Privacy Policy

Alxoria is operated by ALX Ventures LLC ("we", "us"), the controller of the data described in this policy. The wizard asks about your skills, interests, budget, and available time. When you generate an idea or a dossier section, those inputs are sent to our server and forwarded to Anthropic's API (our AI provider) to produce the result. Your inputs are not used to train AI models.

If you are signed out, we keep no copy: the result goes to your browser and nothing is stored on our servers. If you are signed in, your ideas and dossiers are saved to your account (see 'Where your ideas live') so they follow you across devices. API inputs are processed by Anthropic under its commercial terms and data-processing addendum: Anthropic retains them only for a limited period per its data-retention policy, then deletes them, and never uses them to train AI models. Our servers and site are hosted on Vercel in the United States.

You can use Alxoria without an account. If you create one, we store the details needed to operate it: your email address, a securely hashed password (if you choose one), or the identifier shared by Google or GitHub if you sign in with them, plus sign-in timestamps. This data lives in our database, hosted by Supabase in the United States.

Account emails (verification, password reset) are delivered through Resend, our email provider, which processes your email address for that purpose only. We do not send marketing email and we never sell your data.

If you subscribe to a paid plan, payments are processed by Stripe. Your card details go to Stripe directly and never touch our servers. We store only your subscription plan, your remaining Deep Build credits, and Stripe's reference identifiers.

Without an account, generated ideas, dossiers, and your progress checkmarks are stored in your browser's local storage, on your device. Clearing your browser data deletes them permanently; we have no copy and cannot restore them.

With an account, your ideas sync to our database (hosted by Supabase) so they survive browser clears and follow you across devices. They are protected by row-level security: only your authenticated session can read them. We do not read, share, or use them to train AI models. Support requests you send us are also stored so we can answer them.

We use Vercel Analytics to understand aggregate usage: page views, referrers, country-level location, device type. It does not use cookies and does not track you across sites. We see patterns, not people.

To keep the service available and prevent abuse, our servers count recent requests per IP address. These counters are stored in Upstash, a hosted cache, expire within an hour, and are used only for limiting, never for profiling or advertising.

We use Sentry, a hosted error-monitoring service, to capture technical errors so we can fix them. Sentry receives error details and technical context (such as the page and browser), not the contents of your dossiers; it is configured for errors only, with no session recording.

When someone creates an account, submits the support form, asks us to email a result, or makes a purchase, our servers post a short internal notification to a private team channel (Slack) so a solo team can respond. That notification can include the email address involved and the fact of the event; it is not shared outside our team and never used for advertising.

If you ask us to email you a dossier or name-check results, or opt in to occasional updates, we store your email address (in our database, Supabase) to send what you requested and, with consent, those updates.

Recommended services (formation, banking, design, and similar tools) are independent companies. Following a link takes you to their site under their privacy policy. Some links may become referral links, in which case the partner may know you arrived from Alxoria. Nothing about your generated ideas is shared with them.

You can delete your account yourself at any time from the account menu (Delete account): it cancels any subscription and permanently erases your ideas, dossiers, journal, advisor history, and credits. Prefer email, or want an export of your data first? Write to us and we'll do it promptly. Signing out removes your session from the device; deleting your browser data removes any local-only ideas.

Alxoria is not directed at children under 16 and we do not knowingly process their data.

If our data practices change (for example, when idea sync or payments launch), this policy will be updated and the date below revised before the change takes effect. Questions: hello@alxoria.com.