EN
GDPR / DSGVO / ePrivacy Compliant Effective: 2026

Privacy Policy & Data Protection

We build an Evidence-First market intelligence platform for technical solo founders. We treat your privacy with the same rigor we apply to our engineering standards.

1. Data Controller and Contact

The data controller responsible for the processing of personal data on AIdeaRadar (Personal Opportunity Radar) is the platform operating team. For any questions, data requests, or to exercise your GDPR rights, contact us directly at [email protected].

2. Zero Third-Party Tracking Cookies (Cookieless Architecture)

Our platform is engineered according to Zero-Bloat & Privacy-First principles. Under the EU ePrivacy Directive and GDPR Articles 5 and 6:

  • We do not use Google Analytics, Meta Pixel, or third-party behavioral retargeting scripts.
  • We employ privacy-preserving, cookieless telemetry (Cloudflare Web Analytics / Plausible) that never correlates or tracks visitors across domains.
  • We store only strictly necessary technical cookies (Laravel XSRF security token and session ID). Consequently, intrusive consent banners are avoided without compromising privacy.

3. Information We Collect and Process

In strict compliance with GDPR data minimization requirements:

  • Founder Profile Inputs: Primary software stack (e.g. PHP/Laravel, Python/FastAPI), weekly hours commitment, and starting capital bracket.
  • Contact Details: Email address provided voluntarily to save Founder Fit calculations or receive weekly curated opportunity digests.
  • Catalog Interactions: Explicit Save and Skip actions recorded to calculate your personalized Founder–Opportunity Fit ranking.

4. Artificial Intelligence & Data Isolation

CORE PRIVACY COMMITMENT: Your personal identity and email address are never passed to LLM APIs (such as Google Gemini, Anthropic Claude, or OpenAI). All AI-assisted summarization, scoring, and translation pipelines operate solely on aggregated public market evidence and anonymized criteria.

5. Infrastructure & EU Hosting Localization

Our application and primary MySQL database reside inside the European Union on Hetzner Online GmbH infrastructure (datacenters in Germany and Finland). Edge distribution and DDoS mitigation are provided by Cloudflare Inc. under standard contractual clauses and GDPR compliance.

6. Your Rights Under GDPR (Articles 15–22)

As an EU or global user, you retain complete control over your personal data:

  • Right of Access (Art. 15): Request an export of all data stored in your founder profile.
  • Right to Rectification (Art. 16): Update or correct your preferences and stack choices.
  • Right to Erasure / "Right to be Forgotten" (Art. 17): Have your profile, email, and historical interactions permanently deleted within 30 days upon emailing [email protected].
  • Right to Withdraw Consent: Unsubscribe from digest emails instantly using the one-click unsubscribe link included in every communication.