Privacy Policy
Last updated: August 28, 20260. Data Controller
The data controller for StartupFound (startupfound.com) is Bump Team Inc, 30 North Gould Street, Sheridan, WY 82801, United States. For any privacy request, contact [email protected].
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, submit a startup, or contact us. This may include:
- Name and email address
- Profile information and preferences
- Startup information and descriptions
- Voting and interaction data
- Communications with us
- Payment and billing information (when you make a purchase)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process and display startup submissions
- Send you updates and notifications
- Respond to your comments and questions
- Monitor and analyze usage patterns
- Detect and prevent fraud and abuse
3. Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:
- With your explicit consent
- With Paddle, our payment processor and Merchant of Record, to process purchases
- To comply with legal obligations
- To protect our rights and safety
- In connection with a business transfer or merger
When you make a purchase, payments are handled by Paddle (our Merchant of Record). Paddle collects and processes your payment and billing details to complete the transaction, in accordance with its own privacy policy. We do not store your full payment card details.
3a. Legal Bases, Retention and Processors
Legal bases (UK/EU GDPR).
- Contract — creating your account, publishing your listing, and processing a Premium Promote purchase.
- Legitimate interests — curating submissions, preventing fraud and abuse, and measuring aggregate site usage.
- Legal obligation — keeping transaction and tax records.
- Consent — optional marketing emails, where applicable.
Retention. Account and profile data are kept while your account exists and deleted within 30 days of account deletion. Published listings remain public until you delete them. Transaction records are retained for up to 7 years to meet tax and accounting obligations.
Processors we use. Paddle.com Market Ltd (payments and Merchant of Record, incl. ProfitWell/Retain analytics), Supabase (database, authentication and file storage), Vercel (hosting and CDN), Cloudflare (image delivery), Resend (transactional email), PostHog (product analytics), OpenAI (automated moderation of submitted content).
International transfers. Some processors are located outside your country, including in the United States. Where personal data is transferred outside the UK/EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
4. Data Security
We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
5. Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie settings through your browser preferences.
6. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Opt-out of marketing communications
- Lodge a complaint with supervisory authorities
7. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.