Privacy Policy

1. Information We Collect

We collect only what we need to provide the Service:

• Account information — your email address and name, provided when you sign up directly or via OAuth (Google).
• Prospect data — names, job titles, company names, and website URLs that you enter manually or upload via CSV. This data is used solely to generate icebreakers on your behalf.
• Usage data — which features you use, how many icebreakers you generate, and error events. This helps us improve the Service.
• Payment information — we do not store your payment details. All billing is handled by Lemon Squeezy; we only receive a confirmation of your subscription status.

2. How We Use Your Information

• To create and manage your account
• To generate AI icebreakers from the prospect data you provide
• To track credit usage and enforce plan limits
• To send transactional emails (e.g. billing receipts) — no marketing emails without consent
• To diagnose errors and improve reliability via aggregated analytics

3. Data Storage

Your account data and generated icebreakers are stored in a PostgreSQL database hosted by Supabase, located in the United States. Scraped website content used for AI context is cached for up to 24 hours to improve speed, then automatically deleted. We use industry-standard encryption in transit (TLS) and at rest.

4. Third-Party Services

We use the following third-party services to operate IcebreakerAI:

• Supabase — authentication and database hosting
• Google Gemini — AI generation. Prospect names, titles, and company context are sent to Google's API to generate icebreakers. Google's data use is governed by their API Terms of Service.
• Lemon Squeezy — payment processing and subscription management
• Upstash — Redis-based rate limiting and job queuing; no personal data is stored there beyond rate limit counters keyed by IP address
• PostHog — product analytics (pageviews, feature usage). Data is anonymized where possible and used only to improve the Service.
• Sentry — error tracking. Error reports may include stack traces and request context, but we configure Sentry to exclude sensitive user data.

5. Cookies

We use cookies minimally. An authentication session cookie is set when you log in to keep you signed in. We do not use advertising or cross-site tracking cookies. PostHog sets an anonymous analytics cookie to distinguish unique sessions; you can opt out via your browser settings or a global privacy signal.

6. Data Retention

Your account data and generated icebreakers are retained while your account is active. If you delete your account, your personal information and prospect data are deleted within 30 days. Aggregated, anonymized usage statistics may be retained indefinitely as they cannot be linked to you.

7. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Deletion — ask us to delete your account and all associated data
• Correction — update inaccurate information in your account settings
• Export — download your generated icebreakers as a CSV from your dashboard
• Objection — opt out of analytics tracking at any time

To exercise any of these rights, email us at hello@icebreakerAI.com. We will respond within 30 days.

8. Children's Privacy

IcebreakerAI is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We will notify active users of material changes via email. Continued use of the Service after changes are posted constitutes acceptance of the revised Policy.

10. Contact Information

If you have questions or concerns about this Privacy Policy, please contact us at hello@icebreakerAI.com. We take privacy seriously and will respond promptly.