Privacy Policy
Last updated: 24 September 2026
1. Who is responsible for your data
The data controller is MB Startai, a Lithuanian small partnership, company code 306433627, registered address Plytų g. 12-19, LT-00132 Palanga, Lithuania.
Contact for privacy questions: hello@starta.so
2. What personal data we collect
2.1 If you're a founder (create an account)
- Your email address (via account sign-up).
- Everything you enter about your project: name, one-line description, category, stage, website, description, target market, user count, revenue, growth trend, team size, founder background (free text — please do not include sensitive personal data about yourself or others here unless necessary), fundraising status, and valuation.
- We do not currently collect a separate founder name field, or accept file uploads (e.g. pitch decks) — only text you type.
2.2 If you're an investor
- If you contact us via the "Contact us" form: your name, email, fund name, and message.
- If you purchase a disclosure (€99): only the email address Stripe collects at checkout. We do not require or create an investor account.
2.3 Payment data
STARTA does not store your card details. Payments are processed entirely by Stripe on Stripe's own hosted checkout page. We store only the payment amount, currency, status, and Stripe's own reference IDs for the transaction.
3. How we use your data
- To generate your STARTA Score assessment.
- To generate and issue your certificate.
- To operate the Marketplace (anonymized listing) and, if you request it, the investor disclosure flow.
- To process payments and refunds.
- To respond to inquiries.
4. What we send to third parties
| Recipient | What is sent | Purpose |
|---|---|---|
| Stripe | Payment amounts, your email (collected by Stripe directly) | Payment processing |
| Supabase | Your account and project data | Database and authentication hosting |
| Anthropic (Claude API) | Your project submission text only (name, description, market, background, etc.) — never your email or account information | Assessment scoring assistance |
| Vercel | — | Website hosting |
We do not use any analytics or advertising trackers. STARTA sets no cookies of its own beyond a standard, first-party authentication session cookie (via Supabase) needed to keep you logged in. Stripe's own checkout page sets its own cookies on Stripe's domain during payment, governed by Stripe's privacy policy.
5. Where your data is stored
Our database is hosted by Supabase in Frankfurt, Germany (EU). Your data does not leave the European Union as part of our standard hosting.
6. Marketplace anonymization
If you submit your project to the Marketplace, we generate an anonymized public listing that structurally excludes identifying details (your project's real name, website, and other identifying fields are not shown), with an additional automated check for details that might still identify you. You cannot edit this anonymized content yourself.
7. Investor disclosure
If an investor pays to request full disclosure of your listing, you must explicitly approve the request before any of your real, non-anonymized information (name, website, description, target market, founder background, and contact email) is shown to that investor. You may decline any request.
8. How long we keep your data
We currently retain account and project data indefinitely; we do not have automated deletion or retention limits in place. If you would like your data deleted, contact hello@starta.so — please note that, at present, we are unable to delete an account with an active, unrevoked certificate (see our Terms of Service). We are working on a complete deletion process and will update this policy when it is available.
9. Your rights (GDPR)
As we process personal data of individuals in the EU, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion, subject to the limitation in Section 8;
- object to or restrict certain processing;
- receive your data in a portable format;
- lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija).
To exercise any of these rights, contact hello@starta.so.
10. Children
STARTA is not directed at, and we do not knowingly collect data from, anyone under 18.
11. Changes to this policy
We may update this policy from time to time; material changes will be reflected by an updated "Last updated" date.
12. Contact
MB Startai
Plytų g. 12-19, LT-00132 Palanga, Lithuania
Company code: 306433627
hello@starta.so