idea genesis

idea genesis

Privacy Policy

Your privacy and data security are our top priorities

Last updated: August 1, 2026

Information We Collect

  • Account Information: When you create an account or sign in with Google or Microsoft, we store your unique account identifier, authentication method, email address (when available), account status, and login timestamps.
  • Age Check: When you create an account on your own, we ask you to pick an age range once so we can confirm you are 13 or older. We don't save your answer.
  • Document Processing: We temporarily store document metadata and content for processing for 30 minutes after upload. URL-extracted text is stored for 60 minutes after extraction.
  • Audio and Video Files: When you upload audio or video files for transcription, we temporarily process these files to extract and transcribe the audio content. Raw audio and video files are deleted after processing is complete. Transcript text is saved in your activity history so you can view and reuse it unless you delete it or request account deletion.
  • Browser Extension: When you send a page to idea genesis with our browser extension, we receive that page's text — or only the part you selected — converted to plain text. We also receive the page's web address and its title. The text is stored as a document and handled exactly like one you upload yourself. It is tied to your account when you are signed in, and to your guest session when you are not.
  • When the Extension Looks at a Page: The extension does not run in the background and does not watch the sites you visit. Opening its window checks whether you have text selected, so it can offer to send only that selection. That check returns yes or no, not any of the page. The page's content is read only when you choose to send it.
  • Checking a Page Before You Send It: When you click to send a whole page, the extension first asks us whether it is one we can read better ourselves — a video page, for example, where we can reach the transcript. That check sends the page's web address and nothing else, and only when you click. We do not keep the address from the check itself. If the answer is yes, we fetch the page for you instead of the extension capturing it, and the result is handled as URL-extracted text. One consequence is worth stating plainly: an address can reach us for a page that never becomes a saved document. Sending only a selection skips this check completely.
  • Web Address of a Captured Page: We keep this in two places, and they are not kept for the same length of time. One copy is a record on your file history. If you are signed in, we keep that until you delete your account. If you are a guest, we delete it about 30 days after you capture the page. The other copy is written into the top of the captured document itself. That copy is part of the document's text, so it lasts as long as the document does. Because it is text, it can also travel: it may appear in a result you save or share, and a result you keep is kept on its own schedule rather than the document's. Before storing either copy, we remove the parts of an address that look like credentials: parameters whose name marks them as secret, and values written in well-known key or token formats. This is a filter, not a guarantee — an address can carry a secret in a form we do not recognise. Separately, we show the site name — for example, en.wikipedia.org — next to that document in your library, and we save the site name with your activity history, which is kept for up to one year for guests and signed-in users alike.
  • Activity History: We store a record of your interactions including prompts, AI-generated responses, timestamps, IP address, and the type of service used (vocabulary generation, structured data extraction, document Q&A, schema generation, text extraction, or audio transcription). Activity history is retained for all users, including guests, for up to one year. After that, records are automatically deleted.
  • Operational Logs: To run the platform reliably, we record limited service logs — things like which API route was hit, internal record IDs, the action you triggered, error categories, service health, and the outcome of sign-in or payment steps. Unlike your Activity History (described above), these operational logs are not meant to hold the content of your work — they are designed to exclude document text, prompts, AI responses, tokens, raw URLs, email addresses, and IP addresses, and we run an automated filter as an added safeguard that catches common sensitive patterns. Logs may include opaque identifiers such as payment processor object IDs and content or file hashes, which let us trace a request through our systems without identifying you. Our hosting provider also keeps separate access logs (your IP, the URL you requested, your browser, and the response status) for security and uptime monitoring.
  • Shared Results: When you share extraction results, we generate a unique sharing token and store the shared data so recipients can access it.
  • Phone Number for Text Messaging: If you give us your mobile number so we can reach you by text about a support request or your account, we store that number and our correspondence with you. You can stop the messages at any time by replying STOP, or ask us to delete the number by emailing support@ideagenesis.ai.
  • User Preferences: We store minimal preference data including theme settings, language preferences, notification settings, and ad-cookie choices saved in your browser.
  • Billing Information: For paid subscriptions, our payment processor (Stripe) securely handles your payment information. We only store your customer reference, subscription details, and plan information.

