1. Who we are
Pain2Product AI (“we”, “us”, or “our") operates the Pain2Product AI platform. We are committed to protecting your personal data and respecting your privacy rights under the EU General Data Protection Regulation (GDPR).
2. What data we collect
We collect only the data necessary to provide our service:
- Account data: email address, authentication tokens (via our authentication provider).
- Session data: chat messages, generated product ideas, pain analyses, and bookmarked ideas stored to enable continuity across sessions.
- Usage data: anonymous usage counters to enforce free-tier limits.
- Technical data: browser type, device information, and IP address (via server logs) for security and debugging.
3. How we use your data
We use your data to:
- Provide, maintain, and improve the AI discovery experience.
- Authenticate you and secure your account.
- Store your session history and saved ideas so you can access them across devices.
- Analyze aggregate usage patterns to improve the product.
4. Cookies and similar technologies
We use essential cookies for authentication and session management. These are necessary for the service to function and cannot be disabled. We may also use optional analytics cookies with your explicit consent. You can manage your cookie preferences at any time via the banner displayed on your first visit.
5. Data retention
We retain your data for as long as your account is active. Guest session data is stored locally in your browser and is not retained on our servers. You can delete your account and associated data at any time by contacting us.
6. Your rights (GDPR)
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erasure (“right to be forgotten”).
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To exercise these rights, contact us at the email below.
7. Data transfers
Our backend infrastructure may process data outside the European Economic Area (EEA). Where this occurs, we rely on standard contractual clauses (SCCs) and other safeguards approved under GDPR to ensure an adequate level of protection.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.
9. Contact us
If you have questions about this Privacy Policy or your data rights, please contact us at: metabiz.group@gmail.com