Validora
Legal

Privacy Policy

Last updated: May 2026

01Who We Are

Validora is operated by Validora Teknoloji A.Ş., based in Istanbul, Turkey. Contact us at contact@validora.io for anything privacy-related.

02Data We Collect

  • Account data: email and name (collected on registration).
  • Analysis data: idea text or app URL you submit.
  • Usage data: analyses run, sections viewed, credits spent.
  • Payment data: processed entirely by Paddle — we receive only an order confirmation, no card details.
  • Technical data: IP address, browser, device type (via Supabase and standard web logs).

03How We Use Your Data

  • To provide and improve the Validora service.
  • To send transactional emails (analysis complete, credit purchase confirmation).
  • To calculate your token usage and enforce plan limits.
  • We do not sell your data. Ever.

04AI Processing

Your analysis inputs are sent to OpenAI (GPT-4) and Perplexity for report generation. These are processed under their respective privacy policies. We do not opt in to using your inputs to train models, and we instruct upstream providers accordingly where they offer that control.

05Data Storage

Data is stored in Supabase, hosted on AWS in eu-central-1 (Frankfurt, Germany). Analysis reports are stored encrypted at rest. Backups are encrypted and retained for 30 days.

06Data Sharing

We share data only with the following processors, each for the explicit purpose listed:

  • OpenAI — analysis generation
  • Perplexity — live market data
  • Paddle — payment processing
  • Supabase — database infrastructure

No advertising, tracking, or data broker partners. No exceptions.

07Cookies

We use a single session cookie for authentication. No advertising cookies. No third-party tracking pixels. No analytics that profile you across other sites.

08Your Rights (GDPR / KVKK)

You have the right to access, correct, delete, port, and object to processing of your personal data. Email contact@validora.io to exercise any of these rights. We respond within 30 days.

09Data Retention

  • Account data: retained until you request deletion.
  • Analysis reports: retained for 2 years, or until account deletion (whichever is sooner).
  • Usage logs: 90 days.

10Account Deletion

Delete your account at any time from Settings → Account. All personal data is permanently removed within 30 days. Anonymized aggregate metrics (e.g. total analyses run) may be retained.

11Children

Validora is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

12Changes

We will email you 30 days before any material change to this policy. Continued use after the notice period constitutes acceptance.

13Contact

contact@validora.io · Validora Teknoloji A.Ş., Levent Mah., İstanbul, Turkey.