← Back to aiGIGsearch

Privacy Policy

Last updated: July 31, 2026

1. Information We Collect

aiGIGsearch collects minimal information to provide and improve the Service:

• Device Identifier: A randomly generated ID stored on your device to track DeepDive usage and purchase balance. This is not linked to your personal identity.
• Usage Data: We log search queries (industry, SIC code, difficulty level), DeepDive usage, and feedback submissions to improve the Service and provide analytics.
• Email Address: When you complete a purchase, Stripe's checkout flow collects your email address for payment confirmation and receipt delivery. We may receive and store that email address to send you grant codes, purchase confirmations, and transactional notifications via SendGrid.
• IP Address: Your IP address is collected and scored by IPQualityScore (IPQS) as part of our fraud-detection and abuse-prevention process. This score is used solely to assess transaction risk and is not used for advertising or sold to third parties.
• Payment Information: Payments are processed by Stripe. We do not store your credit card number, billing address, or other sensitive payment details. See Stripe's Privacy Policy.
• Feedback: If you submit feedback, we store your comments and suggestions. No personal contact information is required.

2. Information We Do NOT Collect

• We do not require account creation or passwords; an email address is only collected when you make a purchase through Stripe checkout
• We do not collect your name, phone number, or physical address
• We do not use tracking cookies for advertising purposes
• We do not sell, rent, or share your data with third parties for marketing

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service (generating ideas, processing payments)
• Track your DeepDive balance across sessions
• Analyze usage patterns to improve idea quality and user experience
• Monitor for abuse, fraud, and security threats

4. Data Storage and Security

Your data is stored securely on servers hosted by Replit. We implement the following security measures:

• All data transmission is encrypted via HTTPS/TLS
• Database queries use parameterized statements to prevent SQL injection
• API keys and credentials are stored as encrypted environment secrets
• Rate limiting is applied to prevent abuse
• Admin access is protected with password authentication, rate limiting, and token expiry

5. Cookies and Analytics

The Service may use Google Analytics to understand how users interact with the app. Google Analytics uses cookies to collect anonymous usage data such as pages visited, time spent, and device type. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies or third-party tracking pixels.

6. Third-Party Services

The Service integrates with the following third-party services:

• OpenAI: Your search queries are sent to OpenAI's API to generate business ideas. See OpenAI's Privacy Policy.
• Stripe: Payment processing. Your email address is collected by Stripe at checkout for receipt delivery. See Stripe's Privacy Policy.
• SendGrid (Twilio): Transactional email delivery (grant codes, purchase confirmations, and notifications). Your email address is transmitted to SendGrid solely for delivery purposes. See Twilio's Privacy Policy.
• Notion: If you connect your Notion workspace, content from that workspace (pages, databases, and metadata) flows through our servers to provide the Notion export feature. We do not store Notion content beyond what is necessary to complete the requested operation. See Notion's Privacy Policy.
• IPQualityScore (IPQS): IP address fraud scoring for abuse and fraud prevention. Your IP address is transmitted to IPQS at the time of a transaction. See IPQS's Privacy Policy.
• Replit: Hosting and infrastructure. See Replit's Privacy Policy.

7. Data Retention

Usage data and feedback are retained indefinitely to improve the Service. Since we do not collect personally identifiable information, there is no personal data to delete. If you have concerns, contact us.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with data, please contact us.

9. Your Rights

Depending on your jurisdiction, you may have rights regarding your data, including the right to access, correct, or delete information we hold. Since we collect minimal, non-identifying data, most of these rights are satisfied by default. Contact us for any data-related requests.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy questions or data requests, contact us at rickhilleary@aigigsearch.com.