Privacy Policy

Last updated: 4/24/2026

This AI assistant is designed to help users validate and test business ideas and startup projects. To improve the quality of analysis and the overall performance of the tool, limited technical and anonymized usage data may be recorded at certain stages of interaction.

What Data Is Collected

We only collect minimal data related to how the assistant is used:

  • session_id — a technical identifier for the current conversation;
  • event — the interaction stage (e.g. input started, diagnostic, test generated);
  • stage — the current workflow stage;
  • idea_type — general type of idea, if provided;
  • segment — general audience segment, if provided;
  • notes — a short technical note about the stage.

This data is used solely to understand usage patterns and improve the tool.

What Data Is Not Collected

We do not intentionally collect personal information such as:

  • names;
  • email addresses;
  • phone numbers;
  • addresses;
  • personal identifiers;
  • sensitive personal data;
  • full conversation content;
  • confidential business documents or trade secrets.

Users are advised not to share personal, sensitive, or confidential information unless necessary for using the assistant.

When Data Is Collected

Data is recorded only at limited key interaction points, such as:

  • when the user provides initial meaningful input;
  • when moving to the diagnostic stage;
  • when tests are generated.

Data is only recorded after the user confirms via ChatGPT’s standard Confirm prompt. If the user declines, no data is recorded.

Purpose of Data Processing

The data is used exclusively to:

  • improve the quality of analysis;
  • understand how the tool is used;
  • identify friction points;
  • enhance usability and reliability.

Legal Basis (GDPR)

Where data may qualify as personal data under GDPR, processing is based on:

  • Consent — provided via the ChatGPT confirmation mechanism;
  • Legitimate interest — improving, maintaining, and analyzing the tool while minimizing data collection.

Data Storage

Data is transmitted via Google Apps Script and stored in Google database tables, accessible only to the tool administrators. Google acts as a service provider (data processor) within its infrastructure.

Data Sharing

We do not sell, share, or distribute collected data to third parties.

Data may be processed through essential infrastructure providers required for the tool to function, including OpenAI/ChatGPT and Google services.

Data Retention

Data is retained only as long as necessary for analysis and improvement purposes and may be periodically reviewed and deleted.

User Rights

Where applicable under GDPR, users may have the right to:

  • access their data;
  • request correction;
  • request deletion;
  • restrict processing;
  • object to processing;
  • withdraw consent.

Due to the anonymized and minimal nature of the data, it may not be possible to link records to a specific individual.

Security

Reasonable technical and organizational measures are in place to restrict access to stored data. Access is limited to the tool owner.

Changes to This Policy

This policy may be updated from time to time. Continued use of the tool implies acceptance of the latest version.

Contact

For questions regarding this policy: info@bolandila.com / Brandformance LTD.