How We Use Your Information

  • Service Provision: To authenticate users, process documents, provide AI-powered vocabulary extraction, structured data extraction, document Q&A, schema generation, and audio/video transcription.
  • Activity History: Your prompts and responses are stored to provide access to your previous results, enforce rate limits (which vary by subscription tier), and prevent abuse.
  • Sharing: When you share extraction results, we provide access to the shared data via unique tokens. Recipients can view but not modify your results.
  • No AI Training by Us: We do not use your documents, prompts, or responses to train models operated by idea genesis. Your intellectual property remains yours.
  • No Sale of Account or Content Data: We do not sell your account data, document content, prompts, or responses. If you see ads, ad partners may process browser or device information as described in Cookies and Tracking.
  • Account Management: To maintain user accounts, process subscription payments, and provide customer support.
  • Service Improvement: We analyze aggregated, anonymized usage patterns to improve our platform.

Data Storage and Security

  • Document Retention: Documents are stored temporarily in secure cloud storage for 30 minutes after upload. URL-extracted text is stored temporarily for 60 minutes after extraction. The text of a page captured with the browser extension is stored on the same terms as any other document you upload. The web address it came from is retained in two places on two different schedules. As a record on your file history, it lasts until you delete your account if you are signed in, or 30 days from the capture if you are a guest. As part of the captured document's own text, it lasts as long as that document does — the same 30 minutes after upload as any other document. Anything you go on to save from that text, such as an extraction result, is kept on its own schedule. The site name is also saved with your activity history, which is kept for up to one year.
  • Audio and Video Processing: Uploaded audio and video files are processed in secure cloud infrastructure and deleted after transcription is complete. Transcript text is retained as part of your activity history.
  • Activity History Retention: Activity history is retained for up to one year so you can revisit past results, see your transcripts, and so we can enforce rate limits and detect abuse. Records older than one year are deleted automatically. When you delete your account, your account-linked activity history is removed immediately. We may keep limited pseudonymous security records for a short time after account deletion to prevent abuse.
  • Operational Log Retention: We keep production logs for up to 30 days — some service logs use shorter windows. Development and staging logs are kept for shorter periods. After that, our cloud provider deletes them automatically under its retention policy.
  • Shared Results: Shared extraction results are stored as long as the sharing token remains active.
  • Security Safeguards: We use reasonable technical and organizational safeguards designed to protect your information, including encryption, access controls, and secure authentication where appropriate for the type of data and system.
  • Breach Notification: If we confirm a personal data breach affecting your information, we will notify affected users as required by applicable law. For U.S. residents, our baseline is notice within 30 days of confirmation. Where GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a reportable breach and notify affected users without undue delay when GDPR Art. 34 requires it. To report a suspected vulnerability, email support@ideagenesis.ai with the subject prefix [SECURITY].
  • Payment Security: All payment processing is handled by our PCI DSS compliant payment processor, Stripe. We never store your credit card information directly.

Age Requirements and Children's Privacy

  • You must be at least 13 to create an idea genesis account on your own.
  • We don't knowingly collect personal information from children under 13 through accounts they create on their own. If we learn an account belongs to a child under 13, we delete the account and any data tied to it.
  • We're working on parent-managed and school-managed access for younger learners. It isn't available yet.
  • Parents or guardians who believe a child under 13 has shared personal information with us can contact support@ideagenesis.ai.

Data Sharing

  • No Sale of Account or Content Data: We do not sell your account data, document content, prompts, or responses. Free-tier ads may involve ad partners processing browser or device information as described in Cookies and Tracking.
  • Essential Service Providers: We share the minimum data needed with service providers that host the app, send account emails, process payments, extract URL content, and provide AI features. See our service provider list for provider details.
  • AI Processing: We use third-party AI providers for vocabulary definitions, structured data extraction, schema generation, Q&A responses, embeddings, and audio transcription. We send only the content needed to provide the feature you request. Current AI providers are listed on our sub-processor page.
  • SMS and Mobile Data: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. A phone number you give us for text messaging is used only to communicate with you directly.
  • Legal Requirements: We may disclose user data if required by U.S. law enforcement or legal process.

