This Privacy Policy explains how Niche Busters ("we", "us") collects, uses, and protects information when you use our Service. We are committed to transparency and to only collecting what we need to run the product.
1. Information We Collect
You provide directly
- Account data: email, name, password hash, profile preferences.
- Billing data: handled by Stripe; we receive subscription status, plan tier, and the last 4 digits of your card. We never store full card numbers.
- Inputs: niches, prompts, URLs, and other content you submit to generate reports.
- Intake data: information you enter into intake wizards (Quick Reports, Niche Scans, Business Impact, Brand Truth, Trust & Cultural, Commerce, Product Survival Scan™, BUYERFIT™, and the Vendor / Organizer Event portal) — including business details, offers, pricing, margins, unit costs, inventory commitments, booth fees, event details, audience and segment assumptions, marketing information, and evidence you choose to upload.
- Product Survival Scan™: product, cost, margin, inventory, and comparable-listing details you submit are used to produce your report and are retained with the scan. Private business figures (cost, margin, inventory) are never shown in samples, demos, shared snapshots, or competitor comparisons.
- Cross-Cultural Revenue Gap Analyzer™ and Community Trust & Retention Analyzer™ (internal, admin-only): analyses are created and reviewed by our team from business-level information, publicly observable signals, and evidence sources with dates and reliability ratings. We do not collect protected-characteristic data about individual customers for these tools, and PDF exports — available only for admin-approved analyses — record the methodology version, report status, and export metadata.
- BUYERFIT™ CSV mapping: when you use Verify mode, your customer or order CSV is parsed in your browser only. We store the column mapping you choose, row counts, and data-quality metrics — we do not upload or store your raw customer rows, names, emails, or order records.
- Demo event data: name, email, business name, and optional Live Gap Snapshot application details you submit when registering for a demo event.
- Third-party information you supply: details you choose to enter about competitors, event organizers, venues, or prospects. You are responsible for ensuring you may lawfully submit it, and you must not submit sensitive personal data, health information, or confidential third-party records.
- Communications: support emails and feedback.
Collected automatically
- Usage data: pages viewed, features used, quota consumption, timestamps.
- Device & log data: IP, browser, OS, referrer, error logs.
- Cookies: see our Cookie Policy.
From third parties
- Authentication providers (e.g., Google OAuth) — basic profile + email.
- Public platform APIs (YouTube, Reddit, etc.) — public content surfaced inside reports. We do not collect private user data from these platforms.
2. How We Use Information
- Provide, operate, and secure the Service.
- Generate reports, calendars, and AI outputs you request.
- Process payments and manage subscriptions.
- Send transactional emails (receipts, account, plan changes, security alerts, intake confirmations, report-ready notifications, demo event RSVPs, and follow-up reminders).
- Send product updates (you can opt out at any time).
- Detect abuse, prevent fraud, and enforce our Terms.
- Improve the Service using aggregated, de-identified analytics.
3. Legal Bases (EEA / UK)
Where GDPR applies, we process personal data under: (a) contract — to deliver the Service you subscribed to; (b) legitimate interest — to secure and improve the product; (c) consent — for marketing emails and non-essential cookies; (d) legal obligation — for tax and compliance.
4. Sharing
We share data only with the following categories of processors:
- Infrastructure & database: our backend provider (hosting, auth, storage).
- Payments: Stripe.
- AI providers: Lovable AI Gateway and underlying model vendors used to generate reports.
- Email delivery: our transactional email provider.
- Analytics & error monitoring: privacy-respecting analytics services.
We do not sell or rent personal data. We may disclose data if legally required (subpoena, court order) or to protect rights, safety, and security.
5. AI Processing
Inputs you submit may be sent to AI model providers to generate Output. Our providers are bound by enterprise agreements and do not train their public models on your inputs. Do not submit information you would not want processed by an AI system.
6. Data Retention
- Account data: retained while your account is active and up to 90 days after deletion.
- Reports & Outputs: retained while your subscription is active; you may delete them at any time.
- One-time purchased reports (Quick Reports, Vendor Event, Commerce reports) and their intake submissions: retained for 24 months so you can re-download them, unless you request deletion sooner.
- Demo event registrations: retained for 24 months after the event date for follow-up and analytics, unless you request deletion sooner.
- Billing records: retained as required by tax law (typically 7 years).
- Logs: typically 30–90 days.
7. Your Rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, etc.), you may have rights to:
- Access, correct, or delete your personal data.
- Port your data to another provider.
- Object to or restrict processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
- (California residents) Opt out of "sharing" for cross-context advertising — we do not engage in such sharing.
To exercise rights, email info@getnichebusters.com.
8. Security
We use encryption in transit (TLS), encryption at rest, row-level security on per-user data, hashed credentials, and least-privilege access. No system is 100% secure; report vulnerabilities to info@getnichebusters.com.
9. International Transfers
Your data may be processed in countries other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
10. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
We may update this Policy. Material changes will be announced via email or in-app. The "Last updated" date above reflects the most recent revision.
12. Contact
Data controller: NICHE BUSTERS, 3245 Main St. Ste.235 #304, Frisco, TX 75034. Contact: info@getnichebusters.com.