Privacy notice (draft)
This describes, honestly and as accurately as we can today, what personal data thestarter collects and why. It is a working draft, not a finished privacy policy, and it will change before this product handles real users' data at scale.
Draft — not yet reviewed by a lawyer
What we collect
Identity and contact details (name, email); your professional profile (headline, bio, skills, availability); and any free text you write yourself — idea descriptions, applications, pitches, and progress updates.
Why we collect it
To run the core service: matching founders and contributors inside a cohort, and, only for idea text, producing an AI-generated analysis of an idea's stage, risks, and role gaps.
AI analysis
Idea and role text you submit is sent to Cloudflare (Workers AI) to generate that analysis. The models run on Cloudflare's own infrastructure, and neither we nor Cloudflare use your text to train models. You keep full ownership of anything you write, and nothing is shared beyond the visibility you choose for it.
Who else sees it
Cohort managers and institution staff see only what's needed to run a cohort — accepted team composition, never the private applicant pool. A short list of infrastructure providers (hosting, database, authentication, email, analytics, error monitoring) process data on our behalf to run the service.
Analytics and cookies
We use PostHog (EU region) to count visits and see which parts of the site get used. It runs only if you allow it: until you choose, nothing is collected and no analytics cookie is set, and you can change your answer at any time under 'Your data' in your profile. PostHog receives ids, page addresses and which elements were clicked — never idea, pitch or message text, and never a recording of your screen. That limit is enforced in code, not only stated here. Apart from this, the only cookies on this site are the ones Clerk sets to keep you signed in.
Moderation
A small number of platform administrators can read reported content — an idea's text, its attachments, private messages on it, and progress updates — but only to act on a report or a spam flag. Every such read is recorded with the administrator's name, what they opened and the reason they gave, and they only load the category a report actually concerns.
Your rights
You can ask to see, correct, or delete your data by emailing us directly. We're building self-service tools for this; they aren't live yet.
What's not final yet
Signed data-processing agreements with every provider, a formal retention schedule, and a lawyer's review of this notice are all still in progress.
Questions about this notice? Email info@letstartitup.com.