Privacy Policy

Last updated: June 17, 2026

1. Who We Are

GetNoBurn is a business idea validation tool operated by Griff Edwards ("we," "us," "our"). We are based in the Caribbean and serve first-time entrepreneurs worldwide. Contact: griffiqueedwards@gmail.com.

2. What Data We Collect

Free tier: When you use our free viability score tool, we collect the business idea description and monthly budget you submit. This data is sent to our analysis API and to third-party data sources (YouTube Data API v3, Reddit public JSON, Google Trends, Product Hunt) to gather demand signals. We do not require account creation for the free tier.

Paid tiers (Pro, Pro+): When you subscribe, PayPal processes your payment. We receive your PayPal email address and subscription status. We do not see or store your payment card details.

Account data: If you create an account for analysis history storage (Pro+ feature), we store your email address, encrypted password, and your saved analyses. This data is stored in Supabase with encryption at rest.

3. How We Use Your Data

We use your submitted idea and budget solely to generate your validation analysis. The data is processed in real-time and is not used for any other purpose. We do not sell, rent, or share your data with third parties for marketing purposes.

Analysis results may be stored temporarily for caching purposes (maximum 24 hours) to improve service performance. Stored analyses (Pro+) are accessible only to you through your account.

4. Data Storage and Retention

Free tier analyses are ephemeral by default — they are not persisted after the analysis completes. We are working on optional account-based storage via Supabase for all tiers.

When launched, stored data will be encrypted using industry-standard encryption (AES-256 at rest, TLS 1.3 in transit). You can delete your account and all associated data at any time by contacting us.

PayPal retains your payment data according to their own privacy policy. We do not store payment card information on our servers.

5. Third-Party Services

We use the following third-party services to provide our analysis:

6. Cookies and Tracking

We do not use advertising cookies, tracking pixels, or third-party analytics scripts that collect personal data. We use essential cookies only for session management (keeping you logged in).

We use Vercel Speed Insights for anonymous performance monitoring. This collects page load timing data only — no personal information.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data and account.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing of your data.

To exercise any of these rights, email griffiqueedwards@gmail.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • All data in transit is encrypted using TLS 1.3
  • Stored data (Pro+ accounts) is encrypted at rest using AES-256
  • Access to data is restricted to authorized personnel only
  • Regular security audits of our infrastructure
  • No payment card data touches our servers (processed entirely by PayPal)

9. International Data Transfers

As a Caribbean-based service with users worldwide, your data may be processed in multiple jurisdictions. We use third-party services (Google, PayPal, OpenRouter) that may process data in the United States and other countries. These providers maintain appropriate safeguards including Standard Contractual Clauses (SCCs) and participation in the EU-US Data Privacy Framework where applicable.

10. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.

12. Contact

Privacy questions, data requests, or concerns? Email griffiqueedwards@gmail.com. We aim to respond within 48 hours.

This privacy policy is provided for informational purposes and does not constitute legal advice. We recommend consulting with a qualified attorney for specific legal guidance.