Privacy Policy

01Who We Are

Validora is operated by C2D Works Yazılım Anonim Şirketi (C2D Works), Merkez Mah. Akar Cad. iTower Bomonti No: 3, İç Kapı No: 154, Şişli, İstanbul, Türkiye. C2D Works is the data controller for personal data processed through Validora. Contact us at contact@validora.io for anything privacy-related.

02Data We Collect

• Account data: email and name (collected on registration).
• Analysis data: the idea or company descriptions, URLs, answers and notes you submit, and the reports generated from them.
• Workspace data: what you add yourself, such as decisions, actions, team invites and the work summaries your coding agent sends through our MCP integration.
• Usage data: analyses run, AI tool uses, credits bought and spent.
• Payment data: processed entirely by our payment provider, which acts as Merchant of Record — we receive the order and subscription status, never card details. Paid plans are not on sale yet.
• Technical data: IP address, browser, device type (via our hosting and database providers' standard logs).

03How We Use Your Data

• To provide and improve the Validora service.
• To answer your messages and send service emails about your account. Payment receipts and renewal reminders are sent by our payment provider.
• To count your usage and enforce plan limits.
• We do not sell your data. Ever.

04AI Processing

Your analysis inputs are sent to OpenAI and Perplexity for report generation. These are processed under their respective privacy policies. We do not opt in to using your inputs to train models, and we instruct upstream providers accordingly where they offer that control.

05Data Storage

Data is stored in Supabase, hosted on AWS in eu-central-2 (Zurich, Switzerland), and encrypted at rest. The application is served by Vercel.

06Data Sharing

We share data only with the following processors, each for the explicit purpose listed:

• OpenAI — writing the report from the research results, and the in-app AI tools. Your idea description and answers are sent with each request.
• Perplexity — web research through its Sonar API. Research questions written from your idea, including its description, are sent; Perplexity searches the web and returns answers with their source links and short excerpts.
• Resend — delivery of account and invitation emails
• Payment provider — payment processing once paid plans are on sale; it will be named here before then
• Supabase — database and authentication
• Vercel — hosting of the app and this website

Under their published API terms, OpenAI and Perplexity do not use the data we send them to train their models. OpenAI may keep API requests for up to 30 days to monitor abuse. Please don’t put information you can’t share with these providers, such as personal data about other people, into an idea description.

No advertising, tracking, or data broker partners. No exceptions.

Content you choose to share is visible to the people you share it with: anyone holding a report or Studio share link you created, a TV you paired, and members of a workspace you invited. Turning a share off or rotating its link stops access.

07Cookies

In the app we use session cookies for sign-in only, and your browser keeps a few preferences (such as theme and language) in local storage. No advertising cookies. No third-party tracking pixels. No analytics that profile you across other sites.

On this website (validora.io) we use Vercel Web Analytics to count page views and see which sites send us visitors. It sets no cookies, does not identify you, and does not follow you across other sites. Its font is loaded from Google Fonts, which receives your IP address when the page loads.

08Your Rights (GDPR / KVKK)

You have the right to access, correct, delete, port, and object to processing of your personal data. Email contact@validora.io to exercise any of these rights. We respond within 30 days.

09Data Retention

• Account data: retained until you delete your account.
• Analysis reports and workspace data: retained until you delete them or your account is deleted.
• Usage and billing records: retained while your account exists; records we must keep by law (for example for tax) are kept for the period the law requires.

10Account Deletion

You can delete your account yourself in Settings → Delete account. Your account and everything in it (analyses, projects, workspaces you own, credits and MCP keys) is removed immediately. If you would rather we do it, email contact@validora.io from your account email and we will delete it within 30 days. Copies in our database backups disappear as those backups expire. Records we must keep by law, such as payment records held by our payment provider, are kept.

11Children

Validora is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

12Changes

We will email you 30 days before any material change to this policy. Continued use after the notice period constitutes acceptance.

13Contact

contact@validora.io · C2D Works Yazılım Anonim Şirketi, Merkez Mah. Akar Cad. iTower Bomonti No: 3, İç Kapı No: 154, Şişli, İstanbul, Türkiye.