Privacy Policy

BetaNest Effective Date: December 22, 2025 Last Updated: December 22, 2025

---

Introduction

Welcome to BetaNest ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains how BetaNest collects, uses, discloses, and protects information when you use our website at https://betanest.app and our AI-powered idea validation and product planning platform (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

---

Information We Collect

Information You Provide to Us

• Account Information: We use Clerk, a third-party authentication service, to manage user accounts. When you create an account, Clerk collects your name, email address, and password (which is securely hashed and never stored in plain text). We receive only your name and email from Clerk to operate your account.
• Profile Information: Optional information you may provide such as company name, role, and profile picture.
• Project Data: All ideas, concepts, validation scores, experiments, and other content you create within your projects. This data is stored securely in our database and is never shared with third parties without your explicit consent. Your project data remains private and under your control.
• Collaboration Data: When you invite other users to collaborate on your projects, we collect their email addresses for invitation purposes. You control who has access to your projects.
• Survey Responses (Optional): From time to time, we may ask you to participate in optional surveys to help us improve BetaNest. Participation is completely voluntary, and you can choose whether or not to respond.
• Communications: When you contact us for support or feedback, we collect the content of your messages.
• Waitlist Information: If you join our waitlist, we collect your email address and any optional information you provide.

Information Collected Automatically

• Usage Data: How you interact with our Service, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, device type, and unique device identifiers.
• Log Data: IP address, access times, referring URLs, and pages viewed.
• Cookies and Similar Technologies: We use cookies to maintain sessions, remember preferences, and analyze usage patterns.

Information from Third Parties

• Authentication Provider (Clerk): We use Clerk to handle all authentication and user management. Clerk securely processes your login credentials and provides us with your name and email address to operate your account. Clerk may also support social login options (e.g., Google), in which case we receive basic profile information as permitted by your settings with those providers.
• Analytics Services: We use third-party analytics to understand how our Service is used (usage patterns only, not your project content).

---

How We Use Your Information

We use the information we collect to:

• Provide and Improve the Service: Operate, maintain, and enhance BetaNest's features and functionality.
• Store Your Project Data Securely: Keep your ideas, validation scores, and project content safe in our database. We never share your project data with third parties.
• Enable Collaboration: Allow you to invite other users to collaborate on your projects (only when you choose to do so).
• Personalize Your Experience: Tailor content, recommendations, and AI-generated insights to your needs based on your usage patterns.
• Communicate with You: Send transactional emails (account verification, password resets, notifications), respond to inquiries, and provide customer support.
• Send Product Updates: With your consent, send newsletters, feature announcements, and early access invitations.
• Conduct Optional Research: Occasionally invite you to participate in voluntary surveys to help us improve the Service. You always have the choice to decline.
• Ensure Security: Detect, prevent, and address fraud, abuse, and security issues.
• Comply with Legal Obligations: Meet applicable legal requirements and enforce our terms.
• Analyze Usage Patterns: Understand how features are used (not what content you create) to improve the Service and develop new features.

---

Email Communications

We use Amazon Simple Email Service (SES) to send emails. The types of emails we send include:

Email Type	Purpose	Opt-Out Available
Transactional	Account verification, password resets, security alerts	No (required for service)
Notifications	Experiment updates, collaboration invites, validation results	Yes (manage in settings)
Marketing	Product updates, newsletters, early access announcements	Yes (unsubscribe link)

Your Email Preferences

• You can manage your email preferences in your account settings.
• All marketing emails include an unsubscribe link.
• You cannot opt out of essential transactional emails required for account security and service operation.

Bounce and Complaint Handling

We monitor email deliverability and automatically:

• Remove invalid email addresses from our sending list
• Honor unsubscribe and spam complaint requests immediately

---

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with third-party companies that help us operate our Service:

Provider	Purpose	Data Shared
Amazon Web Services (AWS)	Hosting infrastructure, database storage, email delivery	Account data, project data (encrypted), usage data
Clerk	Authentication and user management	Email, name, hashed password
Analytics providers	Usage pattern analysis	Anonymized usage data (no project content)

With Your Consent

We share your project data only when you explicitly choose to do so:

• Collaboration: When you invite other users to join your projects, those invited users can view and edit the project content you've shared with them. You control who has access to your projects.
• Other Sharing: Any other sharing of your information occurs only with your explicit authorization.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and property of BetaNest, our users, or others.

Business Transfers

If BetaNest is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

---

Data Security

We take the security of your project data and personal information very seriously. We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest in our database.
• Secure Authentication: We use Clerk, a SOC 2 compliant authentication provider, to handle all login credentials. Passwords are securely hashed and never stored in plain text.
• Access Controls: Strict access controls ensure that only authorized personnel can access systems, and only on a need-to-know basis. Your project data is isolated and accessible only to you and users you explicitly invite.
• Database Security: Your project data is stored in our secure database with multiple layers of protection. We never share your project content with third parties.
• Infrastructure: Hosted on secure AWS infrastructure with enterprise-grade security controls.
• Regular Monitoring: Continuous security monitoring and periodic vulnerability assessments.

While we implement robust security measures, no method of transmission or storage is 100% secure. Please contact us immediately at security@betanest.app if you suspect any unauthorized access to your account.

---

Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our Service through aggregated, anonymized analysis

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

---

Your Rights and Choices

Depending on your location, you may have the following rights:

For All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Data Portability: Request your data in a portable format.
• Withdraw Consent: Withdraw consent for processing where applicable.
• Opt-Out: Unsubscribe from marketing communications.

For European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR including:

• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on:

• Contract performance (providing the Service)
• Legitimate interests (improving the Service, security)
• Consent (marketing communications)
• Legal obligations

For California Users (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information (we do not sell data)
• Access and request deletion of personal information
• Non-discrimination for exercising privacy rights

Exercising Your Rights

To exercise any of these rights, please contact us at: privacy@betanest.app

We will respond to your request within 30 days.

---

Cookies and Tracking Technologies

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential	Authentication, security, core functionality	Session
Functional	Remember preferences, settings	Persistent
Analytics	Understand usage patterns, improve Service	Persistent

Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

---

Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

---

Children's Privacy

BetaNest is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

---

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

We encourage you to review this policy periodically.

---

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

BetaNest Email: privacy@betanest.app Website: https://betanest.app

For data protection inquiries in the EU, you may also contact our Data Protection contact at the email above.

---

Summary

What We Do	What We Don't Do
✅ Use Clerk for secure authentication	❌ Sell your personal information
✅ Keep your project data private and secure	❌ Share your project data with third parties
✅ Let you control who accesses your projects	❌ Access your content without authorization
✅ Use industry-standard encryption	❌ Store passwords in plain text
✅ Make surveys optional	❌ Force you to participate in research
✅ Honor your privacy rights	❌ Send spam or unwanted emails
✅ Be transparent about data practices	❌ Collect data from children
✅ Let you control your data	❌ Retain data longer than necessary

---

This Privacy Policy is provided for informational purposes. We recommend consulting with a legal professional to ensure compliance with all applicable laws and regulations.