legal · printout
Privacy Policy
An idea is often the most personal thing a person types into a computer. This policy exists to make that one sentence literally true, in the product and in the plumbing under it.
1. What we collect
- Account data: your email address, sign-in method, and a referral code if you used one.
- Idea data: the idea name and description you type into the Idea Computer, stored on your build record.
- Build data: build status, stage events, timings, results, and delivery links.
- Preferences: theme (CRT or paper), phosphor colour, FX and sound choices, so the machine looks and sounds the same on every device.
- Payment data: handled by a hosted card checkout. Card numbers never touch StartIUP servers. We keep the receipt: amount, credits granted, time.
- Support data: messages you send us, and the email log of what we send you.
2. Why we collect it
To run your builds, deliver your files, keep your balance honest, email you when work finishes, and answer when you write to us. That is the complete list. We do not build advertising profiles, we do not infer anything about you from your ideas, and product analytics work from aggregated, anonymized pipeline metrics only, never from idea text.
3. What we never do
- Never list, sell or show your ideas to anyone.
- Never show, sell or let you download the internal business blueprint the pipeline creates. It is transient working material, kept for the duration of the build only.
- No third-party trackers on this site. No analytics beacons, no ad pixels, no social widgets.
- No third-party font loading. Every typeface is bundled with the app.
- No use of your idea data to train models. AI model providers work under zero data retention for training purposes.
- No pooling: idea inputs are never aggregated or analysed across users.
4. How builds handle your data
Your idea text passes through the build pipeline stage by stage, with each stage receiving only the fields it needs. Intermediate outputs live in transient memory for the duration of the build and are not persisted anywhere you or anyone else can browse. Build run logs record events, timings and error classes for 90 days, then are purged; aggregated metrics without idea content are kept indefinitely for reliability work. Your idea name and description remain on your build record so your "My builds" history works, stored in a dedicated, isolated database segment per user.
5. Who can access it
Internal access is role-based. Reading raw idea text requires a specific, scoped permission, is reserved for debugging or support, and every such access is written to the admin action log. We audit privacy adherence monthly on a sample of 100 builds with a 100% pass target, and run a data minimization review quarterly: any field we no longer need, we delete.
6. Cookies and local storage
We use exactly two kinds of storage: the sign-in session, and local storage for your theme, phosphor, FX and sound preferences. There are no tracking cookies, no advertising cookies, and nothing to consent to beyond the product working as you asked it to.
7. Your rights
- Access and export: your builds, files, purchases, credit history and proof records are downloadable from your account at any time, including after a demo expires.
- Correction: fix your account details on the account page.
- Deletion: ask us to delete your account and we delete your idea data, build records and personal data, except records the law makes us keep (payment receipts, the append-only proof ledger).
- Questions: privacy@startiup.com or the contact page.
8. Incidents
If we ever suspect your idea data was exposed, we investigate immediately, contain first and diagnose second, tell affected users plainly what was exposed and what we are doing about it, notify regulators where the law requires, and add the failing case to the audit set so it cannot quietly regress.
9. Changes
Changes to this policy update the date above. Material changes are emailed to signed-in users before they take effect.