How Ideqo handles your data

This policy explains what personal data Ideqo collects, why we use it, who helps us process it, and how you can control your data. It applies to the Ideqo web application, onboarding flow, strategy workspace, admin tools, and related account services.

Last updated: 20 May 2026

Controller and contact

Ideqo is operated by the Ideqo team. For privacy requests or questions, email privacy@ideqo.ai. If your contract or invoice names a specific Ideqo legal entity, that entity is the controller for your use of the service.

What we collect

Account data: email address, name if provided, password hash, sign-in metadata, and account settings.
Workspace content: strategy session titles, chat messages, onboarding answers, uploaded files, generated documents, notes, feedback, and export activity.
Usage and operations data: feature interactions, quota and usage records, model/runtime information, errors, logs, and security events needed to run and improve the service.
Analytics data: page views and product events in Google Analytics 4 only when you accept analytics cookies.
Email data: email address and reset-token metadata when you request password reset or account-related messages.

Why we use it

To create and secure your account, authenticate you, and prevent misuse.
To provide the product strategy workspace, including AI-assisted analysis, document generation, file storage, exports, and admin management.
To maintain service reliability, debug errors, enforce quotas, and protect the application.
To respond to feedback, support requests, and password reset requests.
To understand product usage through Google Analytics only after you opt in.

Legal basis

Contract performance: account access, session storage, AI workflow execution, document generation, exports, and core product features.
Legitimate interests: security, abuse prevention, debugging, service improvement, and internal operational reporting.
Consent: Google Analytics and non-essential analytics cookies.
Legal obligation: records we must keep to comply with applicable law, accounting, or lawful requests.

AI processing and workspace content

Ideqo processes your prompts, onboarding answers, uploaded materials, and generated deliverables to provide AI-assisted strategy work. Do not upload content you are not allowed to use or share with the service. AI outputs may be inaccurate or incomplete, so you remain responsible for reviewing and validating them before using them for business decisions.

Service providers

We use processors and service providers only as needed to operate Ideqo:

Hosting, database, storage, and infrastructure providers used to operate the application.
AI service providers used to process your prompts, uploaded context, and generated strategy materials.
Email delivery providers used for password reset and service messages.
Google Analytics 4, but only when analytics consent is granted.

We do not sell your personal data. We do not use Google Analytics for advertising, retargeting, or ads personalization in this application.

Analytics consent

Analytics is off by default. If you choose "Accept all", Ideqo enables Google Analytics 4 to collect page views and product events such as onboarding progress, board usage, downloads, feedback actions, and pane interactions. If you choose "Essential only", analytics remains disabled. You can change this later through Settings in the account menu.

Retention and security

Account and workspace data is kept while your account is active or while needed to provide the service, resolve disputes, secure the product, or meet legal obligations. Passwords are stored as bcrypt hashes. Uploaded files are stored in your workspace and may be deleted from the product where deletion controls are available. Analytics data follows the retention configured in Google Analytics and your browser settings.

Your rights

Access: ask for a copy of personal data we hold about you.
Correction: ask us to correct inaccurate account or profile information.
Deletion: ask us to delete your account and associated workspace data, subject to legal or security retention needs.
Portability: ask for your workspace content in a usable format where technically feasible.
Restriction or objection: ask us to limit certain processing where applicable.
Withdraw consent: turn analytics off at any time from Privacy settings.
Complaint: contact your local data protection authority if you believe your rights are not being respected.

To exercise a right, email privacy@ideqo.ai. We may need to verify your identity before acting on a request.

Changes

We may update this policy when the product, providers, or legal requirements change. Material updates will be reflected on this page and, where appropriate, communicated in the product or by email.