Overview & Scope
Validate (“we”, “our”, or “us”) provides an automated market validation platform that empowers founders to test startup concept demand using quantitative Meta ad split-testing and early access landing pages.
Because our platform collects personal data—such as email addresses during early access registration and startup concept descriptions—this Privacy Policy outlines what information we collect, how it is stored, how cookies operate on our domain, and your rights to manage or delete your data at any time.
Personal Data We Collect
We restrict data collection to the minimum required to fulfill early access cohorts and run demand validation metrics:
Email Address
Submitted voluntarily when joining an early access cohort or requesting validation test results.
Startup Idea Description
Optional text submitted in simulator inputs or lead forms to generate test parameters.
Technical Log Data
IP address (anonymized/hashed), browser user-agent string, timestamp, and referring URL (used exclusively for security rate-limiting and anti-spam verification).
How We Use & Protect Data
We process collected data exclusively under the following lawful bases:
- Cohort Onboarding: Notifying you when your early access cohort slot opens or when your campaign metrics report is compiled.
- Anti-Spam Protection: Utilizing hidden honeypot validation to discard automated bot submissions before processing.
- Data Encryption: All transit communication occurs over enforced TLS 1.3 encryption. Database records are encrypted at rest using AES-256 standards.
- Zero Data Sales Guarantee: We never sell, rent, trade, or monetize your email address or startup ideas to data brokers or third-party advertisers.
Storage & Infrastructure
Lead collection records are synchronized securely to cloud infrastructure powered by Supabase (PostgreSQL) with strict Row Level Security (RLS) policies.
In the event of network disruption, fallback backup records are securely written to isolated system storage with encrypted access controls.
Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction (including the EU/EEA, UK, California, and other US states), you hold the following rights:
Right to Access
Request a complete export of any personal data linked to your email address.
Right to Erasure (“Right to be Forgotten”)
Request immediate permanent deletion of your email address and submitted data from our database.
Right to Opt-Out
Opt out of non-essential tracking cookies and marketing analytics at any time.
Non-Discrimination
We will never charge different prices or deny service based on your exercise of privacy rights.
Third-Party Subprocessors
We partner with select infrastructure subprocessors adhering to rigorous security standards:
- Supabase Inc. — Relational database storage & security infrastructure.
- Vercel Inc. — Edge hosting, serverless functions, and global CDN delivery.
- Meta Platforms, Inc. — Ad conversion pixel tracking (only active if Marketing cookies are accepted).
Contact & Data Deletion Requests
To request access to your data, initiate a permanent account/email deletion, or ask any questions regarding our compliance practices, contact our Data Protection team directly: