The capitalised terms used in this Privacy Policy have the same meanings as in Our Terms of Service, unless expressly stated otherwise here.

We see universal human rights not just as principles, but as the foundation for Edventures: the right to work and build something of Your own, the right to learn, and the right to a private life that You control. The way We handle personal data in Edventures is designed to uphold those rights in every interaction You have with Our Services. To ensure that all Our Users' privacy is treated equal, We apply the principles of the EU General Data Protection Regulation (GDPR) to all Users of the Services, wherever You are located, to the extent this is allowed under local law.

When You use the Services, You share information so that We can provide features that help You learn and grow as an entrepreneur. Some of this information will be personal data about You, and some will relate to Your projects and business ideas. It is important that You understand what We collect, why We collect it and how We use it, so that You can make informed choices about using the Services.

This Privacy Policy explains what categories of personal data We collect from You, for which purposes and on which legal bases We process that data, and how We protect and store it. It also sets out Your privacy and data protection rights and how You can exercise them. By accessing or using the Services, You acknowledge that You have read this Privacy Policy and understand that We will collect, use and share Your personal data as described here, in line with applicable law. Your use of the Services is at all times subject to Our Terms of Service, which incorporate this Privacy Policy.

Developing a business idea often involves sharing sensitive details, and Our Services are designed to support that work. You remain the sole owner of any business ideas, concepts or related materials You submit or develop through the Services, and Edventures does not claim any ownership rights in Your business ideas or projects. We will not use, copy or commercialise Your ideas for Our own benefit or with the purpose of executing Your idea Ourselves; Our business is to support You in developing and executing Your idea, not to compete with it.

For the purposes of this Privacy Policy, We do not treat Your business idea, on its own, as personal data under applicable data protection law, and it is therefore not protected by GDPR and its related rights. Business ideas are frequently non unique and may overlap with concepts independently developed by other Entrepreneurs or third parties, and the Services do not provide any exclusivity or restriction on others pursuing similar or competing ideas in parallel to You. We do not monitor or control the ideas shared by Entrepreneurs, and We do not guarantee that any idea, or elements of it, is new, unique or legally protectable. To the extent You include information in Your idea that identifies You as an individual, that personal data is handled in accordance with this Privacy Policy, and You remain responsible for assessing what information You consider confidential or legally protectable and for taking any steps needed to secure intellectual property rights.

We only collect personal information that You intentionally provide through the Services, such as Your profile information, business idea(s) and goal(s), as well as certain technical and usage information from the Devices You use to access the Services. We do this to offer You the best possible Services to support You and Your venture, and to improve Your chances of creating a viable business. We rely on You to ensure that Your personal information is complete, true, accurate and current so that We can provide You with the best possible experience of the Services.

For informational purposes, personal data is any information that, directly or indirectly, relates to and can identify You as an individual. This includes, for example, identifiers such as names and email addresses as well as online identifiers such as IP addresses and device identifiers when they can reasonably be linked to You. Processing personal data means any operation performed on personal data, whether or not by automated means, such as collection, recording, organisation, storage, analysis, use, disclosure or deletion.

Information provided by You

There are several areas on the Services where You may be asked to enter both personal and non-personal information. To use the Services, You'll need to provide certain personal information which may include, without limitation, Your name, password, address and email address. We may also collect certain sensitive information from You including date of birth, gender, geographic location, business idea(s) and personal needs, interests and goals as well as other User Generated Content from conversations with Our Services, so that We can provide You with the best experience possible.

Information automatically collected

In order to ensure that We are providing the best possible experience through the Services, We collect and track certain User and customer information, such as IP address, geographic location (indicated by the IP address as well as manual location information You provide to Us), and Device information (for example browser type, operating system and device identifiers). We may combine this information across different Devices You use. This information helps Us operate, secure and improve the Services, understand how Users engage with features and conduct user research across Our customer demographics, interests and behaviour.

Current cookies and similar technologies

At the time of this Privacy Policy, We do not use cookies or similar tracking technologies on the Services for analytics or advertising purposes, and any personal data We process is provided directly by You or generated through Your use of the Services. If this changes in the future, We will update this Privacy Policy and, where required, ask for Your consent before placing or reading non essential cookies or similar technologies on Your Device.

Future use of cookies, analytics and tracking

In the future, We may use cookies, software development kits (SDKs) and similar technologies to collect usage information about how the Services are used, such as pages viewed, features used, clickstream data and engagement with content. We would use this information to operate, secure and improve the Services, develop new features and understand which parts of the Services are most useful. Where required by law, We will only use non essential cookies or similar technologies (for example for product analytics tools such as event based analytics) with Your consent, and You will be able to withdraw Your consent at any time through the mechanisms We provide.

