Privacy Policy
Last Updated: February 28, 2026
Alvar ("we", "us", or "our") operates alvar.md. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
1. Information We Collect
1.1 Information you provide
- Email address — when you purchase, sign up for the waitlist, or save an analysis
- Startup idea / product description — when you use the AI idea analyzer
- Payment information — processed by Stripe; we do not store card details
1.2 Automatically collected
- Usage data — pages visited, features used, session duration
- Technical data — IP address, browser type, device information
1.3 Cookies
We use essential cookies (authentication, session management) and analytics cookies (Vercel Analytics). You can disable non-essential cookies via your browser settings.
2. How We Use Your Information
- To provide and operate the Service
- To send your license key and product updates via email
- To notify you when the macOS app is available (if you joined the waitlist)
- To process subscription billing and manage your account
- To improve the Service based on usage patterns
- To comply with legal obligations
3. AI Data Processing
When you use the AI idea analyzer, your idea descriptions are sent to third-party AI providers (OpenRouter, Perplexity) for processing. These providers process your data according to their respective privacy policies. We do not use your ideas to train AI models.
4. How We Share Your Information
We do not sell your personal information. We share it only with:
- Stripe — payment processing (Stripe Privacy Policy)
- Vercel — hosting and analytics
- Resend — transactional email delivery
- OpenRouter / Perplexity — AI processing of idea descriptions
- Law enforcement — when required by law
5. Data Security
We use TLS encryption for data in transit and follow industry-standard security practices. No method of transmission or storage is 100% secure — we cannot guarantee absolute security.
6. Data Retention
We retain your email and purchase records for as long as necessary to provide the Service and comply with legal obligations. Transaction records are kept for 7 years as required by law. Subscription billing data is retained for the duration of your subscription plus 7 years. You may request deletion at any time by emailing us.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Unsubscribe from marketing emails (link in every email)
- Data portability (receive your data in a machine-readable format)
To exercise any right, email hello@alvar.md. We will respond within 30 days.
8. EU/UK Users (GDPR)
If you are in the EU or UK, our legal basis for processing your data is:
- Contract performance — to deliver your purchase and license key
- Consent — for waitlist / marketing communications
- Legitimate interests — to improve the Service and prevent abuse
You have all rights under GDPR including the right to lodge a complaint with your local supervisory authority.
9. California Users (CCPA)
We do not sell personal information. California residents have the right to know what data we collect, request deletion, and opt out of any future sale (though we do not sell data). Contact hello@alvar.md to exercise these rights.
10. Children's Privacy
The Service is not intended for users under 13. We do not knowingly collect data from children. If we learn we have, we will delete it promptly.
11. Changes to This Policy
We may update this policy periodically. We will notify you of material changes via email and by updating the date above.
12. Contact
Privacy questions? Email us at hello@alvar.md.