Privacy Policy
Last updated: October 2026
This policy explains what personal data Ideas That Run collects, why, who we share it with, and the choices you have. We keep it short and plain.
1. Who we are
Ideas That Run is a small independent team that researches and publishes AI-business idea reports. We are responsible for your personal data (the "data controller").
Contact for privacy questions: [email protected]
We give you the main rights found in privacy laws such as the EU/UK GDPR and California's CCPA, wherever you live.
2. What we collect
When you unlock a free report:
- your email address;
- which report you unlocked;
- a record of your consent: the exact consent text you saw and the date and time you agreed.
When you log in:
- your email address and the one-time 6-digit codes we send you (codes expire quickly).
When you buy a day pass or membership:
- your access status and plan (for example, day pass, monthly, active or ended) and, for a day pass, when your access ends;
- your Whop membership ID, so we can link your payment to your account.
When you email us:
- your email address, name (if you give it) and whatever you write to us.
What we do NOT collect:
- We do not see or store your card or bank details. Whop handles payment.
- We do not use advertising or tracking cookies.
- We do not use any analytics tools at the moment. If we add them later, we will update this policy first.
Our hosting and security providers (such as Cloudflare) may automatically process technical data like your IP address and browser type to deliver the site and protect it from attacks.
3. Why we use your data
| Purpose | Data used | Legal basis (GDPR terms) |
|---|---|---|
| Unlock your free report | email, report unlocked | to provide what you asked for (contract) |
| Send the daily idea email and welcome series | email, consent record | your consent |
| Log you in | email, login codes | contract |
| Give members access to paid content | email, membership status/plan, Whop ID | contract |
| Answer your emails | your message and email | legitimate interest / contract |
| Prevent abuse (e.g. multiple free unlocks) and keep the site secure | email, unlock records, technical data | legitimate interest |
| Meet legal and tax duties | membership and payment records | legal obligation |
We do not sell your personal data. We do not "share" it for cross-context behavioural advertising (as CCPA defines it). We do not use your data to make automated decisions that have legal or similarly significant effects on you.
4. Is giving us data required?
No one has to give us data to read the free sections. Your email is needed if you want to unlock a free report, log in or buy a membership. Without it, we can't provide those features.
5. Who we share data with
We only share data with service providers that help us run the site, and only what they need:
| Provider | What they do | Where |
|---|---|---|
| Whop | Payments, subscriptions, tax collection | United States |
| Supabase | Database and login | Singapore region |
| Resend | Sends login codes and emails | United States |
| Cloudflare | Website hosting, security, email forwarding | Global network |
| Email newsletter service | Sends the daily email and welcome series | Varies by provider |
| Inbox and writing tools | Help us read and answer your emails | Varies by provider |
Whop also collects data from you directly at checkout under its own privacy policy.
We may also share data if the law requires it, to protect our rights or users' safety, or if the business is sold or transferred (the new owner would have to follow this policy).
Sponsors and advertisers: we do not give your email or personal data to sponsors.
6. Data sent to other countries
Some providers store or process data in other countries (for example, Singapore and the United States). We use reputable providers that protect data with security measures and contract terms, and, for people in the EU/UK, appropriate safeguards such as standard contractual clauses offered by our providers.
7. Local storage on your device
We use your browser's local storage (a small storage area in your browser, similar to a cookie) only to:
- keep you logged in; and
- remember which free report you unlocked on that device.
This is needed for the site to work. It is not used for ads or tracking. You can clear it at any time in your browser settings; you will then need to log in again.
8. How long we keep data
- Account and membership data: while you have an account, and for as long as tax, accounting or other laws require after your access ends where we need records for tax, accounting or legal reasons.
- Free unlock and consent records: while you're subscribed, and for a reasonable period after you unsubscribe so we can prove consent and honour your unsubscribe.
- Login codes: they expire within minutes.
- Emails you send us: as long as needed to deal with your request, then deleted within 24 months.
When we no longer need data, we delete it or make it anonymous.
9. Your rights
Wherever you live, you can ask us to:
- Access — get a copy of the personal data we hold about you.
- Correct — fix data that is wrong or incomplete.
- Delete — erase your data (we may keep what the law requires, such as tax records).
- Unsubscribe / withdraw consent — stop marketing emails at any time. Use the unsubscribe link in any email, or email us. This doesn't affect emails we must send about your account (like login codes).
- Limit or object — ask us to stop or limit certain uses of your data.
- Portability — get your data in a common, machine-readable format.
How to ask: email [email protected] from the address linked to your account. We may need to confirm it's you. We will reply within 30 days, or sooner if your local law requires. Requests are free unless they are clearly excessive.
Not happy? Please email us first. You can also complain to the data protection authority where you live (for example, in the EU or UK). California residents have the rights above and will not be treated differently for using them.
10. Security
We use encrypted connections (HTTPS), password-free one-time login codes, database access rules so members can only see their own data, and reputable providers. No system is 100% secure. If a data breach is likely to harm you, we will tell you and the authorities as the law requires.
11. Children
The site is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.
12. Changes to this policy
We will post any changes here and update the date at the top. If a change is important, we will tell you by email before it takes effect.
13. Contact
Also see: Terms of Service · Refund & Cancellation Policy.