Privacy Policy

Who is responsible for your information

CouldThisWork is a product and service operated by Conatus LLC, a Virginia limited liability company. This policy explains how Conatus LLC collects, uses, shares, and protects information when you use CouldThisWork.

What we collect

When you sign in with Google or email, we receive basic account information such as your email address, a unique account identifier, and—when provided by Google—your name and profile image. We do not receive your Google password.

We also store the information you choose to add to CouldThisWork, including business ideas, workspace content, saved names, conversations, files you upload to an idea or attach to messages, changes you approve, research reports generated for your ideas, and any answers you give to our optional signup survey about how you use AI and what you hope to accomplish.

If you purchase a subscription or make an optional support contribution, Stripe processes your payment information. We receive and store limited billing records needed to operate your account and reconcile payments, such as Stripe customer and transaction identifiers, subscription status, billing period, amount, currency, and payment status. We do not receive or store your full card number.

We may collect basic technical and usage information, such as pages visited, feature usage, error details, AI request counts, and optional email-reminder preferences and delivery status, to operate, secure, and improve the service.

How we use your information

• To create and secure your account.
• To save your ideas and restore your workspace across sessions.
• To provide relevant Thinking Partner responses and suggestions.
• To process subscriptions and support contributions, provide paid features, and maintain billing records.
• To enforce usage limits, diagnose problems, and protect the service.
• To communicate important service or policy changes.
• When you opt in, to send a brief account-level email reminding you about ideas you saved.

AI processing

When you use the Thinking Partner, your message, Library files you choose for that message, and relevant parts of the current idea may be sent to our AI provider, OpenAI, to generate a response. Supported files may include images, documents, and basic spreadsheet data. Files stored in Library are not sent to OpenAI merely because they are saved there. When your question depends on current public information, OpenAI may also use relevant search terms to retrieve public web results.

When you ask CouldThisWork to generate a research report, relevant workspace content and recent conversation summaries for that idea are sent to OpenAI, which may search public web sources to produce the report. The resulting report, its cited source list, and a private PDF are stored with your account. Avoid entering confidential, regulated, or highly sensitive personal information that is not necessary for exploring your idea.

AI suggestions are not saved into your structured workspace unless you explicitly approve them.

Service providers

We rely on a small number of providers to run CouldThisWork:

• Supabase for authentication and data storage.
• Cloudflare Turnstile for preventing automated signup abuse.
• Vercel for application hosting and basic product analytics.
• OpenAI for Thinking Partner responses and requested research reports.
• Google for optional account sign-in.
• Stripe for subscription billing, one-time support payments, fraud prevention, and payment records.
• Resend for transactional messages and optional idea reminders you request.

These providers process information on our behalf under their own privacy and security terms.

Sharing and selling

We do not sell your personal information. We share information only with the service providers needed to operate CouldThisWork, when you direct us to, or when required to comply with law or protect people and the service.

Retention and your choices

We keep account and workspace information while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, meet legal obligations, and maintain security. You may stop using the service at any time and may request access to or deletion of your account information.

Some billing, transaction, and email-delivery records may be retained after account deletion when reasonably necessary for accounting, fraud prevention, deliverability, dispute resolution, or legal compliance.

Idea reminders are optional. You can change their frequency or turn them off from Account settings, or unsubscribe using the link included in every reminder. Turning off reminders does not affect essential security, billing, or support messages.

Demo changes are temporary and are not written into another user’s account.

Security

We use reasonable technical and organizational safeguards, including authenticated access and user-level data controls. No online service can guarantee absolute security, so please use care when deciding what to store.

Children

CouldThisWork is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes and questions

We may update this policy as the product evolves. We will update the date above and provide additional notice when a change is material.

For privacy questions or requests to access or delete your information, email support@couldthis.work.