Plain-language summary — the short version of each section appears first.
1. What we collect
Your account details, whatever you tell Mason, your recordings, and basic usage data.
That means: account information (name, email, and the login identity you use); everything you provide in sessions with Mason (business idea, market, offers, pricing, plans, documents and notes); voice session and phone call recordings plus their transcripts; and usage data such as pages visited, features used, call minutes and error logs. We do not collect payment card numbers — Stripe does.
2. Why we hold it
To run the service you bought: interviews, Blueprint, checklist, brand assets, site preview, support.
Your business facts are Mason's memory. Without them he cannot pick up where you left off, write your Business Blueprint™ in your own words, or keep your Launch Checklist™ accurate. We also use aggregate, non-identifying usage data to fix bugs and improve the product.
3. Who processes it
A short list of vendors, each doing one job.
- Supabase — database, authentication and file storage (hosting).
- OpenAI — text and image generation (Blueprints, research drafts, logos and brand assets).
- Vapi and ElevenLabs — real-time voice sessions and phone calls with Mason, including speech-to-text and Mason's voice.
- Stripe — payments and subscription billing.
- Resend — transactional email.
Content you submit for AI generation — what you say in a session, what you type, the facts on file for your business — is transmitted to those AI and voice providers so they can produce the result. They process it on our behalf under their business terms and are not permitted to use it to train their models.
4. We never sell your data
No sale, no data brokers, no advertising networks.
We do not sell, rent or trade personal information or business information, and we do not share it for cross-context behavioral advertising. We disclose data only to the processors above, or when legally required by valid legal process.
5. Your data is private to your account
Other founders cannot see your business, recordings or brand assets.
Every record is scoped to your account at the database level, and generated files — logos, brand kits, exports — sit in private storage readable only through your account. Our team accesses your content only when you ask for support or when we must investigate abuse or a technical fault.
6. Deletion and export
Ask and we delete it; you can export your material any time.
You can delete individual recordings, transcripts and businesses from
Settings. To delete your whole account and everything in it, email
hello@businessrealm.org and we will remove it within 30 days, except records we must keep for tax and payment history.
7. Retention
We keep your content while your account is open.
Business data, recordings and transcripts stay until you delete them or close your account. Billing records are retained as long as tax and accounting rules require. Error and access logs are kept for a short operational window.
8. Cookies
Functional only — enough to keep you signed in.
We use a small number of cookies and local storage entries for authentication, session state and basic reliability. No advertising cookies, no third-party trackers following you around the web.
9. Children
BusinessRealm is for adults running or starting a business.
The service is not directed to anyone under 18 and we do not knowingly collect their information.
10. Changes and contact
Updates are posted here with a new date.