We care about your privacy

Startinbox ("we", “our", “us“) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, products, and services in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

What information do we collect?

We may collect the following personal and business information:

Name, for identification and communication purpose
Email address, to send deliverables, updates, and account information
WhatsApp number, to deliver ideas and updates via WhatsApp
Business/project details, to tailor your idea deliverables
Payment details, processed securely by our payment providers (we do not store full card details)
Usage data, such as IP address, browser type, and website activity

How do we use your information?

Your information will be used for the following purposes:

Delivering purchased startup idea packages via email and WhatsApp
Processing payments and providing receipts
Communicating updates, promotions, or important notices (with your consent)
Improving our services and website experience
Meeting legal, tax, and compliance obligations

Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contract performance, to provide the services you request
Consent, for marketing communications and certain WhatsApp updates
Legitimate interests, for business analytics and service improvements
Legal obligations, to comply with applicable laws

Data Sharing & Transfers

We will never sell your personal data. We may share your information with:

Payment processors (e.g., Stripe, PayPal)
Cloud hosting & delivery partners (e.g., email, WhatsApp API services)
Legal authorities when required by law

WhatsApp Communications

When you provide your WhatsApp number, you consent to receiving deliverables and updates via WhatsApp. You may opt-out at any time by messaging “STOP” or contacting us at [insert email].

Data Retention

We keep your personal data only as long as necessary:

Idea package delivery records – 12 months
Payment records – as required by tax laws (up to 7 years)
Marketing communications – until you opt-out

Your GDPR Rights

You have the right to:

Access your personal data
Correct inaccurate information
Delete your data ("right to be forgotten")
Restrict or object to processing
Data portability – request a copy in machine-readable format
Withdraw consent at any time

To exercise your rights, email [insert email].

Security Measures

We implement industry-standard security measures, including:

SSL encryption for all data transfers
Secure, access-controlled storage systems
Regular security audits and vulnerability scans
Minimizing data collection to only what is necessary