Privacy policy

The Eureka Database (“Eureka”, “we”) is a research platform for startup ideas at theeurekadatabase.com. This policy explains what we collect, why, and the choices you have. The short version: we collect what we need to run the product, we don't sell your data, and you can leave with your data deleted.

What we collect

Account data. When you create an account: your email, name, password (stored hashed by our auth provider, never readable by us), and an optional profile picture.

Purchase data. Payments are processed by Stripe. We never see or store your card number; we store the purchase record (amount, date, the email used) to grant your membership.

Product activity. Ideas you save, votes, onboarding answers, workspace content you create, and co-founder profile details you choose to share with other members.

Newsletter. If you subscribe to the daily idea email: your email address, when you subscribed, and which issues we have sent you.

How we use it

To run the product: authenticate you, grant what you paid for, personalize your dashboard, match co-founders (only using what you put in your co-founder profile), send the emails you asked for, and keep the service secure. We do not sell personal data to anyone, and we do not use your data to train AI models.

Email

Transactional email (account confirmation, receipts) is sent because you need it. The daily idea newsletter is sent only if you subscribed, and every issue includes a one-click unsubscribe that works immediately. We use MailerLite and MailerSend as email providers; they process your email address on our behalf.

Service providers

We run on a small set of processors: Vercel (hosting), Supabase (database and auth), Stripe (payments), MailerLite/MailerSend (email), and Anthropic (AI features; prompts are not used to train their models per our API terms). Each receives only what it needs to do its job.

The idea database itself

The research in Eureka is built from public sources (public forum posts, reviews, and similar). We store short attributed excerpts with links back to the source, hash author handles rather than storing them, and remove excerpts when the upstream content is deleted. Details are on our data ethics page.

Cookies

We use cookies for one thing: keeping you signed in. No third-party advertising cookies, no cross-site tracking.

Retention and deletion

We keep your data while your account exists. Email jeremy@theeurekadatabase.com to delete your account and we will remove your personal data within 30 days, keeping only what payment law requires us to retain (purchase records).

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it — whichever privacy law applies to you (GDPR, CCPA, or otherwise), the email above is the way to exercise it, and we don't make you jump through hoops.

Changes

If this policy changes in a way that matters, we will note it here and update the date at the top. Questions? Email jeremy@theeurekadatabase.com.