Last updated: October 30, 2025
1. Introduction
Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile app, APIs, and community features.
By accessing or using StartsClub, you agree to the terms of this policy. If you do not agree, please refrain from using our services.
2. Information We Collect
We collect the following types of data to deliver and improve our platform:
a) Personal Information
- Name, email address, profile photo, username
- Professional details (company, role, bio, social links)
- Account preferences and notification settings
b) Technical Data
- IP address, browser type, operating system
- Device identifiers, geolocation (approximate), time zone
- Session duration and interaction logs
c) Usage Data
- Search queries, filters applied, and browsing patterns
- Time spent on pages, clicks, and navigation flow
- Community engagement (comments, replies, follows)
d) User-Generated Content
- Product submissions (name, tagline, description, images, links)
- Maker profiles and launch announcements
- Feedback and support interactions
e) Configuration & Preference Data
- Notification preferences (email, push, in-app)
- Followed topics, makers, or product categories
- Saved products, drafts, and watchlists
4. Data Sharing and Third-Party Services
We do not sell your data to third parties. We may share your data under the following circumstances:
- With service providers such as:
- Cloud hosting (AWS, Vercel)
- Analytics tools (Google Analytics)
- Email delivery (Resend, SendGrid)
- CDN and performance services (Cloudflare)
- With community moderation tools (if integrated) for spam and abuse detection
- With legal or regulatory authorities, when required by law
- Internally with authorized team members under strict Role-Based Access Control (RBAC)
Publicly visible data (e.g., usernames, comments, upvotes, product submissions) is part of the community experience and accessible to all logged-in users.
6. Data Security Measures
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- Multi-layer firewalls, WAF, and DDoS protection
- Role-Based Access Control (RBAC) and audit logging
- Secure session management and JWT-based authentication
- Regular security audits and vulnerability scanning
Despite these measures, no system is 100% immune to breaches. We continuously monitor and improve our defenses.
8. Cross-Border Data Transfer
StartsClub services may involve servers hosted outside India (e.g., AWS regions). In such cases, we ensure compliance with international data transfer standards and maintain adequate safeguards.
9. Updates to This Policy
This policy may be updated to reflect platform changes or legal requirements. All updates will be:
- Notified via email and in-app banner
- Posted on our website with the revised effective date
Continued use of StartsClub after updates constitutes acceptance of the new policy.
10. Contact Us
For privacy concerns, data requests, or support:
Email: hello@startsclub.com