Privacy Policy

We collect three categories of data, all provided by you or generated by your use of the service:

• Account data — your email address, display name and a salted hash of your password (we never store the password itself). If you sign in with an OAuth provider, we receive the email and name that provider shares.
• Usage data — the domains you follow, your watchlists and collections, ideas you submit for evaluation, feedback you give on opportunities, and your notification and theme preferences.
• Billing data — your plan, billing period, billing country, currency, and a record of payments and invoices. We never see or store your card or bank details — payment credentials are collected and processed directly by Razorpay (see section 4).

• To operate the service: leaderboards scoped to the domains you follow, watchlist alerts, idea evaluations you request.
• To bill you for a paid plan and issue invoices.
• To send transactional email — account verification, password resets, watchlist notifications and billing receipts.
• To respond when you contact support.
• To protect the service, e.g. rate limits and anti-scraping caps on idea views.

• We never sell or rent your personal data.
• We embed no advertising networks and no ad-tracking pixels. Our only third-party analytics is Google Analytics, used for aggregate usage statistics (see section 5).
• We never use your submitted ideas to seed the public leaderboards — your submissions are private to your account.

Payments are processed by Razorpay. When you purchase a plan, your card, UPI or bank details go directly to Razorpay over their secure checkout; we receive only a payment reference, its status and the amount. Razorpay's handling of your data is governed by their own privacy policy. We store the resulting invoice metadata (plan, period, amount, currency, billing country) to give you a payment history and meet record-keeping obligations.

We use Google Analytics 4 to understand aggregate site usage — which pages are visited, roughly where visitors come from, and which features get used — so we can improve the product. It collects device and browser information and sets first-party cookies to distinguish returning visitors; we have not enabled advertising features, and we never send it your email address, password, ideas or billing details. Google's processing of this data is governed by its own privacy policy, and you can opt out of Google Analytics across all sites with Google's browser opt-out add-on.

We set one cookie and one local-storage key of our own:

• apo_session — an httpOnly session cookie that keeps you signed in. It carries no tracking identifiers and is removed when you sign out.
• apo_theme — a local-storage key remembering your light/dark preference. It never leaves your browser.

In addition, Google Analytics sets its own cookies (names beginning _ga) to distinguish returning visitors — see section 5. There are no advertising or cross-site tracking cookies.

Your account data is kept while your account exists. If you ask us to delete your account (email support from your registered address), we remove your personal data within 30 days, except invoice and payment records we are legally required to retain. Leaderboard content is not personal data and is unaffected.

You can access and update your profile data in the app at any time. You may request a copy of your personal data, correction of inaccurate data, or deletion of your account by emailing support@aiproductopportunity.com. We respond within 30 days.

The service is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

When we change this policy we bump the version number and effective date at the top of this page, and for material changes we notify account holders by email before the change takes effect.