Stress-test your idea before you build it ← Back

Privacy Policy

Last updated: 11 June 2026.

This Privacy Policy explains how your personal data is collected and processed when you use StressMyIdea at stressmyidea.com (the "Service"). We are committed to processing your data lawfully and transparently under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is Nikita Alenchikov (an individual), operating the StressMyIdea service.

Contact for any privacy question or request: hello@stressmyidea.com. A postal address is available on request.

2. What data we collect

  • Your email address — to deliver your strategy and contact you about your order.
  • Your idea text and the answers to follow-up questions — the content you submit so the Service can generate a strategy.
  • The generated strategy document — produced for you and stored so your access link keeps working.
  • Optional feedback — a rating and any comments you choose to leave about a strategy.
  • Technical and consent records — your IP address, timestamps, and the version and hash of the legal texts you accepted, kept as proof of consent.

We do not ask for or intentionally collect special categories of data. Please do not include sensitive personal data in your idea text.

3. Why we process it, and our legal basis

  • To provide the Service (generate and deliver your strategy, operate your access link) — performance of a contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a)).
  • To transfer your idea text to our AI provider for generation (see Section 5) — your explicit consent (Art. 6(1)(a) and Art. 49(1)(a) GDPR).
  • To communicate with you about your order and support — contract and legitimate interests (Art. 6(1)(f)).
  • To keep records of consent and comply with legal obligations — legal obligation (Art. 6(1)(c)) and legitimate interests.

4. Sub-processors

We use a small number of trusted providers to run the Service:

  • DeepSeek (China) — the AI model that generates your strategy from your idea text.
  • Tavily (United States) — web search used to research current sources for your strategy. We do not send your email to Tavily.
  • Resend (United States) — delivery of transactional emails (your access link, service messages).
  • Hetzner (Germany, EU) — hosting of the Service and its database.

Each sub-processor processes data only as needed to provide its part of the Service.

5. International transfers

Your idea text is transferred to DeepSeek in China to generate your strategy. China is not covered by an EU adequacy decision, and its data-protection laws may not offer the same level of protection as the EU. We therefore rely on your explicit, informed consent to this specific transfer (Art. 49(1)(a) GDPR), which you give with a separate checkbox at checkout. You can withdraw this consent at any time (see Section 7); withdrawal does not affect processing already carried out.

Transfers to Tavily and Resend in the United States are made under their respective safeguards (including the EU–US Data Privacy Framework and/or Standard Contractual Clauses).

6. How long we keep your data

We keep your order, idea text, and generated strategy until you ask us to delete them, so that your access link continues to work. When you request deletion, we erase your personal data without undue delay, except where we must keep limited records to comply with the law.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased ("right to be forgotten");
  • restrict or object to processing;
  • receive your data in a portable format;
  • withdraw any consent you have given, at any time;
  • lodge a complaint with a data-protection supervisory authority in your country.

To exercise any of these, email hello@stressmyidea.com. We respond within one month.

8. Cookies and analytics

We use privacy-friendly, cookieless analytics (Plausible) that do not track you across sites or build a profile of you. We do not use advertising or tracking cookies, so no cookie banner is required. We do not sell your personal data.

9. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. Your strategy is accessible only through a private link tied to your email.

10. Changes to this policy

We may update this Policy. The version and date appear at the top, and the version you accepted at checkout is recorded with your order.