Template policy — confirm the data-processor list, legal bases and retention periods with counsel before launch.
01What we collect
Account data (name, email, optional handle and avatar), startup listing data you submit, support and takeover activity, payment records (amount, status, provider references — never card numbers), notification preferences, and technical data such as IP address and user agent for security and rate limiting.
02How we use it
To run the Service (showing the Top Seat, counting support, processing takeovers), to prevent abuse (rate limits, one-account rules, moderation), to send transactional emails you can partly opt out of, and to comply with legal obligations such as bookkeeping.
03What is public
Your startup listing, website preview and Top Seat history are public. In activity feeds we show your handle or first name — never your email. Supporter counts and amounts are public; individual free supports show your first name or handle.
04Processors
Stripe (payments), Resend (email), our hosting and database providers, and an optional screenshot service for website previews. Sign-in with Google or X shares your basic profile with us according to their consent screens.
05Retention
Account data is kept while your account exists. Payment records are kept as long as required by tax law. When you delete your account we anonymise your profile and keep only the records we must retain.
06Your rights
Depending on where you live you may access, correct, export or delete your data and object to certain processing. Use Settings or the Contact page. You may complain to your local data protection authority.
07Cookies
We use strictly necessary cookies for sign-in sessions and security. We do not run advertising trackers.