Privacy Policy

We collect three categories of data, all provided by you or generated by your use of the service:

• Account data — your email address, display name and a salted hash of your password (we never store the password itself). If you sign in with an OAuth provider, we receive the email and name that provider shares.
• Usage data — the domains you follow, your watchlists and collections, ideas you submit for evaluation, feedback you give on opportunities, and your notification and theme preferences.
• Billing data — your plan, billing period, billing country, currency, and a record of payments and invoices. We never see or store your card or bank details — payment credentials are collected and processed directly by Razorpay (see section 4).

• To operate the service: leaderboards scoped to the domains you follow, watchlist alerts, idea evaluations you request.
• To bill you for a paid plan and issue invoices.
• To send transactional email — account verification, password resets, watchlist notifications and billing receipts.
• To respond when you contact support.
• To protect the service, e.g. rate limits and anti-scraping caps on idea views.

• We never sell or rent your personal data.
• We embed no advertising networks and no third-party analytics or tracking pixels.
• We never use your submitted ideas to seed the public leaderboards — your submissions are private to your account.

Payments are processed by Razorpay. When you purchase a plan, your card, UPI or bank details go directly to Razorpay over their secure checkout; we receive only a payment reference, its status and the amount. Razorpay's handling of your data is governed by their own privacy policy. We store the resulting invoice metadata (plan, period, amount, currency, billing country) to give you a payment history and meet record-keeping obligations.

We use exactly one cookie and one local-storage key:

• apo_session — an httpOnly session cookie that keeps you signed in. It carries no tracking identifiers and is removed when you sign out.
• apo_theme — a local-storage key remembering your light/dark preference. It never leaves your browser.

There are no advertising, analytics or cross-site cookies.

Your account data is kept while your account exists. If you ask us to delete your account (email support from your registered address), we remove your personal data within 30 days, except invoice and payment records we are legally required to retain. Leaderboard content is not personal data and is unaffected.

You can access and update your profile data in the app at any time. You may request a copy of your personal data, correction of inaccurate data, or deletion of your account by emailing support@aiproductopportunity.com. We respond within 30 days.

The service is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

When we change this policy we bump the version number and effective date at the top of this page, and for material changes we notify account holders by email before the change takes effect.