Privacy Policy

Your privacy matters to us. Here's how we handle your data.

Last updated: October 2026

Data Encryption

All data is encrypted in transit and at rest

No Selling Data

We never sell your personal information

Minimal Collection

We only collect what we need

Easy Deletion

Request data deletion anytime

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, submit a profile, subscribe to our newsletter, or contact us.

Account Information: Name, email address, password, and profile information you choose to share.

Usage Data: Information about how you interact with our platform, including pages visited, searches performed, and features used.

Device Information: Browser type, IP address, device type, and operating system for security and optimization purposes.

Communications: Records of your correspondence with us, including support requests and feedback.

2. How We Use Your Information

We use the information we collect to:

- Provide, maintain, and improve our services - Process transactions and send related information - Send technical notices, updates, security alerts, and support messages - Respond to your comments, questions, and customer service requests - Personalize and improve your experience on our platform - Monitor and analyze trends, usage, and activities - Detect, investigate, and prevent fraudulent transactions and abuse

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

- With Your Consent: When you explicitly authorize us to share your information - Service Providers: With vendors who assist us in operating our platform (hosting, analytics, email delivery) - Advertising Partners: Meta, Reddit and LinkedIn receive hashed identifiers and event data such as page visits, sign-ups and purchases to measure and improve our ads, only as described in the Cookies section. We are not paid for it. Their own privacy policies govern what they do with it. - Legal Requirements: When required by law, subpoena, or government request - Business Transfers: In connection with any merger, acquisition, or sale of company assets - Protection: To protect the rights, property, or safety of StartupHub.ai, our users, or others

4. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience:

- Essential Cookies: Required for basic site functionality (authentication, security) - Referral Cookie (sh_ref): When you arrive through a partner's or member's referral link, a first-party cookie records that referral code for 60 days so the referrer can be credited under their agreement with us. It holds no personal data and is not used to track you across other sites. - Visitor ID (sh_vid): A first-party cookie that holds a random ID for your browser and contains nothing about you. The same ID is also kept in local storage, so clearing cookies does not replace it. When you use a tool, we record that ID with the tool, your account if signed in, the first part of your IP address, your country and the referrer. We use it to keep free limits fair and block abuse, such as one browser on several free accounts or one account on many networks, and to note which tools you return to for plan offers we show or email. It lasts up to 400 days, is never shared with or read by another company and is not used for advertising. - Analytics Cookies: Help us understand how visitors interact with our site - Preference Cookies: Remember your settings and preferences - Advertising Cookies and Pixels: We use the Meta Pixel, the Reddit Pixel and the LinkedIn Insight Tag to measure whether our ads led to a visit, a sign-up or a purchase and to show ads to visitors. In the European Economic Area, the United Kingdom and Switzerland they run only after you turn advertising on. Everywhere else they run unless you turn advertising off. A Global Privacy Control signal counts as turning it off. - Server-side Conversions: When advertising is allowed, our servers also send sign-up and first purchase events to Meta, Reddit and LinkedIn with your email address hashed and the identifiers those networks set in your browser. This lets each conversion be counted once even when a browser blocks the pixel.

You can change your choice at any time with the "Your Privacy Choices" link in the site footer. You can also control cookies in your browser settings, though turning some off may limit how the site works.

5. Data Security (SSL)

We implement industry-standard security measures to protect your data:

- All data transmission is encrypted using TLS/SSL - Data at rest is encrypted using AES-256 - Regular security audits and vulnerability assessments - Access controls and authentication requirements for our team - Secure data centers with physical and environmental safeguards

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

6. Your Rights

Depending on your location, you may have the following rights:

- Access: Request a copy of the personal data we hold about you - Correction: Request correction of inaccurate or incomplete data - Deletion: Request deletion of your personal data - Portability: Request transfer of your data to another service - Objection: Object to certain processing of your data - Restriction: Request restriction of processing under certain circumstances

To exercise these rights, please contact us at [email protected].

7. Data Retention

We retain your personal data for as long as necessary to:

- Provide our services to you - Comply with legal obligations - Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

9. GDPR (European Economic Area and UK)

If you are in the EEA or the UK, we process personal data under the General Data Protection Regulation (GDPR) and the UK GDPR.

Lawful bases: contract (to provide the account and services you request); legitimate interests (to operate, secure and improve the directory); consent (where we ask for it, including optional analytics and advertising cookies); and legal obligation (tax, fraud and lawful requests).

You may request access, correction, deletion, restriction, portability, or object to processing. You may also withdraw consent where processing is based on consent. We do not sell personal data.

To submit a GDPR request, email [email protected] or use the form at https://www.startuphub.ai/legal/takedown. We respond within one month. You may lodge a complaint with your local supervisory authority.

10. CCPA / CPRA (California)

If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the CPRA.

We do not sell personal information for money. Under the CCPA, using these advertising tools may count as sharing personal information for cross-context behavioral advertising. You can opt out with the Your Privacy Choices link in the site footer. We treat a Global Privacy Control signal as an opt-out. We do not use sensitive personal information to infer characteristics.

You may request to know, delete or correct the personal information we hold about you, and you may opt out of sharing for advertising at any time. We will not discriminate against you for exercising these rights.

To submit a CCPA request, email [email protected] or use https://www.startuphub.ai/legal/takedown. We will verify the request before acting on it.

Questions About Privacy?

If you have any questions about this Privacy Policy, please contact us.

[email protected]