Privacy Policy
1. Who we are
The AI Productization Lab (the "Platform"), available at aipl.angeingabire.com and aipl.angeingabire.com/fr, is operated by Ange Ingabire LLC, a limited liability company organized under the laws of the State of Wyoming, United States (Wyoming Secretary of State filing ID 2023-001265748), with its principal office at 30 N Gould St, Ste R, Sheridan, WY 82801, United States ("we," "us," "our").
For the purposes of the EU and UK General Data Protection Regulation (GDPR) and similar laws, Ange Ingabire LLC is the data controller of the personal data described in this policy.
Contact: info@angeingabire.com
2. Scope
This policy explains how we collect, use, share, store and protect personal data when you visit the Platform, create an account, buy credits, use the Platform's tools, or contact us. It applies to both the English and French versions of the Platform, which share one account system.
It does not cover third-party websites or services linked from the Platform, which have their own policies.
3. What we collect
3.1 Information you give us
- Account details: email address and password. Passwords are stored only as a secure, one-way encrypted hash. We cannot see your password.
- Profile details (optional): full name, company or business name, street address, city, postal code and country.
- Language preference: whether you signed up on the English or French version of the Platform.
- Content you submit: the niches, target audiences, business descriptions, answers to Blueprint questions, pricing and revenue assumptions, and any other text you enter into the Platform's tools.
- Support communications: anything you send us by email, including complaints and refund or credit requests.
3.2 Information generated by your use of the Platform
- Generated content: sourced idea candidates, AIM Scores and their breakdowns, Business Blueprints, 90-day plans, and outputs from PACE, VAM, Scenario Testing and the Automation Map.
- Account activity: your credit balance, credit grants and their expiry dates, credit deductions per action, refunds, saved projects, archived projects and scenario runs.
- Account events: signup date, email confirmation status, sign-in dates, password resets and account deletion.
3.3 Payment information
Payments are processed by Stripe. We never receive or store your full card number, expiry date or security code. We receive from Stripe only what we need to run your account: confirmation that a payment succeeded, the product bought, the amount, the date, and the email address used at checkout. Stripe sends your receipt in the name of Ange Ingabire LLC, which operates the AI Productization Lab.
3.4 Technical information
When you use the Platform, our hosting and infrastructure providers automatically record standard technical data, such as IP address, browser type, device type, pages requested, date and time, and error logs. We use it to operate, secure and troubleshoot the Platform.
3.5 What we do not collect
We do not knowingly collect special categories of personal data (such as health, religion, ethnicity, political opinions or sexual orientation). Please do not enter this kind of information, or anyone else's personal data, into the Platform's tools. The Platform is built to analyze business ideas, not people.
4. How we use your information and our legal bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account, including sign-in, email confirmation and password resets | Account details, account events | Performance of our contract with you |
| Generating the content you request (ideas, scores, blueprints, tool outputs) | Content you submit, generated content | Performance of our contract with you |
| Managing credits, purchases, expiry and automatic refunds for failed generations | Account activity, payment information | Performance of our contract with you |
| Keeping your work saved across devices and sessions | Generated content, account activity | Performance of our contract with you |
| Providing customer support and handling complaints, credit or refund requests | All account data relevant to the request | Performance of our contract; our legitimate interest in resolving issues fairly |
| Sending essential service emails (confirmation, password reset, security notices) | Email address, language preference | Performance of our contract |
| Securing the Platform, preventing fraud, abuse and credit manipulation | Technical information, account activity | Our legitimate interest in protecting the Platform and its users |
| Keeping financial and accounting records | Payment information, account activity | Compliance with legal obligations |
| Improving the Platform, fixing errors and understanding how features are used | Account activity, technical information | Our legitimate interest in improving our service |
| Defending legal claims and enforcing our Terms | Any relevant data | Our legitimate interest in establishing, exercising or defending legal claims |
We do not send marketing emails. If we ever do, we will ask for your consent first where the law requires it, and you will be able to unsubscribe at any time.
5. How AI is used on the Platform
- The Platform uses Google's Gemini models to generate ideas, scores, blueprints and tool outputs. When you run an action, the text you submitted for that action is sent to Google for processing, and the generated result is returned to the Platform.
- Some actions, such as Source Ideas, use web search grounding, meaning Google may search the public web to inform the result.
- We use Google's paid API service, under which Google does not use your submitted content to train its models.
- We do not use your content to train any AI model.
- AI-generated content can be inaccurate, incomplete or out of date. Scores and projections are estimates to support your own judgment, not professional business, financial, legal or investment advice.
- The Platform does not make decisions about you that have legal or similarly significant effects. The AIM Score evaluates a business idea, not a person.
6. Who we share information with
We do not sell your personal data. We do not share it for advertising. We share it only with the service providers below, who process it on our behalf and under our instructions, and only as far as they need to provide their service.