We may also use server logs and similar technologies to record technical information about visits to the Services, including IP address (if publicly available), browser type, operating system and the date and time of access. These logs are maintained on Our servers and used for security, troubleshooting and aggregated statistics.

From third party sources

If a User connects to the Services using credentials from a third party, for example Google, Facebook or LinkedIn, the User will provide Us with authentication information such as encrypted access credentials. We may also collect other information made available from the User's third party account, including, for example, name, profile picture and email address, in accordance with the privacy settings and permissions the User has agreed with that third party. The third party's own privacy policy governs its use of that information, and We treat the information We receive from them as personal data in accordance with this Privacy Policy.

We only process personal information when We have a valid legal ground to do so under applicable data protection law. Depending on the context, We rely on one or more of the following grounds:

• Performance of Our Agreement with You: We process Your personal information when it is necessary to enter into and perform the Agreement You have with Us, for example to register and maintain Your account, give You access to the Services, enable advisory guidance and help, handle support issues, ensure that the Services perform as intended and respond to Your requests.
• Compliance with legal obligations: We may process certain personal information when We need to comply with legal obligations, for example relating to tax, accounting, fraud prevention or responding to lawful requests from public authorities.
• Legitimate interests: We process personal information where it is necessary for purposes that are in Our legitimate interests, or those of a third party, and where these interests are not overridden by Your interests or fundamental rights and freedoms. This includes, for example, analysing and improving the Services, maintaining and enhancing security, sending You notifications about changes or updates to the Services, and using information for administrative or legal purposes.
• Consent: In some situations, We process personal information based on Your consent, for example where We ask Your permission to use certain optional features or communications. Where We rely on consent, You have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If We process Your personal information on the basis of legitimate interests (Ours or a third party's), We do so only after having assessed that those interests are not outweighed by Your rights and expectations, and You have the right to object to such processing as described in the "Your rights" section.

If You do not provide personal information that We need to fulfil Our legal obligations or to perform the Agreement, We may not be able to enter into or continue the Agreement with You. For example, We require certain personal information to register and maintain Your account, to offer guiding entrepreneurship information and support, to help with support issues and to ensure that the Services perform as intended.

We use personal information to, without limitation, provide, operate, support and improve the Services, to ensure that You get the best experience possible. This processing is necessary for the performance of the Agreement We have with You, as well as to serve Our legitimate interest, and aims to benefit You in both the long and short term.

Categories of recipients of Your personal information

We might share Your personal information with:

• other Users where You choose to collaborate with them on a business idea or project through the Services
• service providers that help Us operate the Services (for example, hosting, customer support and other technical providers that act on Our instructions)
• public authorities, courts or other third parties when We are required to do so by law or when this is necessary to protect Our legal rights or the rights of others.

To communicate with You

We use the data We collect to deliver and personalise Our communications with You, for example to contact You by email or other means of electronic communication (including through the Services) to inform You about feature, security and/or Software updates or changes to the Services. This processing is based on Our legitimate interests in keeping You informed about the Services You use, and, where required by law for certain types of messages, on Your consent or applicable opt-in preferences.

For Entrepreneurs

When You choose to collaborate with other Users on a business idea or project through the Services, for example by inviting team members to a shared business project, certain parts of Your User Generated Content will be visible to those Users so that You can collaborate through the Services. This sharing of personal information only happens where You have joined or created a shared project, and is necessary to perform the Agreement We have with You and to provide the collaboration features of the Services. We do not sell Your personal data or conversation history to any third party.

To tailor the Services

What makes Our Services unique is that We offer tailored information about entrepreneurship topics, to support Your business idea(s) and project(s). For this purpose, We need personal information from You about Your business idea(s), need(s) and goal(s) in combination with Your User Generated Content, in order to perform the Agreement We have with You, as well as to serve Our legitimate interest to provide You the best possible experience of the Services.

To improve the Services

We use aggregated and, where possible, anonymised information to make the Services better, to conduct research and for statistical and analytical purposes, as well as for marketing and sales purposes. For these purposes, We may classify and categorise Users at a group level, for example by age range, gender, geographic location, business idea(s) and business needs, to create general personas and understand how different User groups use the Services. This helps Us meet the requests, inquiries and expectations of Our Users and is in Our legitimate interest to improve the Services. When We use anonymised information, it no longer relates to an identified or identifiable individual and is not considered personal data under applicable data protection law.

