Privacy Policy

Who we are

GapTheory is a market intelligence tool that helps founders find and validate opportunities using evidence from public, licensed sources. This policy explains what we collect when you use our website and product, why we collect it, and the choices you have.

Information we collect

We collect only what we need to run the product:

• Account information: your email address, and a password managed securely by our authentication provider. We never see your password in plain text.
• Beta application answers: if you apply for the beta, the responses you provide (what you are building, your role, your biggest problem, and any link you share).
• Ideas you submit: when you validate an idea, we store the text you enter so we can prevent abuse and understand overall demand. This is described in more detail below.
• Usage information: basic technical data such as IP address and interactions, used to keep the service secure and reliable.
• Payment information: if and when you purchase a paid plan, payments are processed by Stripe. We do not store your full card details on our servers.

How we use your information

• To provide the product: create your account, match your ideas against our database, and show you results.
• To review beta applications and decide who to invite.
• To communicate with you, such as sending an invite link, account emails, or a weekly digest you have opted into.
• To keep the service secure, prevent abuse, and enforce rate limits.
• To understand overall demand and improve the product in aggregate.

Your ideas stay yours

The ideas you type to validate are used only to match against our gap database and, in aggregate, to understand demand. We keep a private record to prevent abuse, but we do not publish your ideas, share them with other users, sell them, or use them to train machine learning models.

Service providers we use

We rely on a small set of trusted providers to run GapTheory. Each processes data only as needed to provide their service:

• Supabase — database and authentication.
• Vercel — website and application hosting.
• Resend — transactional and digest emails.
• Stripe — payment processing (only if you purchase a plan).
• OpenAI — AI processing used in our data pipeline. We do not send your account credentials to these providers.

Where our market data comes from

The market signals shown in GapTheory come from official, licensed, or publicly documented sources such as app store reviews, developer feature requests, public technical question-and-answer sites, and founder discussion communities. We do not build our product on gray-area scraping.

Cookies

We use cookies that are necessary for the product to work, primarily to keep you signed in. We do not use advertising cookies.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. You can ask us to delete your account and associated personal data at any time using the contact details below.

IP addresses used for rate limiting are automatically removed after 90 days.

Your rights

You can request access to the personal data we hold about you, ask us to correct it, or ask us to delete it. To make a request, email us at the address below and we will respond within a reasonable time.

Security

We take reasonable measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to promptly address any issues.

Children

GapTheory is intended for professional use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you.

Contact us

If you have questions about this policy or your data, email us at hello@gaptheory.io.