Privacy policy

This policy explains what data starty.tech collects today and why. There is a waitlist, which you can also join at the end of the idea check-up, and optional accounts to save the tools (see "Accounts and tools"), with an optional community to find people to build with (see the community section). For kit purchases see "Kit purchases". Your Starty Route progress is only stored in your browser.

Data controller

The data controller is Starty. For anything related to privacy, write to info@starty.tech.

What we store

• Your email address, which is required to join.
• Your name, only if you choose to give it.
• The date you signed up.
• Which form you used (for example, the top or the bottom of the page, or the check-up) and its language.
• If you sign up from the idea check-up: your answers, your idea if you write it, and the recommended level and steps, so we can send you your plan.
• The fact that you ticked the consent box.

Your IP address is used briefly, in the server's memory, to limit repeated submissions. It is not stored in the waitlist table.

Purpose and legal basis

We use your data to let you know when Starty opens and to send you a welcome email. The legal basis is your consent (Article 6(1)(a) GDPR), which we ask for in the form and which you can withdraw at any time. We don't use your email for third-party advertising or to build profiles.

How long we keep it

We keep your data until we send the launch notice, or until you ask us to delete it, whichever comes first.

Processors

The database runs on Supabase (European Union, Paris), the site is hosted on Vercel, and the waitlist and sign-in emails are sent by Resend, all acting as data processors. Visits are measured with Vercel Web Analytics, which is anonymous, aggregated and cookie-free, and is never linked to your waitlist email. If any processing takes place outside the European Economic Area, the owner will document the safeguards for that transfer.

Your rights

You can access, correct or delete your data, restrict or object to its processing, and ask for a portable copy, by writing to info@starty.tech. You can also withdraw your consent. If you're not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es).

Accounts and tools

You can create an account to save the tools (Sole trader or SL?, cash flow, canvas and validation board). There's no password: we email you a link and a code to sign in.

• Your email address, to identify your account and send you the sign-in link.
• What you type into the tools and the canvas versions you save, with their dates. Only your account can read them.
• Technical session data: when you signed up and last signed in, and a session cookie needed to keep you signed in.

If you use the calculator without an account, your numbers stay in your browser's local storage and never reach us.

Purpose and legal basis. To give you access to your account and keep your work so you can come back to it. The legal basis is providing the service you ask for when you create the account (Article 6(1)(b) GDPR). We don't use this data for advertising or profiling, and creating an account doesn't add you to the waitlist.

Where it's stored. In Supabase, on a server in the European Union (Paris, France). The sign-in email is sent by Resend, as a data processor.

How long we keep it and deletion. We keep it for as long as you have the account. To delete it, write to info@starty.tech from the account's email address and we'll delete it together with everything saved in the tools. You can clear each tool at any time with "Start over" and delete each canvas version with "Delete".

“Find someone to build with” community

If you have an account, you can create an optional community profile to find a business partner, a validation buddy or someone to swap skills with. It's voluntary and off by default: nobody sees it until you switch on "I want to be seen".

• What you write in the profile: an alias (your real name isn't needed), your mode and project stage, your idea in one sentence if you add it, the category, what you're looking for, what you bring and what you'd like to receive, your topics, traits, province, whether you're happy to work remotely, and languages.
• If you did "Find your purpose" in this browser, your driver profile and the cause you chose, to improve suggestions. They're only stored if you save the profile.
• The contact you choose to share (email, LinkedIn, Instagram or Telegram). Only the person you mutually match with sees it.
• Your "I'm interested" and "pass" answers, your matches, the blocks and reports you make, with their dates, and when you accepted the community pact.

What others see. Only registered people who are also visible see your alias and the public profile data. They never see your account email. We don't ask for date of birth, gender, postcode or a photo.

Purpose and legal basis. Suggesting compatible people and putting you in touch if you both want to. The legal basis is your consent (Article 6(1)(a) GDPR), which you give when you create the profile and can withdraw at any time by hiding or deleting it. Reports are handled on the basis of our legitimate interest in keeping the community safe (Article 6(1)(f)). When you get a match we email you, without including the other person's data.

Suggestions. They're worked out with fixed rules (what you're looking for, what you bring, traits, area and language), without artificial intelligence and with no legal effects. They only decide the order in which you see people.

How long we keep it and deletion. "Delete my profile" immediately removes the profile together with your answers, matches, blocks and reports. Deleting your account does too. Profiles inactive for 12 months are deleted. People you already matched with may have saved your contact outside Starty.

Full-access purchases

If you buy full access to the validated ideas, the payment is processed by Stripe and Starty never sees your card details. We store your email, your name if you give it, the amount, any discount code used, the language, the Stripe identifiers and the fact that you accepted immediate delivery. We use them to open access on that email, help you and meet accounting and tax obligations. The legal basis is performing the contract (Article 6.1.b GDPR) and legal obligation (Article 6.1.c). They are kept for as long as commercial and tax law requires, generally six years. Stripe is also a controller of its own payment data.

Children

The waitlist and accounts are not aimed at children under 14, and the community is for people aged 18 or over only. If a parent or guardian believes we have received a child's email, they can ask us to delete it.

Automated decisions

Joining the waitlist or using the tools doesn't lead to any automated decision with legal effects. The tools' results are estimates for guidance. The future product will use AI as support, not as a substitute for a professional.

This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.