Privacy & Trust
How we handle your data, in plain language.
TL;DR
- Your ideas are yours. We don't train AI on them, sell them, or share them with third parties beyond what's needed to run the product.
- We send your idea to Anthropic's Claude API to generate the evaluation. That's it. No other AI vendors, no marketing tools, no behavioral analytics.
- You can delete your account and every idea, evaluation, score, and transaction we have on you, anytime.
If something on this page is unclear, email us at hello@dualspark.io and we'll explain plainly.
What we collect
When you sign up, we collect your name, email, and password (stored hashed, never in plaintext).
When you submit an idea for evaluation, we store the title, summary, and full description you provide. When the evaluation runs, we store the per-phase analysis Claude returns and the resulting scores.
When you buy credits, we store a record of the transaction (date, amount, balance after), but we never see or store your card number. Card details are handled entirely by Stripe.
When you log in, we record the timestamp.
We do not collect your IP address for analytics, set tracking cookies, or run third-party analytics scripts (Google Analytics, Hotjar, Facebook Pixel, none of these). The only cookies we set are the session cookie that keeps you logged in.
What we do with it
We use your information for one purpose: to run IdeaRubric for you. Specifically:
- Authenticating you into your account.
- Sending your idea to Claude to evaluate it.
- Storing the evaluation so you can view it later.
- Charging you for credit packs you buy.
- Sending you the verification code when you sign up or reset your password.
That's the full list.
What we don't do with it
- We do not use your ideas to train AI models, and we do not permit third-party providers to use submitted content for model training through our integrations.
- We don't sell your data. We've never sold data, we don't have a buyer in mind, and we don't plan to.
- We don't share your ideas with anyone outside the third-party services listed below, and those only see what's strictly necessary to do their job.
- We don't run ads against your data.
- We do not review user ideas for marketing, advertising, or model-training purposes. The only humans who can read them are you and the IdeaRubric administrator (currently one person, Mohamed Hamdouchi, for support and abuse-prevention purposes).
Legal basis for processing
We process your information:
- to perform the services you request (running evaluations, maintaining your account, processing payments),
- to comply with legal obligations,
- and to protect the security and integrity of IdeaRubric.
Third-party services we use
To run the product, we share specific data with three companies:
| Service | What they get | Why |
|---|---|---|
| Anthropic | Your idea text + the evaluation prompt | To generate the AI evaluation |
| Stripe | Your name, email, card details, and purchase amount | To process credit-pack payments |
| Resend | Your email address and the contents of transactional emails | To deliver verification codes and password resets |
We do not work with any other third-party processors.
About Anthropic specifically
Your idea text is sent to Anthropic's Claude API to be evaluated. Per Anthropic's commercial API terms, inputs and outputs from API calls are not used to train Anthropic's models. Anthropic retains API request data for a limited period for abuse-prevention and trust-and-safety purposes. We have not enabled any opt-in features that would allow Anthropic to use your data for training.
If Anthropic's data-use policies change in a way that affects you, we will update this page and notify users by email before the change takes effect.
Where your data lives, and for how long
We currently store IdeaRubric data on infrastructure located in the United States.
We keep your data as long as your account is active. If you delete your account, we delete:
- Your user record (email, name, password hash)
- All your ideas, summaries, and full descriptions
- All evaluations, scores, and rankings
- Your credit transaction history
Deletion from our active systems is immediate and permanent. We don't maintain a "soft delete" or recovery mechanism, so make sure you've exported anything you want to keep first.
We retain a small audit log entry (record IDs and a timestamp of the deletion action) for accountability purposes. This log contains no idea content, names, or emails after a deletion.
Routine database backups are retained per our hosting provider's standard policy. Residual encrypted backup copies may persist temporarily until overwritten through routine backup rotation, after which your data is unrecoverable.
Security
- All connections to IdeaRubric are encrypted in transit with TLS.
- Passwords are stored as bcrypt hashes. We cannot retrieve your existing password. If you forget it, you can set a new one through the password-reset flow.
- We use parameterized database queries to prevent injection.
- Administrative actions (like adjusting your credit balance) are recorded in an internal audit trail.
While we take reasonable measures to protect your data, no system can guarantee absolute security. If you become aware of a vulnerability or unusual account activity, email us at hello@dualspark.io and we'll investigate.
Your rights
You can:
- See everything we have on you. Visit your account settings to view your profile, ideas, evaluations, and transactions.
- Export your data. Email us and we'll send a JSON archive within seven days.
- Correct your data. Edit your profile in settings, or email us.
- Delete your account. Email us and we'll wipe everything as described above.
- Object to specific uses. Some transactional emails (password resets, verification codes, important account notices) are necessary for the service to function. To stop receiving these, you'll need to delete your account.
We don't sell or share your data, so there is nothing to opt out of in the GDPR/CCPA "do not sell" sense.
Children
IdeaRubric is not intended for use by anyone under 16. We don't knowingly collect data from children. If you're under 16, please don't sign up.
Changes to this page
If we materially change how we collect or use data, we will:
- Update this page.
- Update the "Last updated" date at the top.
- Email everyone with an active account at least seven days before the change takes effect.
We will not retroactively use existing data in ways the version of this page in effect at the time of collection didn't permit.
Contact
IdeaRubric is operated by Dual Spark LLC (Mohamed Hamdouchi, Rafael Hernandez), United States.
For privacy questions or to exercise any right above:
- Email:
hello@dualspark.io - Subject line: anything starting with
Privacy:will get a faster response