Legal

Privacy Policy

Last updated: October 12, 2026

Plain-language summary — the short version of each section appears first.

1. What we collect

Your account details, whatever you tell Mason, your recordings, and basic usage data.

That means: account information (name, email, and the login identity you use); everything you provide in sessions with Mason (business idea, market, offers, pricing, plans, documents and notes); voice session and phone call recordings plus their transcripts; and usage data such as pages visited, features used, call minutes and error logs. We do not collect payment card numbers — Stripe does.

2. Why we hold it

To run the service you bought: interviews, Blueprint, checklist, brand assets, site preview, support.

Your business facts are Mason's memory. Without them he cannot pick up where you left off, write your Business Blueprint™ in your own words, or keep your Launch Checklist™ accurate. We also use aggregate, non-identifying usage data to fix bugs and improve the product.

3. Who processes it

A short list of vendors, each doing one job.

Supabase — database, authentication and file storage (hosting).
OpenAI — text and image generation (Blueprints, research drafts, logos and brand assets).
Vapi and ElevenLabs — real-time voice sessions and phone calls with Mason, including speech-to-text and Mason's voice.
Stripe — payments and subscription billing.
Resend — transactional email.

Content you submit for AI generation — what you say in a session, what you type, the facts on file for your business — is transmitted to those AI and voice providers so they can produce the result. They process it on our behalf under their business terms and are not permitted to use it to train their models.

4. We never sell your data

No sale, no data brokers, no advertising networks.

We do not sell, rent or trade personal information or business information, and we do not share it for cross-context behavioral advertising. We disclose data only to the processors above, or when legally required by valid legal process.

5. Your data is private to your account

Other founders cannot see your business, recordings or brand assets.

Every record is scoped to your account at the database level, and generated files — logos, brand kits, exports — sit in private storage readable only through your account. Our team accesses your content only when you ask for support or when we must investigate abuse or a technical fault.

6. Deletion and export

Ask and we delete it; you can export your material any time.

You can delete individual recordings, transcripts and businesses from Settings. To delete your whole account and everything in it, email hello@businessrealm.org and we will remove it within 30 days, except records we must keep for tax and payment history.

7. Retention

We keep your content while your account is open.

Business data, recordings and transcripts stay until you delete them or close your account. Billing records are retained as long as tax and accounting rules require. Error and access logs are kept for a short operational window.

8. Cookies and browser storage

Functional storage is always on; referral attribution is optional and off by default.

Functional (always on): sign-in session storage in your browser, a record of your privacy choices, your session-room preferences (such as chosen camera and microphone), a sidebar layout cookie, and storage used by our payment and voice providers when you use those features.

Referral attribution (optional): if you arrive through a partner link and choose Accept, we keep a first-party rp_ref cookie for up to 90 days so the partner who recommended us can be credited. It is not set unless you opt in, and it is never set when your browser sends a Global Privacy Control signal. When you arrive through a partner link, we record the visit with our partner program unless your browser sends that signal.

We do not use advertising pixels, analytics trackers or session-replay tools. You can change or withdraw your choice at any time from "Privacy choices" in the site footer.

9. Children

BusinessRealm is for adults running or starting a business.

The service is not directed to anyone under 18 and we do not knowingly collect their information.

10. Changes and contact

Updates are posted here with a new date.

Material changes are also emailed. Questions, requests or complaints: hello@businessrealm.org.