Legal

Privacy Policy

Last updated · October 16, 2026

Summary

Startup Suite is a financial planning product. We collect the minimum data needed to run the service, treat connected financial data with extra care, and never sell your information. This policy explains what we collect, why, who we share it with, and how to exercise your rights.

What we collect

Account and early-access data: name, work email, company name, billing details, and authentication identifiers managed through our identity provider. If you join early access, this also includes the role and the short description of what you are building that you enter in the form, plus an anonymous visitor ID saved in your browser and any campaign (utm) tags in the page address when you submit.
Product data: financial models, scenarios, forecasts, and documents you create in Startup Suite.
Connected financial data: when you connect an integration (e.g. accounting, payments, CRM), we get read-only access and import only the fields you authorise. We do not pull data you have not mapped.
Operational data: IP address, browser type, device identifiers, and server logs used for security, fraud prevention, and reliability.
Support communications: messages you send us via email, chat, or in-product support.

Connected financial data

Because Startup Suite works with sensitive business numbers, we apply additional controls to connected data:

Connections use OAuth where supported. You grant access in the source tool and can revoke it at any time.
We sync only the entities and fields you map; we do not ingest your entire ledger by default.
Connected data is used solely to operate the product (forecasting, reporting, variance analysis), not for advertising or resale.
Sync failures are logged and surfaced to your workspace admins; we do not silently drop data.

How we use your data

To provide, maintain, and improve Startup Suite
To authenticate you and secure your account
To communicate about your account, product updates, and support requests
To meet legal, tax, and regulatory obligations
To detect abuse, fraud, and security incidents

We do not use your financial model or connected ledger data to train public AI models, and we do not sell personal data to third parties.

Sub-processors

We use vetted sub-processors to run the platform. Typical categories include cloud hosting, identity/authentication, waitlist management (LoopLift, for early-access sign-ups), email delivery, error monitoring, and (if enabled) product analytics. A current list is available on request at privacy@startupsuite.ai. We require contractual data-protection terms with each sub-processor.

Security

We encrypt data in transit (TLS 1.2+) and at rest. Access to production systems is restricted, logged, and reviewed. We run regular backups and test restore procedures. No method of transmission or storage is 100% secure; if you believe your account has been compromised, contact us immediately.

Retention

We retain account and product data for as long as your account is active. After closure, we delete or anonymise data within 90 days unless a longer period is required for legal, accounting, or dispute-resolution purposes. Backup copies may persist for a limited period before being overwritten.

International transfers

Startup Suite is operated by Startup Suite Pty Ltd from Melbourne, Australia. If you access the service from outside Australia, your data may be processed in Australia or in other countries where our infrastructure providers operate, such as the United States. Where required, we rely on appropriate safeguards for those transfers.

Your rights

Depending on where you live, you may have the right to access, export, correct, restrict, or delete your personal data, and to object to certain processing. Email privacy@startupsuite.ai and we will respond within 30 days. You may also lodge a complaint with your local data-protection authority (in Australia, the Office of the Australian Information Commissioner).

Children

Startup Suite is a business product and is not directed at children under 16.

Changes

We may update this policy as the product evolves. Material changes will be communicated by email or in-product notice at least 14 days before they take effect.

Contact

Questions about privacy: privacy@startupsuite.ai