Privacy Policy
Last updated [date]
This policy explains what personal data Startum ([Company legal name], “we”) processes and why.
What we collect
- Account data: name, email and authentication identifiers (via Firebase Authentication).
- Workspace content: your founder profile, projects, ideas, research reports, experiments, interview notes and plans.
- Billing data: plan and subscription status. Card details are handled by Stripe and never reach our servers.
- Usage data: AI usage logs (operation, model, token counts, cost estimates) and security logs.
- Waitlist data: emails submitted on landing pages our users publish, stored on behalf of that user.
How we use it
To provide and secure the Service, run the AI features you request, process payments, prevent abuse and communicate with you about your account. We do not sell personal data and do not use your workspace content to train shared AI models.
Processors
We share data only as needed with: Google Firebase (authentication), our AI provider ([provider]) to process prompts you trigger, our web search provider ([provider]) for research queries, Stripe (payments), Resend (email), [hosting provider] and, if enabled, Sentry (error monitoring).
Cookies
We use a strictly necessary, httpOnly session cookie to keep you signed in. [List any analytics cookies if added.]
Retention
We keep your data while your account is active and delete it within [30] days after account deletion, except where the law requires longer retention (e.g. invoices). Backups are kept for [14] days.
Your rights
Depending on where you live, you can access, correct, export or delete your data and object to certain processing. Contact support@startum.ai.
Security
Data is encrypted in transit, access is restricted per account, and sessions use secure httpOnly cookies.
Changes
We will notify you of material changes. Contact: [address / DPO details].