OurIdea.ai — Privacy Policy
Last updated: 11 August 2026
Applies to: ouridea.ai, app.ouridea.ai, and the abi. products (abi. Clone, abi. Clone for Consultants, abi. FDE, abi. Starter, abi. Pro, GTM Launchpad, FirstFlight, SIGNAL and SIGNAL Academy).
1. Who we are
OurIdea.ai provides go-to-market and business-process software. In this policy, "we" and "us" mean OurIdea.ai, and "you" means the person using our products.
Contact for anything in this policy, including requests about your data: adam@ouridea.ai
OurIdea.ai is operated from the United Kingdom by Adam Salley. The business is not yet incorporated; once it is, the registered company name, number and address will be published here.
2. Two different roles, and why it matters to you
This is the most important thing to understand about how we handle data, so it comes first.
When you use our products, we are the controller of your account information. We decide what to collect and why, and this policy governs it.
When you put other people's information into our products, you are the controller and we are the processor. That covers, for example, a map of your business that names your staff, an interview one of your colleagues gives to abi. FDE, or a document you upload for analysis. We hold and process that material on your instructions, to provide the product to you. We do not decide what you collect about your own people, and we do not use it for our own purposes.
If you are a consultant using abi. Clone for Consultants to map a client's business, the same split applies: your client's information is yours to control, and ours only to process on your behalf.
Business customers who need this in contractual form should ask us for a Data Processing Agreement.
3. What we collect
Information you give us
Account details. Name, email address, job title, company name, and a password. If you sign in with Google, we receive your name and email from Google rather than storing a password.
Optional profile details. Profile picture, appearance preferences.
Two-step login. If you choose to turn it on, we store the authenticator factor needed to verify your codes. It is off by default and you can turn it off again at any time in Settings > Security.
Assessment and intake answers. What you tell abi. Pulse, GTM Launchpad or FirstFlight about your business, so we can produce your report.
Business content you create. Business maps, processes, roles, systems, plans, ICP definitions and notes.
Documents you upload to abi. FDE for analysis.
Support and feedback you send us.
Information about other people that you provide
Colleagues and clients you name on a map, or invite to an interview: their name, email address and role.
Interview content. When someone takes an abi. FDE interview, we store what they type or say and the summary produced from it. If they use voice input, speech is converted to text in their own browser by their device, not sent to us as audio.
Information from systems you connect
If you connect a tool such as HubSpot, Salesforce, Pipedrive, Stripe, Google Analytics 4, Mailchimp or a PSA system, we read only what is needed to compute the measures shown in the product, and we store the computed figures rather than a copy of your source data. Full detail is in our Data Processing Addendum. You can disconnect any integration at any time.
Information we generate
Usage records needed to run the service: sign-in times, which features were used, and counts of AI operations against your plan's allowance.
AI output: reports, insights and summaries produced from your inputs.
Cookies and analytics
Our website and our application behave differently here, and it is worth being precise rather than making one blanket claim that is only half true.
Our website (ouridea.ai) uses Google Analytics 4 to understand which pages people visit and how they arrive. That sets cookies in your browser. You can accept or refuse them through the cookie settings link in the footer, and refusing does not stop the site working.
Our application (app.ouridea.ai) carries no analytics or advertising at all. It sets no tracking cookies. It stores a small amount of information in your browser's local storage, such as your appearance preference and your signed-in session, because the product cannot work without it. The only third parties its pages load are Supabase for the database and sign-in, Google's sign-in library if you choose that route, and a charting library.
We do not buy personal data, and we do not sell yours.
4. Why we use it, and our lawful basis
Create and run your account, and provide the products you asked for. Performance of a contract.
Take payment and prevent fraud. Performance of a contract, and a legal obligation.
Send service messages you need, such as password resets and invitations. Performance of a contract.
Keep the service secure and working, and investigate abuse. Legitimate interests.
Improve the products and fix faults. Legitimate interests.
Send marketing email. Consent, which you can withdraw at any time.
Feature your business or your map in our own marketing. Consent, asked for separately and refusable.
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you can object at any time using the contact address above.
5. Artificial intelligence
Several products use AI models to produce reports, conduct interviews, read uploaded documents and generate insights. Being specific about this matters more than the usual reassurances:
Which provider. We send the relevant material to Anthropic's Claude API, and for market research we use Tavily to retrieve public web results.
What gets sent. For reports and insights: your intake answers, your business content and computed measures. For interviews: the conversation itself. For document analysis: the text of the document you uploaded.
What does not get sent. Your password, your two-step authenticator factor, your payment details, or the credentials for systems you have connected.
We do not train AI models on your data. We send it to our providers under their commercial API terms, which do not permit it to be used for training their models.
AI gets things wrong. Reports, scores and insights are generated output and can be mistaken. They are there to inform your judgement, not to replace it, and you should not treat them as professional advice.
No solely automated decisions. Nothing in our products makes a decision about you that has a legal or similarly significant effect without a person involved.
6. Who else handles your data
We use these providers to run the service. Each processes data only on our instructions.
Supabase. Database, authentication and file storage.
Netlify. Website and application hosting.
Stripe. Payments. Stripe handles card details directly, and we never see or store them.
Resend. Sending service and report emails.
Make.com. Automation between our systems.
Anthropic. The AI models behind reports, interviews and insights.
Tavily. Retrieving public web results for market research.
Google Fonts, jsDelivr, cdnjs and unpkg. Serving fonts and code libraries used by our pages.
Google Analytics 4. Website visit statistics on ouridea.ai only, subject to your cookie choice.
Google Sign-in. Signing in with a Google account, if you choose that instead of a password.
We also share information where you tell us to, for example by inviting a colleague or connecting a tool, and where the law requires it. If the business is ever sold or merged, information may transfer to the buyer, and we will tell you before that happens.
The list above is our current set of providers. If we add one we will update this page, and customers with a Data Processing Agreement will be told before it takes effect.
7. Where your data is held
Our infrastructure providers may store and process data outside the UK and the European Economic Area, including in the United States. Where that happens we rely on the safeguards those providers offer, such as UK and EU standard contractual clauses.
Our database and file storage run in London (eu-west-2).
8. How long we keep it
Account details. While your account is open, then 90 days.
Business content: maps, reports, plans and documents. While your account is open, then 90 days.
Interview content and summaries. While the related project exists, then 90 days.
Weekly measure snapshots. 24 months.
Monthly aggregates. 36 months.
AI insight reports. 24 months.
Email sending logs. 12 months.
Integration connection records. While connected, then 90 days.
Billing and tax records. As long as the law requires, currently 6 years.
Anything past its period is deleted within 30 days, or sooner if you ask us to delete it.
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Where we rely on consent you can withdraw it at any time.
Write to adam@ouridea.ai. We will respond within one month.
If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
If your data is in our products because someone else put it there, for example your employer mapped a process you are part of, or a consultant interviewed you, your request usually needs to go to them, because they decide what happens to it. Contact us anyway and we will tell you who to ask and pass the request on.
10. Security
We use encryption in transit, row-level access rules so accounts cannot read each other's data, encrypted storage for the credentials of tools you connect, and optional two-step login on your account. No system is perfectly secure, and we will tell you and the regulator without undue delay if a breach affects your data.
11. Children
Our products are for business use and are not intended for anyone under 18. We do not knowingly collect information about children.
12. Changes
If we change this policy in a way that materially affects you, we will tell you by email or in the product before it takes effect. The date at the top shows the current version.