Privacy Policy

Effective date: July 9, 2026

This Privacy Policy explains how Niche Locate (“Niche Locate,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website and services (the “Service”), including the niche discovery, scoring, and validation tools available through our app. By using the Service, you agree to the practices described here.

1. Information we collect

Account information. When you create an account we collect your email address. If you sign in with Google, we receive your email address and basic profile information from Google. We do not collect or store passwords — authentication is passwordless (magic link) or via Google OAuth.

Content you submit. When you run a niche search, we collect the answers you provide (e.g., your interests, skills, budget, weekly hours, and business goals) and the projects, notes, and reports you save.

Billing information. If you subscribe to a paid plan, payment is processed by Stripe. We receive and store your subscription status, plan, and a Stripe customer reference — we never see or store your full card number.

Usage and technical data. Like most web services, we automatically receive standard technical data such as IP address, browser type, and pages visited, and we use strictly necessary cookies to keep you signed in.

2. How we use your information

To provide the Service — including generating niche recommendations, scores, and reports from the inputs you submit.
To manage your account, free-tier usage limits, and paid subscriptions.
To send transactional email (e.g., sign-in magic links). We do not send marketing email without your consent.
To secure, maintain, debug, and improve the Service, including enforcing rate limits and preventing abuse.
To comply with legal obligations.

3. AI processing

Niche Locate's recommendations and reports are generated using third-party artificial intelligence services (currently Anthropic's Claude models). The inputs you submit for a search (such as your interests, skills, and goals) are sent to our AI provider to generate your results. We do not send your email address, payment details, or account credentials to the AI provider. AI-generated outputs are stored with your saved projects so you can access them later.

4. How we share information

We do not sell your personal information. We share information only with:

Service providers that help us operate the Service: Supabase (database, authentication, and file storage), Stripe (payments and subscription management), Anthropic (AI generation), and our hosting provider (Vercel). Each receives only what it needs to perform its function.
Legal authorities, if required by law, subpoena, or to protect our rights, users, or the public.
A successor entity, in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply until amended.

5. Data retention

We retain your account data and saved projects for as long as your account is active. If you delete a project, it is removed from your visible workspace immediately and purged from our systems on a rolling basis. If you ask us to delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain records (e.g., billing records for tax and accounting purposes).

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights by emailing us at hello@nichelocate.app. We respond to all verified requests within the timeframes required by applicable law (including the GDPR and CCPA, where they apply).

7. Security

We use industry-standard safeguards to protect your data, including encrypted connections (HTTPS), row-level security on our database, and least-privilege access controls that restrict which systems can read or write your data. No method of transmission or storage is 100% secure, but we work to protect your information against unauthorized access, alteration, and loss.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. International transfers

Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you by email or in the app. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Questions or requests about this policy: hello@nichelocate.app.