Privacy Policy

Account information. When you sign in with Google, we receive your name, email address, and profile photo from your Google account. We use this to create and identify your account and organization within Northstar.

Content you create. Projects, leads, financial models, marketing plans, ad ideas, comments, and any other data you enter into Northstar is stored so it can be shown back to you and the members of your organization.

Connected third-party accounts. If you choose to connect integrations such as LinkedIn, YouTube, Reddit, or Apify, we store the access tokens and account identifiers needed to fetch data on your behalf (for example, post performance or engagement numbers) and, where you request it, to publish content to those platforms. We only request the scopes needed for these features.

Usage data. We may log basic technical information (such as timestamps and error logs) to keep the service reliable and secure.

We use the information above to operate Northstar: authenticating you, scoping your data to your organization, generating research and recommendations (including through Google's Gemini API, which may use live Google Search results to ground answers), fetching data from and publishing content to the third-party integrations you connect, and communicating with you about your account (for example, transactional email sent via Resend).

We do not sell your personal information, and we do not use your organization's data to train third-party models beyond what is required to generate the responses you request.

Your data is stored in a Supabase-hosted database and is scoped to your organization; other organizations cannot access it. We use industry-standard measures, including encrypted connections, to protect data in transit. No method of storage or transmission is completely secure, but we work to protect your information using commercially reasonable safeguards.

We share information only in the following circumstances:

• With service providers who help us run Northstar (for example, Supabase for hosting and authentication, Google for AI-generated research, and Resend for transactional email), under agreements that limit their use of your data to providing the service.
• With the third-party platforms you explicitly connect (such as LinkedIn or YouTube), solely to perform the actions you request.
• To comply with applicable law, legal process, or valid governmental request.
• With your consent, or at your direction.

You can disconnect any third-party integration at any time from within Northstar, which revokes our access to that account. You may request access to, correction of, or deletion of your personal information by contacting us at rajat@valnee.com. If you delete your account, we delete your organization's data within a reasonable period, except where retention is required by law.

Northstar is intended for business use and is not directed at children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

Questions about this policy or your data can be sent to rajat@valnee.com.