To protect Your, Our or others' rights

We might disclose account or other personal information when We have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with Our rights or property, other Users or anyone else that could be harmed by such activities. This processing is based on Our legitimate interests in ensuring the safety and security of the Services and protecting Your, Our and others' rights, and, where applicable, on Our need to comply with legal obligations.

Automated decision making, including profiling

If You voluntarily register for Our newsletter, Your personal information will be processed in order for You to be able to receive Our newsletter and related communications, which is done in an automated way. We may use aggregated information to better tailor Our newsletters to different User groups, for example by interest or geography, but We do not use this information to make decisions that produce legal or similarly significant effects for You; it is used to provide relevant content and understand Our audience.

Automated decisions, profiling and training data

The Services use artificial intelligence and other automated systems to analyse the information You provide and to generate tailored questions, suggestions and guidance about entrepreneurship, whether related to a specific business idea or to Your broader learning and development as an entrepreneur. This involves profiling, which means automated processing of personal data to evaluate certain personal aspects, such as Your interests, goals and business context. These automated processes are used to personalise Your experience and improve the relevance of the Services, but they do not make decisions that have legal or similarly significant effects for You; You always remain responsible for deciding how to act on any guidance or output.

While Your account is active, We may use Your personal data and User Generated Content to operate, maintain and improve the Services, including to develop, train, test and refine Our models and algorithms, where this is necessary to perform the Agreement with You or is in Our legitimate interests and compatible with Your rights and expectations. If You or We close Your account, We will either delete Your personal data or anonymise it within a reasonable period, subject to any legal obligations to retain certain information. Once data has been properly anonymised so that it can no longer be linked to an identified or identifiable individual, it is no longer treated as personal data under applicable data protection law and is no longer subject to the personal data protections in this Privacy Policy. We may continue to use such anonymised data for analytics, research and model training purposes.

We use third party service providers to help Us provide, operate and support the Services (for example hosting, infrastructure, email and customer support tools). These providers may process personal data about You on Our behalf and only in accordance with Our instructions and applicable data processing agreements. We remain responsible for Your personal data as described in this Privacy Policy and do not grant any third party more rights over Your personal data than We have Ourselves.

Advertisements and third party links

At the time of this Privacy Policy, We do not display third party advertisements in the Services. In the future, the Services may present content or links from third parties, including in service recommendations or messages generated by Our AI that refer to third party resources, Service Content that includes external links, recommended articles or tools, or clearly labelled advertising or sponsored content. If You choose to follow a link or interact with such third party content, You will be taken to websites, apps or services that are owned and operated by third parties that are not affiliated with Us.

This Privacy Policy applies only to Our Website and Services and does not govern activities on linked websites or applications. We do not control and are not responsible for the content, privacy practices or use of personal data by those third parties, and any personal information You provide directly to them is subject to their privacy policies. We encourage You to review the privacy statements of any third party services You visit or use.

To communicate with You

We use third party tools to help Us deliver and personalise Our communications with You. For example, We may contact You by email or other means of electronic communication (including through the Services) to inform You about feature, security and/or Software updates or service related messages. This processing is based on Our legitimate interests in keeping You informed about the Services You use and, where required by law for certain types of messages, on Your consent or applicable communication preferences.

Payment Processor

When You purchase a Paid Subscription, payments are processed through Our chosen payment service provider. This provider acts as an independent controller of the payment data it collects to process Your payment and to comply with its own legal obligations. Its processing of Your personal and financial information is governed by its own privacy policy, which We encourage You to review. We only receive limited information from the payment provider (for example a confirmation of payment) and use it in accordance with this Privacy Policy.

Transfer to third countries outside of the EU/EEA

We currently host Our digital infrastructure on OVHcloud servers located within the EU and aim to keep all data from all Users within the EU/EEA. At the time of this Privacy Policy, We do not routinely transfer personal data to countries outside the EU/EEA. If We need to transfer Your personal data outside the EU/EEA in the future in order to provide the Services, We will only do so in compliance with applicable data protection law, including by implementing appropriate safeguards such as standard contractual clauses or relying on adequacy decisions where available, and We will update this Privacy Policy accordingly.

While no system is completely secure, We implement appropriate technical and organisational measures and best practices to help prevent loss, theft, misuse and unauthorised access, disclosure or alteration of personal data. These measures include, for example, encryption of data in transit using industry standard technologies, access controls, monitoring and limiting access to personal data to authorised personnel and service providers who need it for the purposes described in this Privacy Policy.

We retain personal data only for as long as needed to fulfil the purposes for which it was collected, including to provide the Services to You, comply with legal, accounting or reporting requirements, resolve disputes and enforce Our agreements. When personal data is no longer needed for these purposes, We will delete it or anonymise it in accordance with Our data retention policies and applicable law.

