Privacy Policy

1. Introduction

Welcome to ListMyStartup.app ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data collection, processing, and your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using our platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Data Controller

The data controller responsible for your personal information is:

For any questions, concerns, or requests regarding your personal data, please contact us at the email address above.

3. Information We Collect

3.1 Authentication Data

When you create an account, we collect:

• Email address (required for account creation)
• Password (hashed and encrypted)
• OAuth provider information (if you sign in with Google or other providers)
• Account creation date and last login timestamp

3.2 Profile Information

You may choose to provide:

• Display name or username
• Bio or description
• Profile avatar/image
• Social media links

3.3 Usage Data and Analytics

We automatically collect certain information when you use our platform:

• IP address and approximate location
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Interactions with features (votes, comments, submissions)
• Referral sources

Note: Analytics data is only collected with your explicit consent via our cookie banner.

3.4 Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Necessary cookies: Authentication, security, and basic functionality (always active)
• Analytics cookies: Understanding how users interact with our platform (requires consent)
• Preference cookies: Storing your UI preferences and settings (requires consent)

For detailed information about our cookie usage, please see our Cookie Policy section below.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you explicitly consent to analytics cookies or marketing communications
• Contract: To provide our services, create and manage your account, and process your submissions
• Legitimate Interest: To improve our platform, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our services
• To create and manage your user account
• To process and display your startup submissions
• To enable voting, commenting, and community features
• To send you important service-related communications
• To analyze platform usage and improve user experience (with consent)
• To prevent fraud, abuse, and ensure platform security
• To comply with legal obligations

6. Data Sharing and Third-Party Services

We do not sell your personal information. We may share your data with:

6.1 Service Providers

• AWS (Amazon Web Services): Hosting, database storage, and email delivery via SES
• Google: OAuth authentication (if you choose to sign in with Google)
• Analytics Providers: Only with your explicit consent via cookie preferences

6.2 Public Information

The following information is publicly visible on our platform:

• Your username/display name
• Your profile bio and avatar
• Startups you submit
• Votes and comments you make

6.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained until you delete your account or request deletion
• Submitted content: Retained until you delete it or your account is deleted
• Analytics data: Retained for up to 26 months (with consent)
• Contact form submissions: Retained for 30 days for audit purposes
• Legal records: May be retained longer if required by law

You can request deletion of your data at any time by contacting us at contact@listmystartup.app.

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of Access (Article 15): Request a copy of your personal data
• Right to Rectification (Article 16): Correct inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Limit how we use your data
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at contact@listmystartup.app. We will respond within 30 days.

10. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request information about what personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" of personal information (we do not sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, please contact us at contact@listmystartup.app or use our contact form.

Do Not Sell My Personal Information

11. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on our platform. You can manage your cookie preferences at any time through our settings page or via the cookie banner.

11.1 Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled:

• Authentication and session management
• Security and fraud prevention
• Cookie consent preferences

11.2 Analytics Cookies

These cookies help us understand how visitors interact with our platform (only with your consent):

• Page views and navigation patterns
• Feature usage statistics
• Performance metrics

11.3 Preference Cookies

These cookies remember your preferences (only with your consent):

• UI theme and display preferences
• Language settings
• Other user interface customizations

12. International Data Transfers

Your information may be transferred to and processed in countries outside the EEA, including the United States, where our service providers are located. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions where applicable
• Other appropriate safeguards as required by GDPR

13. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS)
• Hashed and encrypted passwords
• Secure cloud infrastructure (AWS)
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14. Children's Privacy

Our platform is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at contact@listmystartup.app, and we will delete such information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes (if you have an account)

Your continued use of our platform after changes become effective constitutes acceptance of the updated policy.