Privacy Policy

MVP Adviser is operated by SC UPDIVISION SRL, located at Bucharest, District 2, Str. Doamna Ghica, No. 20, Building. 4, Floor 7, Apt 87, Room 3.

1. Introduction

MVP Adviser ("we," "our," or "us") is a ChatGPT app that helps founders and product teams evaluate MVP feasibility, decide whether AI is justified, identify product and data risks, and generate an implementation plan. This Privacy Policy explains the data MVP Adviser collects, processes, returns, shares, and retains.

2. Data Use Summary

Data or Output	How We Use It	Recipients	Retention
Intake wizard inputs	Generate MVP feasibility, AI fit, risk, scope, and planning recommendations.	SC UPDIVISION SRL systems, OpenAI as ChatGPT platform and API provider, and hosting/security providers as needed to operate the service.	Processed transiently for the request. We do not intentionally store assessment content after the active session.
Optional ChatGPT-provided prefill values	Prepopulate the intake wizard when ChatGPT sends task-specific context you already provided in the conversation.	Same recipients as intake wizard inputs.	Processed transiently for the request and not intentionally stored by us after the active session.
Generated assessment and plan outputs	Return the requested MVP verdict, reasons, risks, milestones, checklists, architecture notes, and effort estimate to you in ChatGPT.	Same recipients as intake wizard inputs.	Returned to ChatGPT. We do not intentionally store generated outputs after the active session.
Technical and security metadata	Deliver the service, troubleshoot failures, protect against abuse, and maintain reliability.	SC UPDIVISION SRL systems, hosting/security providers, and OpenAI where requests pass through ChatGPT or OpenAI APIs.	Operational logs, if generated by our infrastructure, are kept only as long as needed for security and troubleshooting, typically up to 30 days unless a longer period is required by law or needed to investigate abuse or security incidents.

3. Current App Inputs and Outputs

MVP Adviser currently exposes three ChatGPT app tools: an intake wizard, an assessment generator, and an implementation-plan generator. These tools use the following inputs and return the following outputs.

3.1 Inputs We Collect or Process

Data Category	Description	Purpose
Product Information	Product stage (Idea/MVP/LIVE), timeline (Weeks/Months)	To assess MVP feasibility and generate appropriate recommendations
Problem Description	Text description of the problem your MVP aims to solve (up to 1,200 characters)	To understand your product context and generate relevant assessments
Use Case Description	Optional text describing automation or AI opportunities (up to 1,200 characters)	To evaluate AI fit and provide implementation recommendations
Surface Type	Whether the product is Internal or User Facing	To tailor risk assessments and implementation guidance
Data Availability	Whether you have relevant data (Yes/No/Not Sure)	To assess data readiness for AI implementation
Data Sources	Types of data sources: User Generated, Internal Logs, Third Party	To evaluate data quality and integration requirements
Sensitive Data Indicators	Whether you handle sensitive or regulated data (No/Maybe/Yes)	To identify compliance requirements and privacy risks
Regulated Domains	Specific regulated domains if applicable (e.g., healthcare, finance)	To provide domain-specific compliance guidance

3.2 Outputs We Return

The app returns structured MVP advisory outputs to ChatGPT. These outputs may repeat, summarize, or infer recommendations from the inputs you provided.

Output Category	Description	Purpose
Intake UI Payload	Wizard title, field labels, allowed field options, guardrail notice, optional support email, and optional prefilled intake values.	To display the intake wizard and help you submit the MVP assessment context.
Assessment Result	Verdict, reasons, risk table with severity and mitigations, MVP scope, architecture notes, assumptions, and next steps.	To answer whether AI is justified and what to build or defer.
Implementation Plan	Summary, milestones, product checklist, engineering checklist, AI evaluation checklist, privacy and safety checklist, architecture components, APIs, data notes, evaluation notes, effort size, and assumptions.	To turn the assessment into a practical implementation plan.

3.3 Technical Metadata

In addition to the information you provide through the intake wizard, our systems or infrastructure providers may automatically process limited technical information to facilitate service delivery and security:

• IP Address: Used for basic service delivery and security monitoring
• User Agent/Browser Information: To ensure compatibility and optimize the user experience
• Timestamps: For request processing and basic operational logging
• Request Identifiers: For troubleshooting and service reliability

This technical metadata is processed automatically and is not used for user profiling or behavioral analysis.

