# Privacy Policy Last updated: November 6, 2026 Source: https://makemyidea.com/privacy This policy explains what MakeMyIdea collects, why, where it's kept and the choices you have. MakeMyIdea is run by MakeMyIdea in Alberta, Canada. We follow Canada's privacy law (PIPEDA) and Alberta's Personal Information Protection Act. ## The short version > In short: We collect what we need to run your account and take payments. No ads, no ad trackers, and we never sell your data. - We keep your name, email and what you buy, so you can sign in and use your plan. - Stripe handles card payments. Your card number never reaches us. - On the Free plan, projects stay in your browser. On paid plans, they're saved to your account. - We don't run ads or ad trackers, and we never sell or rent your personal information. ## What we collect > In short: Pick a category to see exactly what we keep, why, where and for how long. **Account** - Name and email address. Why: To sign you in, show your name and send account messages. Where: Our database on Cloudflare. How long: While your account is open. - Password (hashed) or Google sign-in. Why: To check it's you. We store passwords hashed, never readable. With Google, we receive your name, email and profile photo. Where: Our database on Cloudflare. How long: While your account is open. - Sign-in sessions, with IP address and browser type. Why: To keep you signed in and spot sign-ins that don't look like you. Where: Our database on Cloudflare. How long: 30 days per session. **Payments** - Card and billing details. Why: To take payments and send receipts. We never see or store your card number. Where: Stripe. How long: Set by Stripe and tax law. - What you bought and when. Why: To give you the plan or tool you paid for, and for tax and accounting. Where: Our database on Cloudflare, and Stripe. How long: As long as tax law requires (generally six years in Canada). **Projects** - Free plan projects. Why: So you can come back to your work. They stay on your device and never reach us. Where: Your browser's storage. How long: Until you delete them or clear your browser. - Paid plan projects and uploaded files. Why: To save your work to your account so it follows you between devices. Where: Our database and file storage on Cloudflare. How long: Until you delete them or your account. - Files you open in a tool. Why: Tools read files like STL models inside your browser. They're only uploaded if you save them to your account. Where: Your browser, unless you save. How long: Not kept unless you save. **Usage** - Plan usage counts. Why: To apply your plan's limits, like exports this month. Where: Our database on Cloudflare. How long: While your account is open. - Activity history. Why: To show your recent saves and exports on your dashboard. Where: Our database on Cloudflare. How long: While your account is open. **Technical** - Cookies and theme choice. Why: A session cookie and a tool sign-in cookie keep you signed in. Your theme choice is saved in your browser. Where: Your browser. How long: Up to 30 days for cookies. - Visit totals from AI services. Why: We count daily visits from AI crawlers and AI answers by service name only, to see how people find us. No personal data. Where: Our database on Cloudflare. How long: Kept as daily totals. - Network and security logs. Why: Cloudflare processes IP addresses to deliver pages and block attacks. Where: Cloudflare. How long: Set by Cloudflare. - Staff requests to our assistant. Why: When our staff ask the site's assistant to make a change, their request and the data it needs go to Anthropic to work it out. Where: Anthropic. How long: Set by Anthropic. ## How we use it > In short: To run your account, your plan and the site. Nothing else. We use your information to: - sign you in and keep your account secure; - give you the tools and limits in your plan, and show your projects and history; - take payments, send receipts through Stripe and keep tax and accounting records; - answer your emails and fix problems; - understand, in totals only, how the site is used so we can improve it. We don't use your information for advertising, and we don't make automated decisions about you that have legal effects. ## Who helps us run MakeMyIdea > In short: A few trusted services process data for us, and each one only gets what it needs. | Service | What it does | What it sees | |---|---|---| | Cloudflare | Hosts the site, the database and saved files | Everything stored in your account, and your IP address when you visit | | Stripe | Takes payments and sends receipts | Your billing details and card | | Google | Sign-in with Google (only if you use it) and the site's fonts | Your Google sign-in details, and your IP address when a page loads fonts | | Anthropic | Powers the assistant our staff use to manage the site | Staff instructions and the site data needed to carry them out, which can include account details | Some of these services store or process data outside Canada, including in the United States. There it's protected by each provider's security and contracts, but it can be accessed by authorities under local law. ## Cookies and browser storage > In short: Only the cookies that keep you signed in. No tracking cookies, so no cookie banner. - **Session cookie** (better-auth.session_token): keeps you signed in on the site, for up to 30 days. - **Tool sign-in cookie**: tells a tool it's you after you open it from the site. - **Browser storage**: remembers your light or dark theme, and holds Free plan projects on your device. We don't use advertising or cross-site tracking cookies. ## How long we keep it > In short: While your account is open, plus what tax law requires. We keep account and project data while your account is open. Sign-in sessions end after 30 days. When you ask us to delete your account, we delete its data, except the payment records we must keep for tax and accounting (in Canada, generally six years). ## Keeping it safe > In short: Encrypted connections, hashed passwords and as little data as we can manage. Every connection to MakeMyIdea uses HTTPS. Passwords are stored hashed, never in plain text, and card details stay with Stripe. Only staff who need it can see account data, and every admin change is recorded in an audit log. No system is perfectly secure. If a breach puts your information at real risk, we'll tell you and the Privacy Commissioner, as the law requires. ## Your rights > In short: Ask to see, fix, export or delete your data at any time. You can ask to see, correct, export or delete your personal information, or withdraw your consent, at any time. Change your name in your account; for anything else, email hello@makemyidea.com from the address you signed up with. We answer within 30 days, as Canadian law requires. ## Children > In short: MakeMyIdea isn't for children under 13. MakeMyIdea isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us personal information, email hello@makemyidea.com and we'll delete it. ## Changes and contact > In short: We'll tell you about important changes. Questions go to hello@makemyidea.com. When we change this policy, we update the date at the top. For important changes, we'll tell you on the site or by email first. Our privacy contact is MakeMyIdea, Alberta, Canada: hello@makemyidea.com. If you're not happy with our answer, you can complain to the [Office of the Privacy Commissioner of Canada](https://www.priv.gc.ca) or to Alberta's [Information and Privacy Commissioner](https://oipc.ab.ca).