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication and server functions | Account details, profile, content, account activity | Data stored in the European Union (Ireland) |
| Google LLC (Gemini API) | AI text generation | Content you submit for each action | United States and other Google locations |
| Stripe, Inc. and its affiliates | Payment processing | Payment details, email at checkout | United States, Ireland and other Stripe locations |
| Hostinger | Website hosting | Technical information (server logs) | Hostinger data centers |
| Titan (Flock FZ-LLC) | Sending account emails | Email address, email content | Titan data centers |
Stripe also acts as an independent controller for certain payment data, under its own privacy policy.
We may also disclose information:
- When required by law, such as in response to a valid court order or legal request from a public authority.
- To protect rights and safety, where needed to prevent fraud, protect our users, or defend or bring a legal claim.
- In a business transfer, if Ange Ingabire LLC or the Platform is merged, sold or reorganized. The new owner would be bound by this policy, and we would notify you before your data became subject to a different policy.
7. International transfers
We operate from outside the European Union, and some of our providers process data in the United States and other countries whose data protection laws may differ from yours. Where personal data from the EU, EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses included in our providers' data processing terms, or the provider's certification under the EU-U.S. Data Privacy Framework where applicable. You can ask us for more information about these safeguards.
8. Operator access to your account
To provide support, investigate technical problems, correct credit errors and prevent abuse, authorized personnel of Ange Ingabire LLC can view account information, including your email, profile, credit history, project titles and account activity, through a restricted administration tool. Access is limited to named administrator accounts, every credit adjustment is logged with the administrator's identity and a written reason, and we access account data only when there is a legitimate reason to do so.
9. Storage on your device
The Platform uses your browser's local storage to keep you signed in and to remember basic settings. This storage is strictly necessary for the Platform to work, so it does not require your consent.
We do not use advertising cookies, cross-site tracking, or third-party analytics. If we add any non-essential cookies or analytics in the future, we will update this policy and ask for your consent where required.
10. How long we keep your data
- Account data and content: for as long as your account exists.
- After you delete your account: your login, profile, saved ideas, projects, scenario runs and credit history are permanently deleted. We keep one minimal record: your customer number, the date of deletion, who initiated it (you or an administrator), an optional reason, and the credit balance at deletion. This record contains no name or email address, and we keep it to maintain accurate accounting and to handle any later dispute.
- Payment records: Stripe keeps payment records under its own retention policy, and we keep transaction records for as long as tax and accounting law requires.
- Support emails: for as long as needed to resolve the matter and handle any follow-up, and for no longer than necessary.
- Technical logs: for short periods set by our infrastructure providers.
- Backups: deleted data may remain in encrypted backups for a limited period before being overwritten automatically.
11. Your rights
11.1 For everyone
Whatever your location, you can:
- Access and correct your profile at any time from your account settings.
- Change your password from your account settings.
- Delete your account at any time from your account settings, or by emailing us.
- Ask us what personal data we hold about you.
11.2 EU, EEA, UK and Switzerland
You have the right to:
- Access your personal data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict processing in certain circumstances.
- Data portability: receive the data you provided in a structured, machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr. In the UK, it is the Information Commissioner's Office (ICO), www.ico.org.uk. We would appreciate the chance to address your concern first.
11.3 California residents
Under the California Consumer Privacy Act as amended (CCPA/CPRA), you have the right to know what personal information we collect and how we use it, to request deletion, to request correction, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes that would require a right to limit.
11.4 Other countries
If you live in another country with data protection laws, you have the rights those laws provide, and we will honor valid requests.
11.5 How to exercise your rights
Email info@angeingabire.com from the email address linked to your account, stating which right you wish to exercise. To protect your account, we may need to verify your identity before acting on a request. We will respond within one month, or sooner where local law requires. Where a request is complex or numerous, we may extend this by up to two further months and will tell you why. Requests are free, unless they are manifestly unfounded or excessive.
12. Security
We take reasonable technical and organizational measures to protect your data, including:
- encrypted connections (HTTPS)
- one-way encrypted password storage
- database access rules that let each user access only their own data
- server-side enforcement of credit costs
- restricted, logged administrator access
- email confirmation before an account can be used
No system is completely secure, and we cannot guarantee that data will never be accessed without authorization. You are responsible for keeping your password confidential. If we become aware of a personal data breach likely to put your rights at risk, we will notify you and the relevant authorities as required by law.
13. Children
The Platform is intended for people 18 years of age or older and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
14. Do Not Track
Because we do not track users across third-party websites, we do not respond to Do Not Track browser signals differently.
15. Changes to this policy
We may update this policy to reflect changes to the Platform, our providers or the law. We will change the "Last updated" date at the top, and for material changes we will give reasonable notice, for example by email or a notice on the Platform, before they take effect.
16. Language
This policy is available in English and French. If there is any inconsistency between the two versions, the version in the language of the Platform version you used will prevail, to the extent permitted by applicable law.
17. Contact
Ange Ingabire LLC
30 N Gould St, Ste R
Sheridan, WY 82801
United States
Email: info@angeingabire.com