4. How We Use Your Information

4.1 Primary Uses

We use the information you provide to:

• Generate MVP feasibility assessments and verdicts
• Create risk analysis tables with severity ratings and mitigation strategies
• Develop MVP scope recommendations (what to build now vs. later)
• Provide architecture notes and technical approach recommendations
• Generate detailed implementation plans with milestones and tasks
• Create effort estimates and build checklists

4.2 AI Processing

4.3 Service Improvement

We may use aggregated, anonymized data to:

• Improve our assessment algorithms and recommendations
• Enhance user experience and interface design
• Identify and fix technical issues
• Develop new features and capabilities

We do not use raw submitted assessment content for advertising, behavioral profiling, or sale to third parties.

5. Data Recipients and Sharing

5.1 Recipient Categories

We disclose or make data available only to the following recipient categories:

• OpenAI as ChatGPT platform provider: MVP Adviser runs inside ChatGPT, so prompts, tool calls, app responses, and displayed outputs are handled by OpenAI according to the user's ChatGPT account settings and OpenAI's policies.
• OpenAI as API provider: Intake data and generated outputs are processed through OpenAI's API to produce assessment and implementation-plan results.
• Hosting, infrastructure, and security providers: These providers may process limited request metadata or transient content as needed to host, secure, monitor, and troubleshoot the service.
• Professional advisers, authorities, or legal recipients: We may disclose information where required by law or necessary to protect rights, safety, security, or the service.

5.2 No Sale of Personal Data

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5.3 Legal Disclosures

We may disclose your information if required by law, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Retention

6.1 Assessment Content and Generated Outputs

We process assessment inputs and generated outputs transiently to answer the current request. MVP Adviser does not provide user accounts, long-term project storage, saved assessments, or saved implementation plans. We do not intentionally retain submitted assessment content or generated outputs after the active session, except to the extent such data appears in temporary infrastructure processing or limited operational logs.

6.2 Operational and Security Logs

Our infrastructure may generate limited logs for reliability, troubleshooting, abuse prevention, and security. These logs may include technical metadata such as IP address, timestamps, request path, response status, and error information. Where generated, we retain these logs only as long as needed for those purposes, typically up to 30 days unless a longer period is required by law or needed to investigate abuse, fraud, or security incidents.

6.3 OpenAI Retention

Data sent to OpenAI through ChatGPT or OpenAI's API is processed under OpenAI's applicable privacy, data-control, and retention practices. Our OpenAI Responses API requests are configured not to store response application state where supported. OpenAI states that API data is not used to train OpenAI models unless the API customer explicitly opts in, and that default API abuse-monitoring logs may be retained for up to 30 days unless exceptions apply.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/SSL protocols
• Secure API communication with OpenAI
• Access controls and authentication mechanisms
• Regular security assessments and updates

8. Your Rights and Controls

8.1 Before Submission

You control what you submit to MVP Adviser. You can choose not to use the app, close the intake wizard, edit fields before submitting, omit optional fields, and avoid including personal data or sensitive information.

8.2 Access, Correction, and Portability

You can view and correct your intake information directly in the app before submitting it. Generated outputs are returned in ChatGPT so you can review, copy, or export them using ChatGPT's available controls.

8.3 Deletion

Because MVP Adviser does not maintain user accounts or saved assessments, we generally do not have persistent assessment records to delete after the active session. You may contact us to request deletion of any operational logs or support records that can reasonably be associated with you. You can also use ChatGPT's own data controls for conversations and app interactions stored by OpenAI.

8.4 Opt-Out of AI Processing

If you do not want your data processed by OpenAI's API, you should not submit the intake wizard or use the assessment and implementation-plan tools, because AI processing is required for the service.

8.5 Regional Rights

Depending on your location, you may have additional rights under applicable privacy laws, including:

• GDPR (European Economic Area): Right to access, rectification, erasure, restriction, data portability, and objection
• CCPA (California): Right to know, delete, opt-out of sale, and non-discrimination
• Other Jurisdictions: Rights as provided by applicable local privacy laws

9. Children's Privacy

MVP Adviser is not directed to children under 13, and individuals under 13 may not use the app. Users between 13 and 17 should use the app only with permission and supervision from a parent or legal guardian. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States where OpenAI operates. By using MVP Adviser, you consent to the transfer of your information to these jurisdictions. We take appropriate contractual, technical, and organizational measures where required for such transfers.

11. Sensitive Data Warning

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of MVP Adviser after any changes constitutes acceptance of the updated policy.

13. Contact Us