Privacy Policy & Data Security

We collect only the information necessary to provide our financial intelligence services. This includes:

• Account information: email address and name when you create an account
• Financial data: revenue, expenses, cash balances, and other financial metrics you enter
• Usage data: how you interact with the platform to improve our services
• Login data: timestamps and general location for security purposes

All data is encrypted using industry-standard protocols to ensure your financial information remains private and secure.

Data at rest is encrypted with 256-bit AES encryption. Data in transit is protected with TLS 1.3 encryption. Database connections use SSL/TLS with certificate verification.

Your data is strictly isolated from other users. Our multi-tenant architecture ensures complete separation between accounts.

Each user can only access their own company's data. Role-based access controls enforce permissions within organizations. Database queries are scoped to prevent any cross-tenant data leakage.

Your data is used exclusively to provide the Startup FIOS service. We do not sell, rent, or share your financial data with any third parties for marketing or advertising purposes.

We may use anonymized, aggregated data to improve our scoring algorithms and provide industry benchmarks. No individually identifiable financial data is ever shared.

Your data is retained for as long as your account remains active. If you close your account, we will delete your data within 30 days of your request.

Backups containing your data are retained for up to 90 days for disaster recovery purposes and are then permanently deleted.

You have full control over your data. At any time, you may:

• Access: Request a complete copy of all data we hold about you
• Export: Download your financial data in standard formats
• Correct: Update or correct any inaccurate information
• Delete: Request permanent deletion of your account and all associated data
• Restrict: Limit how we process your data

We use carefully selected third-party services to deliver our platform. Each provider meets our strict security requirements:

• Vercel: Application hosting with edge network delivery and automatic HTTPS
• Neon: PostgreSQL database hosting with encryption at rest and in transit
• All third-party providers are contractually bound to protect your data