industry-standard security measures including:

Encryption at rest and in transit (TLS 1.2+)
Row-level security (RLS) policies enforced at the database level
Authentication tokens with short expiry and refresh rotation

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

4. Third-Party Service Providers

We share data with the following categories of providers solely to operate the Service:

5. Cookies and Local Storage

We use:

Session cookies set by Supabase Auth for authentication
IndexedDB (browser local storage) to cache chat messages locally for faster loading
PostHog cookies for analytics session tracking

We do not use advertising cookies or sell cookie data.

6. Data Retention

Data Type

Retention

Account data

Until account deletion + 30 days

Board content (nodes, chats)

Until deleted by user or account deletion

Payment records and invoices

7 years (legal/tax obligation)

Analytics events

12 months

Server logs

30 days

You can request deletion of your account and all associated data at any time (see Section 8).

7. International Data Transfers

Superidea LLC is incorporated in Delaware, USA. If you access the Service from the European Economic Area (EEA) or United Kingdom, your data may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms.

8. Your Rights

Depending on your location, you may have the following rights:

Access — request a copy of personal data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your account and personal data
Portability — receive your data in a machine-readable format
Restriction — request we restrict processing of your data
Objection — object to processing based on legitimate interests
Withdraw consent — where processing is based on consent

To exercise any right, email legal@superidea.ai. We will respond within 30 days.

If you are in the EEA and believe your rights have not been respected, you may lodge a complaint with your local data protection authority.

9. Children's Privacy

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

11. Contact

Superidea LLC
Delaware, USA

Email: legal@superidea.ai
Support: support@superidea.ai
Terms of Service: superidea.ai/terms
Website: superidea.ai