Your Rights and Choices

  • Data Access and Export: You can download a copy of your account data — including your account details, activity history, prompts and responses, uploaded documents, chats, and extraction results — as a downloadable archive from your profile page. The download link is available for a limited time after the archive is generated.
  • Data Deletion: You can permanently delete your account from your profile page. This removes your account data, activity history, prompts, responses, documents, chats, and schedules.
  • Guest Usage: You can use our service without creating an account. Guest extraction results are kept for up to 30 days so you can return to recent work from the same browser, then deleted. Activity logs are still collected as described above.
  • Subscription Management: You can cancel your subscription at any time through our billing portal. Your subscription remains active until the end of your billing cycle.

Cookies and Tracking

  • Authentication Storage: We store authentication tokens in your browser so you can stay signed in across tabs and browser restarts. These tokens are used only to maintain your session and are removed when you sign out, when the app detects an expired or invalid session, or when you clear site data.
  • Theme Preference Storage: We save your theme choice in your browser. If you choose light or dark mode, we also set a small first-party cookie for up to one year so pages load with the right colors before JavaScript runs. This does not identify you and can be cleared from your browser settings.
  • Age Check Cookie: If you use idea genesis without an account and confirm you are 13 or older, we save a small browser cookie so we don't ask again every time you do something. The cookie does not contain your age.
  • Guest Session Cookie: If you use idea genesis without an account, we set a strictly necessary first-party cookie for up to 30 days to keep your guest extraction, chat, and document workflows associated with this browser. The cookie contains a signed random identifier, not your document content, and can be cleared from your browser settings. Clearing the cookie means we can no longer reconnect this browser to existing guest results.
  • Browser Extension Storage: If you install our browser extension, it stores your capture mode and theme choice in the browser, and briefly holds the page you captured so it can hand it to an idea genesis tab. Current versions never handle your password and never receive a sign-in token — the extension opens an idea genesis tab and that tab uploads using the session it already has. Older versions briefly cached a short-lived access token read from a signed-in idea genesis tab so they could upload directly; they never asked for your password and never received the long-lived token used to renew your session. Removing the extension clears what it stored.
  • Sign-In Provider Cookies (AWS Cognito): When you sign in or create an account, we redirect you to AWS Cognito's hosted sign-in pages. AWS may set cookies on its own domain to complete the sign-in flow. These cookies are strictly necessary for authentication, are not accessible to idea genesis, and are governed by AWS's privacy notice.
  • Payment Processor Cookies (Stripe): When you start a paid subscription or manage billing, we redirect you to Stripe Checkout or the Stripe customer portal. Stripe may set cookies on its own domain to process payments, prevent fraud, and remember your billing session. These cookies are strictly necessary for payment, are not accessible to idea genesis, and are governed by Stripe's privacy notice.
  • No Product Analytics Tracking: We do not use Google Analytics or Facebook Pixel for product analytics.
  • Limited Advertising: Free-tier users and guests may see ads to support the service. We only load Adsterra ad scripts if you allow ad cookies. Adsterra may use cookies or similar browser identifiers for ad delivery, measurement, and fraud prevention. If you decline ad cookies, we show basic first-party ads instead. Paid subscribers enjoy an ad-free experience. We do not share account data or document content with advertising networks.

Updates to This Policy

  • Policy Changes: We may update this privacy policy from time to time to reflect changes in our practices or applicable laws.
  • Notification: We will notify users of significant changes through email or prominent notices on our platform.
  • Continued Use: Your continued use of our service after policy updates constitutes acceptance of the revised terms.

Questions About This Policy?

If you have any questions about this privacy policy, our data practices, or your privacy rights, please don't hesitate to contact us.

Contact Support