Privacy Policy

1. Introduction

This Privacy Policy explains how Bedrock Reports ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our AI-powered business idea validation platform. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect and process the following categories of personal data:

Account Data

• Email address (required for account creation)
• Name (if provided via social login)
• Authentication identifiers from third-party providers (Auth0)

Usage Data

• Business ideas you submit for validation
• Generated validation reports
• Token balance and transaction history
• Interactions with our AI features (discovery, chat)

Technical Data

• IP address
• Browser type and version
• Device information

4. How We Use Your Data

• To provide and maintain our service, including generating validation reports
• To process your business ideas through our AI analysis pipeline
• To improve and develop our services
• To communicate with you about your account and provide customer support
• To comply with legal obligations

5. Legal Basis for Processing

• Contract Performance: Processing necessary to provide our services (Article 6(1)(b) GDPR)
• Consent: Where you have given specific consent for processing (Article 6(1)(a) GDPR)
• Legitimate Interest: For service improvement and security (Article 6(1)(f) GDPR)
• Legal Obligation: Where required by law (Article 6(1)(c) GDPR)

6. Data Sharing with Third Parties

We share your data with the following third-party processors to provide our services:

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, and we verify that our providers maintain adequate data protection standards.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Your validation reports and discovery results are retained until you delete them or close your account. After account closure, we may retain certain data for legal compliance purposes for up to 5 years. Technical logs are retained for up to 90 days.

9. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing of your personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests

To exercise any of these rights, please contact us using the details provided below.

10. Cookies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, session management, and site functionality
• Functional Cookies: Remember your preferences (language, theme)

11. Children's Privacy

Bedrock Reports is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. We encourage you to review this policy periodically.

13. Contact & Supervisory Authority

For questions about this Privacy Policy or to exercise your rights, contact us at:

You also have the right to lodge a complaint with the Polish supervisory authority: