Legal

Privacy policy

Draft for review

This is an MVP draft describing how the software handles data. Have it reviewed by a qualified professional before public launch.

What we collect

Account data: name, email address, and hashed password (handled by Supabase Auth).
Content you create: projects, validation notes, brand drafts, content plans, leads, tasks, goals, finance records, and notes.
AI conversations you choose to save. Unsaved conversations are not stored.
Payment records: amount, product, status, provider transaction ID, and the last digits of the paying wallet. We never store PINs, passwords, or card numbers.
Telegram link data: your Telegram chat ID and username, if you connect Captain.
Operational logs: AI token counts (not message content), reminder delivery status, and rate-limit counters with hashed identifiers.

How we use it

To provide the service, send reminders you schedule, verify payments, prevent abuse, and improve reliability. We do not sell personal data.

AI processing

When you use AI features, the minimum necessary text (for example your idea description or project fields) is sent through OpenRouter to an AI model provider (such as Google or Anthropic) to generate a response. Do not include sensitive personal information in AI requests.

When Captain (our Telegram assistant) cannot understand a message by its built-in rules, that message text is stored so our team can improve Captain. Only administrators can see it, and it is deleted automatically after 30 days.

Memory: notes and links you save are stored in your account. Photos and files you send to Captain stay on Telegram's servers; we store only a reference so Captain can send them back to you and you can view them on the Memory page. Only you can see your memory, and you can delete any item at any time.

Journal: your journal entries are visible only to you (administrators cannot read them) and are never used to train Captain. For the weekly summary, that week's entries are sent to an AI model provider through OpenRouter. You can delete any entry at any time.

Leads and finance data

Lead contact information and finance records are private to your account. Only collect lead contact details you are lawfully allowed to hold. Bepreneur never messages your leads automatically.

Administrator access

Administrators can see account, purchase, and subscription status to verify payments and provide support. Administrators cannot view your saved AI conversations, leads, tasks, or finance records through the application.

Retention and deletion

You can delete your account from Settings. This permanently deletes your profile and all content you created. Payment transaction records are kept without your account link for accounting and fraud prevention. Rate-limit counters are deleted after two days.

Contact

privacy@your-domain.example (placeholder: replace before launch).