← Back to Idea Vault

Privacy notice

Last updated 7 September 2026

Your idea is encrypted on your own device and never reaches us. This notice explains the small amount of information we do hold about your account, and what you can ask us to do with it.

Who is responsible

Martin Pataczek, trading as Idea Vault, is the data controller for personal information handled through the Service. Contact: legal@notify.bankableidea.com.

What we collect and why

Account data (email address, display name, password hash held by our authentication provider) — to create and secure your account. Legal basis: performance of our contract with you.

Membership and credit data (tier, credit balance, credit history, purchase records) — to provide paid features and keep an accurate balance. Legal basis: contract.

Region, language and currency (from your device settings, or from your location if you grant permission) — to show local costs, currency and legal context. Location permission is optional and can be refused or withdrawn at any time. Legal basis: consent.

Generic keywords, region and research output — to produce your research brief. Legal basis: contract.

Support messages you send us — to answer you. Legal basis: contract and our legitimate interest in supporting members.

Security and diagnostic data (IP address, device and browser information, error logs) — to keep the Service secure and working. Legal basis: legitimate interests.

Sharing records (that a recipient accepted confidentiality terms, when, and whether verification was by phone or email) — to give you evidence of that acceptance. Legal basis: contract and legitimate interests.

What we do not collect

Your description of your idea, your plan content and your generated documents are encrypted on your own device with a key derived from your lock code. We cannot read them and they are not sent to us.

We never sell your personal information and never share it with third parties for their own marketing or model training.

Who we share with

Service providers who host, secure and operate the Service, and the language model provider that generates research and drafting from generic keywords only.

Stripe, for card payments, subscription management, invoicing, tax calculation and refunds.

Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Our providers may process data outside your country, including in Australia, the European Union and the United States. Where required, transfers rely on standard contractual clauses or an adequacy decision.

Retention

Account, membership and billing records are kept while your account is open and then for as long as tax and accounting law requires, after which they are deleted or anonymised. Diagnostic logs are kept for a short period only.

Your rights

You may ask to access, correct, delete, restrict or port your personal information, object to processing based on legitimate interests, and withdraw consent (including location permission) at any time.

Where the UK or EU GDPR applies, you may also complain to your supervisory authority. We respond to requests within one month.

To exercise a right, email legal@notify.bankableidea.com.

Security and cookies

We use encryption in transit, encryption at rest for your idea content on your device, access controls and least-privilege data access.

We use essential cookies and local storage only, to keep you signed in and to hold your encrypted vault. We do not use advertising cookies.

This page is written to meet our payment provider's seller requirements. It is not legal advice — have a qualified lawyer review it against your own business before you rely on it.