Privacy Policy

Summary

Startup Suite is a financial planning product. We collect the minimum data needed to run the service, treat connected financial data with extra care, and never sell your information. This policy explains what we collect, why, who we share it with, and how to exercise your rights.

What we collect

• Account data: name, work email, company name, billing details, and authentication identifiers managed through our identity provider.
• Product data: financial models, scenarios, forecasts, and documents you create in Startup Suite.
• Connected financial data: when you connect an integration (e.g. accounting, payments, CRM), we sync only the fields you authorise. We do not pull data you have not mapped.
• Operational data: IP address, browser type, device identifiers, and server logs used for security, fraud prevention, and reliability.
• Support communications: messages you send us via email, chat, or in-product support.

Connected financial data

Because Startup Suite works with sensitive business numbers, we apply additional controls to connected data:

• Connections use OAuth where supported, you grant access in the source tool and can revoke it at any time.
• We sync only the entities and fields you map; we do not ingest your entire ledger by default.
• Connected data is used solely to operate the product (forecasting, reporting, variance analysis), not for advertising or resale.
• Sync failures are logged and surfaced to your workspace admins; we do not silently drop data.

How we use your data

• To provide, maintain, and improve Startup Suite
• To authenticate you and secure your account
• To communicate about your account, product updates, and support requests
• To meet legal, tax, and regulatory obligations
• To detect abuse, fraud, and security incidents

We do not use your financial model or connected ledger data to train public AI models, and we do not sell personal data to third parties.

Sub-processors

We use vetted sub-processors to run the platform. Typical categories include cloud hosting, identity/authentication, email delivery, error monitoring, and (if enabled) product analytics. A current list is available on request at privacy@startupsuite.co. We require contractual data-protection terms with each sub-processor.

Security

We encrypt data in transit (TLS 1.2+) and at rest. Access to production systems is restricted, logged, and reviewed. We run regular backups and test restore procedures. No method of transmission or storage is 100% secure; if you believe your account has been compromised, contact us immediately.

Retention

We retain account and product data for as long as your account is active. After closure, we delete or anonymise data within 90 days unless a longer period is required for legal, accounting, or dispute-resolution purposes. Backup copies may persist for a limited period before being overwritten.

International transfers

Startup Suite is operated from the United Kingdom. If you access the service from outside the UK, your data may be processed in the UK, the European Economic Area, or the United States (where our infrastructure providers operate). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, export, correct, restrict, or delete your personal data, and to object to certain processing. Email privacy@startupsuite.co and we will respond within 30 days. You may also lodge a complaint with your local data-protection authority.

Children

Startup Suite is a business product and is not directed at children under 16.

Changes

We may update this policy as the product evolves. Material changes will be communicated by email or in-product notice at least 14 days before they take effect.

Contact

Questions about privacy: privacy@startupsuite.co