Privacy Policy

Data Controller Information

StartupSeeker
Website: https://startup-seeker.com
Contact: hendrik@startup-seeker.com

StartupSeeker operates as a data controller for the personal information collected through our website and services.

What Personal Information We Collect

Information You Provide Directly

• Contact Forms: Name, email address, message content, and subject when you contact us
• Account Registration: Email address and any profile information you provide when creating an account
• API Usage: API keys and usage patterns when you access our API services
• Uploaded Content: Documents and files you upload for analysis (pitch decks, company documents)

Information Collected Automatically

• Usage Data: IP address, browser type, operating system, referring URLs, and pages visited
• Analytics: Google Analytics collects information about your use of our website
• Cookies and Tracking: Cookie preferences and consent choices
• Search Queries: Search terms and queries (anonymized for analytics)
• API Requests: Rate limiting data and API usage patterns

Information from Third Parties

We may receive information from third-party services we integrate with, such as Supabase for user accounts and Vercel for hosting analytics.

How We Use Your Information

Legal Basis for Processing (GDPR)

We process your personal information based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To provide our services and fulfill our contractual obligations
• Legitimate Interest: To improve our services, ensure security, and communicate with you
• Legal Obligation: To comply with applicable laws and regulations

Purpose of Processing

• Provide and improve our startup search and analysis services
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Ensure security and prevent fraud
• Comply with legal obligations
• Send service-related communications

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and services (Supabase, Vercel, OpenAI, etc.)
• Legal Requirements: When required by law, court order, or government request
• Business Protection: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct

Data Retention

We retain your personal information for the following periods:

• Contact Information: 2 years after last contact or until you request deletion
• Account Data: For the duration of your account plus 30 days after deletion
• Analytics Data: Up to 26 months for Google Analytics data
• API Usage Logs: 90 days for security and rate limiting purposes
• Uploaded Content: Indefinitely until you delete it, and accessible only by you during your account's active period

We regularly review and delete data that is no longer needed for the purposes for which it was collected.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal information
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal information
• Restriction: Request limitation of processing
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at hendrik@startup-seeker.com.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

• Know: Request information about what personal information we collect, use, and disclose
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt-out of the sale or sharing of personal information
• Non-Discrimination: Protection from discrimination for exercising these rights

We do not sell personal information as defined by CCPA. To exercise these rights, contact us at hendrik@startup-seeker.com.

Cookies and Tracking Technologies

Essential Cookies

• Session Cookies: Required for website functionality and security
• Consent Cookies: Remember your cookie preferences

Analytics Cookies

• Google Analytics: Collects anonymous usage data to improve our services
• Vercel Analytics: Performance and usage monitoring

Managing Cookies

You can control cookie settings through our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.

AI and Automated Processing

We use artificial intelligence and automated processing for:

• Semantic search and relevance ranking
• Company analysis and competitor identification
• Content processing and summarization
• Document analysis and insights generation

AI-generated content may contain inaccuracies. We recommend verifying important information through multiple sources. We do not use automated decision-making that significantly affects your rights.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Secure data hosting with trusted providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Third-Party Services

We use the following third-party services that may collect information:

• Supabase: Database and user authentication services
• Google Analytics: Website analytics and performance monitoring
• Vercel: Website hosting and analytics
• OpenAI/Anthropic: AI processing services
• Zilliz: Vector database for search functionality
• Resend: Email delivery service

Each service provider has its own privacy policy governing how they handle data. We recommend reviewing their policies for more information.

Children's Privacy

Our services are not intended for children under 16 (or under 13 in certain jurisdictions like the US). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification (if you have an account)
• Providing a prominent notice on our website

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: hendrik@startup-seeker.com
Website: https://startup-seeker.com/contact