This Privacy Policy explains how Niche Busters ("we", "us") collects, uses, and protects information when you use our Service. We are committed to transparency and to only collecting what we need to run the product.
1. Information We Collect
You provide directly
- Account data: email, name, password hash, profile preferences.
- Billing data: handled by Stripe; we receive subscription status, plan tier, and the last 4 digits of your card. We never store full card numbers.
- Inputs: niches, prompts, URLs, and other content you submit to generate reports.
- Communications: support emails and feedback.
Collected automatically
- Usage data: pages viewed, features used, quota consumption, timestamps.
- Device & log data: IP, browser, OS, referrer, error logs.
- Cookies: see our Cookie Policy.
From third parties
- Authentication providers (e.g., Google OAuth) — basic profile + email.
- Public platform APIs (YouTube, Reddit, etc.) — public content surfaced inside reports. We do not collect private user data from these platforms.
2. How We Use Information
- Provide, operate, and secure the Service.
- Generate reports, calendars, and AI outputs you request.
- Process payments and manage subscriptions.
- Send transactional emails (receipts, account, plan changes, security alerts).
- Send product updates (you can opt out at any time).
- Detect abuse, prevent fraud, and enforce our Terms.
- Improve the Service using aggregated, de-identified analytics.
3. Legal Bases (EEA / UK)
Where GDPR applies, we process personal data under: (a) contract — to deliver the Service you subscribed to; (b) legitimate interest — to secure and improve the product; (c) consent — for marketing emails and non-essential cookies; (d) legal obligation — for tax and compliance.
4. Sharing
We share data only with the following categories of processors:
- Infrastructure & database: our backend provider (hosting, auth, storage).
- Payments: Stripe.
- AI providers: Lovable AI Gateway and underlying model vendors used to generate reports.
- Email delivery: our transactional email provider.
- Analytics & error monitoring: privacy-respecting analytics services.
We do not sell or rent personal data. We may disclose data if legally required (subpoena, court order) or to protect rights, safety, and security.
5. AI Processing
Inputs you submit may be sent to AI model providers to generate Output. Our providers are bound by enterprise agreements and do not train their public models on your inputs. Do not submit information you would not want processed by an AI system.
6. Data Retention
- Account data: retained while your account is active and up to 90 days after deletion.
- Reports & Outputs: retained while your subscription is active; you may delete them at any time.
- Billing records: retained as required by tax law (typically 7 years).
- Logs: typically 30–90 days.
7. Your Rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, etc.), you may have rights to:
- Access, correct, or delete your personal data.
- Port your data to another provider.
- Object to or restrict processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
- (California residents) Opt out of "sharing" for cross-context advertising — we do not engage in such sharing.
To exercise rights, email hello@nichebusters.net.
8. Security
We use encryption in transit (TLS), encryption at rest, row-level security on per-user data, hashed credentials, and least-privilege access. No system is 100% secure; report vulnerabilities to hello@nichebusters.net.
9. International Transfers
Your data may be processed in countries other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
10. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
We may update this Policy. Material changes will be announced via email or in-app. The "Last updated" date above reflects the most recent revision.
12. Contact
Data controller: TLAC NOW LLC, 3245 Main St. Ste.235 #304, Frisco, TX 75034. Contact: hello@nichebusters.net.
