1. Who we are
Idea2Prod is the controller responsible for the processing of the personal data described in this policy.
For any question about your data, or to exercise your rights, write to us at legal@idea2prod.ai.
2. What data we collect
- Account data: email and password, to give you access to the platform.
- Content you enter: ideas, messages, specifications, stories, attachments and any other text you write using the product. This content may include personal data of third parties if you mention them (for example, the name of someone leading an initiative).
- Your GitHub connection data: the name of whoever connects the repository and the access token (which we store encrypted, never in plain text).
- Technical logs of the calls to our AI model (what was asked of it and what it answered), which we keep for a limited time so we can investigate a technical issue if one occurs — see the retention section.
We do not collect special categories of data (health, beliefs, etc.) as part of the normal operation of the product, unless you choose to voluntarily include them in the content you write.
3. What we use it for
4. Who we share your data with
We use the following providers to operate the service, all of them contractually bound to protect your data (processors, art. 28 GDPR):
When these providers process data outside the European Economic Area, it is done under safeguards recognized by the GDPR (Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework).
We do not sell your data or use it for advertising purposes. There is no analytics tracker or advertising cookie on the platform.
5. How long we keep your data
- The content in your account (ideas, messages, specs, etc.) is kept while your account is active.
- The logs of the AI calls (what was asked, what it answered) are kept for a maximum of 6 months, after which they are deleted automatically; we only keep aggregate statistics (cost, usage) indefinitely, without that content.
- If you request the closure of your account, we delete or anonymize your content and permanently revoke your access — see the next section.
6. Your rights and how to exercise them
You have the right to access your data, rectify it, request its erasure, obtain a copy in a portable format, or object to its processing. To exercise any of these rights, write to us at legal@idea2prod.ai; we will respond within the one-month period required by law.
If you believe we have not handled your data correctly, you can lodge a complaint with the relevant data protection authority (in Spain, the AEPD).
7. Security
We apply technical and organizational measures to protect your data: encryption of sensitive credentials, per-account access control, and isolation of each customer's data within our database. In the event of a security breach that affects you, we will notify you as required by law.
8. Cookies
We use only the cookies strictly necessary for the platform to function (keeping your session logged in and protecting you against cross-site request forgery attacks). We do not use analytics or advertising cookies, so we do not need to ask for your consent for them.
9. Changes to this policy
If we make a significant change to this policy, we will notify you by email or through a notice on the platform before the change takes effect.