IdeaFlow← Back to home

Privacy Policy

Last updated: 2026

IdeaFlow is a website operated by NGO "ZASTRAHOVANO" (the “Organization”, “we”, “us”). This Privacy Policy explains what data we collect, why we collect it, and the third-party services we use to process it.

Who we are

NGO "ZASTRAHOVANO", EDRPOU code 44727473, Ukraine, Odesa region, city of Odesa, Staroportofrankivska Street, building 107, apartment 21.

Data we collect

  • Idea / answers — the text of your idea (or project answers) and an optional tag.
  • Pitch video — a video you record and upload.
  • Contact details — your name and email address.
  • Automated review data — to decide the outcome we generate a transcript of your video’s audio, run an automated face/quality check on a few frames, detect the spoken language, and produce a verdict. The result is emailed to you.
  • Usage data — anonymous analytics about how the site is used (see below).

Third-party services we use to process data

  • Amazon Web Services (AWS), EU region (eu-central-1) — stores your pitch video (S3) and runs our backend (Lambda + API Gateway). Your video is processed by AWS Transcribe (speech-to-text), AWS Rekognition(face/quality detection) and AWS Bedrock (evaluates whether your answers address the questions). Data stays in the EU.
  • Supabase — database that stores your submission and contact details.
  • Resend — sends our transactional emails (your one-time link and the verdict).
  • Web3Forms — delivers messages from the “support an idea” form to us by email.
  • Google (Google Ads / gtag.js) — measures traffic and ad conversions.
  • Microsoft Clarity — provides anonymised usage analytics (heatmaps and aggregated session insights) to help us improve the site. Set only after you Accept in our cookie banner.
  • Cloudflare Pages — hosts and serves this website.
  • Google Fonts — serves the fonts used on this site.

Automated review

The outcome of your submission is decided by an automated review (the checks described above). If you believe the result was wrong, you can reach a human — just email us at support@stpahobka.com and we’ll look into it.

Google analytics & consent settings

We use Google’s tag (gtag.js) for traffic measurement and ad conversion tracking via Google Ads (ID AW-17391256145). We implement Google Consent Mode v2: by default all consent signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — are set to denied. Google’s tag is only allowed to store or read cookies and identifiers after you click Accept in our cookie banner. If you Decline, these signals remain denied and no analytics/advertising cookies are set. You can change your choice at any time by clearing your browser storage for this site, which makes the banner reappear.

How we use your data

We use idea submissions, videos and contact details solely to receive, review and act on your idea, and to contact you about it. We do not sell your personal data.

Regulatory compliance

We are committed to protecting your privacy and we comply with the major data protection laws, including:

  • EU GDPR — the EU General Data Protection Regulation (Regulation (EU) 2016/679).
  • UK GDPR and the Data Protection Act 2018.
  • CCPA / CPRA — the California Consumer Privacy Act, as amended.
  • Ukraine — the Law of Ukraine “On Personal Data Protection”.

We already follow the procedures required by these laws in practice — including lawful, consent-based processing, data minimisation, and timely handling of data subject requests. To exercise any right, you simply email us at support@stpahobka.com and we act on your request.

Data retention

Submissions are retained for as long as necessary to manage and protect the idea you shared. You may request deletion of your personal data at any time, and we will delete it.

Your rights

Regardless of where you live, you can exercise the following rights over your personal data, and we already honour all of them:

  • Access — get a copy of the personal data we hold about you.
  • Rectification — have inaccurate or incomplete data corrected.
  • Erasure — have your personal data deleted (“right to be forgotten”).
  • Restriction & objection — limit or object to how we process your data.
  • Portability — receive your data in a portable, machine-readable format.
  • Withdraw consent — withdraw any consent you previously gave, at any time.
  • Opt out of “sale/sharing” (CCPA/CPRA) — note we do not sell or share your personal data.

To exercise any of these rights, just email us at support@stpahobka.com. No special form is required — a plain request is enough, and we handle it promptly and free of charge.

Contact

For any privacy question or request, contact us at support@stpahobka.com.