We want to ensure You that You are always in control of the information We have about You. Below We describe Your rights and how You may exercise them.

Right to access

You have the right to access any personal information We have about You. If You would like to access any such personal information, You can, at any time, see and download a machine-readable file of the information We hold about You by visiting Your profile in the Services.

Right to rectification

You have the right to, at any time, obtain rectification of inaccurate personal data concerning You. You also have the right to complete incomplete personal information. You can always edit the information You have submitted when creating Your User Account, simply by visiting Your profile on the Services.

Right to deletion

You have the right to request deletion of personal data that We process about You in certain situations, including if:

(a) the personal data is no longer necessary in relation to the purpose for which it was collected or otherwise processed,

(b) You object to processing based on legitimate interests and Your reasons for objecting outweigh Our legitimate grounds,

(c) You object to processing for direct marketing purposes,

(d) the personal data have been unlawfully processed, or

(e) the personal data must be deleted to comply with a legal obligation.

You also have the right to terminate Your User Account at any time. When Your account is closed, We will delete or anonymise personal data associated with it in accordance with Our data retention practices and applicable law. However, binding legal requirements may mean that We need to retain certain personal data for specified periods (for example for tax, accounting or legal purposes). In such cases, We will restrict the use of that data to what is strictly necessary to fulfil those obligations.

Right to restriction of processing

You have the right to request that We restrict processing Your personal information, if:

(a) You contest the accuracy of the personal data, in which case We will restrict processing while We verify its accuracy,

(b) the processing is unlawful and You object to delete the personal data and requests the restriction of their use instead,

(c) We no longer need the personal data for the purposes of the processing, but You require the data to the establish, exercise or defend legal claims, or

(d) You have objected to processing based on legitimate interests, pending verification of whether Our legitimate grounds override Yours.

Right to data portability

You have the right to receive the personal information You have provided to Us in a structured, commonly used and machine-readable format and have the right to transmit the data to another controller, if:

(a) the legal ground is Your consent, or

(b) the legal ground is Our Agreement, and

(c) the processing is carried out by automated means

Right to object

You have the right to object, on grounds relating to Your particular situation, to Our processing of Your personal data where We rely on legitimate interests or the public interest as the legal basis. If You object, We will stop processing the relevant personal data unless We can demonstrate legitimate grounds for the processing which override Your interests, rights and freedoms, or the processing is needed for the establishment, exercise or defence of legal claims. You also have an absolute right to object at any time to processing of Your personal data for direct marketing purposes, including any related profiling, in which case We will stop processing the data for those purposes.

Right to withdraw Your consent

Where We rely on Your consent as the legal basis for processing Your personal data, You have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw Your consent at any time by following the instructions provided when We asked for Your consent (for example, using unsubscribe links in emails) or by contacting Us by email at hello@edventures.ai.

Right to file a complaint with a supervisory authority

We are committed to handling any request, complaint or concern that You may have about Our use of Your personal data in a fair and transparent way. If You believe that We have not been able to assist with Your complaint or concern, You have the right to lodge a complaint with a data protection authority, in particular in the EU/EEA Member State where You live or work or where You consider that an infringement of data protection law has occurred.

The Services are not directed to children and are intended only for individuals who are at sixteen (16) years old, or older. We ask that individuals under the age of sixteen (16) do not create an account, do not submit any personal information to Us and do not use the Services. When someone creates an account, We rely on the information they provide about their age and cannot technically guarantee that it is accurate in every case. We do not knowingly collect or request personal information from anyone under the age of sixteen (16) without appropriate consent from a parent or guardian, where such consent would be required. If, following a notification from a parent or guardian or discovery by other means, We learn that a child under sixteen (16) has created an account using false information, We will cancel the child's User Account and delete or anonymise the child's personal information from Our records, subject to any legal obligations to retain certain data. Other age restrictions may be set forth in Our Terms of Service from time to time.

Edvntrs Technologies AB, company registration number 559332-3438, is the data controller of Our processing of the personal information described in this Privacy Policy.

Occasionally We may make changes to this Privacy Policy, for example to reflect changes in the Services or regulatory requirements. When We update this Privacy Policy, We will update the date this Privacy Policy was last revised, which You will find at the top of the page. If there are major changes to the Privacy Policy, or in how We use Your personal information, We will notify You about the changes either through the Services' interface, in an email notification or through other reasonable means. We encourage You to regularly review this Privacy Policy to learn more how We are using and protecting Your information.

If You have any questions about the use of Your personal information, please send Us an email to hello@edventures.ai.