Skip to content
GetIncomeOS

Privacy Policy

Last updated:

This Privacy Policy explains how GetIncomeOS, a sole proprietorship based in New York, USA, collects, uses and protects personal information when you use getincomeos.com. We do not sell or share your personal information for cross-context behavioral advertising.

1. Information we collect

  • Account data: email address and an encrypted password, used to create and secure your account.
  • Tool inputs and outputs: your quiz answers, interests, niches, offers and the AI-generated results saved to your Income Plan.
  • Billing data: subscription status, renewal dates and a Stripe customer ID. Card details are collected and stored by Stripe, not by us.
  • Consent records: the date and time you agreed to auto-renewal terms and your cookie choice.
  • Usage data: anonymous clicks on the homepage income path grid (which box and when, with no personal identifiers) and, only if you accept analytics cookies, aggregated page-view analytics.
  • Technical data: IP address, browser type and device information processed by our hosting provider for security and delivery.

2. How we use information

  • To provide the Service, run the tools and save your Income Plan.
  • To process payments, send subscription confirmations, renewal reminders and cancellation confirmations.
  • To secure the Service, prevent abuse and enforce our Terms.
  • To understand which content helps people most and improve the site.
  • To comply with legal obligations.

3. AI processing of your inputs

When you use a tool, the information you enter is sent to AI models through the Vercel AI Gateway, which routes requests to third-party model providers, to generate your result. We send only what the tool needs. Do not enter sensitive personal information (such as health, financial account or government ID numbers) into the tools. We do not use your inputs to train our own models. Model providers process requests under their own terms and data policies for API traffic.

4. Service providers (processors)

We use these providers to operate the Service. They process data on our behalf and under contract:

  • Supabase: authentication and database hosting for accounts and saved tool results.
  • Stripe: payment processing, subscription billing and the Customer Portal used for cancellation.
  • Vercel: website hosting, AI Gateway routing and, with your consent, privacy-friendly analytics.
  • Resend: delivery of transactional emails such as confirmations and renewal reminders.
  • AI model providers accessed through the Vercel AI Gateway, to generate tool outputs.

5. Cookies and analytics

Essential cookies keep you signed in, remember your cookie choice and allow secure checkout. They are always on because the Service cannot work without them.

Non-essential analytics are only enabled if you click Accept in the cookie banner. If you click Reject, they stay off. You can change your choice at any time with the Cookie settings link in the footer. We honor Global Privacy Control (GPC) signals as a request to opt out.

6. No sale or sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law and similar state laws. We do not knowingly collect personal information from anyone under 16 for those purposes.

7. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use and disclose, and request a copy of it.
  • Request deletion of your personal information.
  • Request correction of inaccurate personal information.
  • Opt out of sale or sharing (we do neither) and limit use of sensitive personal information (we do not collect it for those purposes).
  • Not be discriminated against for exercising your rights.

Categories collected in the past 12 months: identifiers (email, IP address), commercial information (subscription records), internet activity (usage data) and inferences contained in your tool results. Sources: you, your device and our processors. Purposes are listed in Section 2.

8. Other US state privacy rights

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska and Rhode Island, may have rights to access, correct, delete and obtain a copy of their personal data, and to opt out of targeted advertising, sale and certain profiling. We extend these rights to all users regardless of where they live. If we deny a request, you may appeal by replying to our decision email; if the appeal is denied you may contact your state attorney general.

9. Data deletion and other requests

To access, correct or delete your data, email [CONTACT EMAIL] from the address on your account, with the subject "Privacy request." We will verify your request and respond within 45 days. Deleting your account removes your profile and saved tool results; we keep limited billing records where the law requires. You can also delete individual saved results from your dashboard. An authorized agent may submit a request with your signed permission.

10. Retention and security

We keep account data and saved results while your account is active, and delete them within 30 days after an account deletion request, except billing records we must keep for tax purposes (generally up to 7 years). We use encryption in transit, row-level security in our database and access controls to protect your data, but no system is perfectly secure.

11. Children

The Service is not intended for children. Children under 13 are not permitted to use the Service, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact [CONTACT EMAIL] and we will delete it.

12. Changes and contact

We will post any changes here with a new "Last updated" date and email account holders about material changes. Questions: [CONTACT EMAIL].