Privacy Policy

1. Who we are

StartupXY LLP ("StartupXY", "we", "us") operates startupxy.com and the programs, diagnostics, courses, events and advisory services offered through it. This policy explains what personal information we handle, why we handle it, and the choices you have.

This policy applies to founders, applicants, mentors, investors, university and corporate partners, course participants, newsletter subscribers and website visitors.

2. Information we collect

We collect only what we need to assess, deliver and improve our work with you.

• Information you give us: name, email, phone, company, role, website, country, and anything you write into an application, contact form, diagnostic tool or survey.
• Venture material: pitch decks, business plans, financial models, product material, cap table summaries and other documents you upload or share with us.
• Program records: cohort participation, session notes, scores from readiness assessments, mentor feedback and course progress.
• Commercial information: billing contact details, invoices and payment status. Card details are handled by our payment processors, not by us.
• Technical information: IP address, device and browser type, pages viewed, referring links and similar analytics data collected through cookies.

3. How we use your information

• To evaluate applications and decide on admission to a program, fund process or engagement.
• To deliver services: mentoring, diagnostics, courses, reports, investor introductions and events.
• To communicate with you about your application, engagement, invoices and support requests.
• To send insights, event invitations and newsletters where you have asked to receive them.
• To improve our tools, curriculum and benchmarks using aggregated and de-identified data.
• To meet legal, tax, audit and regulatory obligations, and to protect against fraud and misuse.

4. Confidentiality of venture material

Material you share while applying or during an engagement is treated as confidential. We share it internally only with the team members, mentors or advisors working on your venture, and each of them is bound by confidentiality obligations.

We do not sell your venture material, and we do not share it with investors or partners without your specific permission for that introduction.

We may retain anonymised, non-identifying metrics — for example, sector, stage and readiness scores — to build ecosystem benchmarks. Nothing in those benchmarks identifies you or your venture.

5. Legal grounds for processing

Where the GDPR or comparable law applies, we rely on: performance of a contract with you; our legitimate interests in operating, securing and improving our programs; your consent for marketing communications and optional cookies; and compliance with legal obligations. You may withdraw consent at any time without affecting processing already carried out.

6. Sharing with third parties

We share personal information only with parties who help us run the business, and only to the extent needed.

• Service providers for hosting, storage, email delivery, analytics, scheduling, video conferencing, e-signature and payments.
• Mentors, expert operators and advisors engaged on your program, under confidentiality terms.
• Investors, corporates or institutional partners, only where you ask us to make an introduction.
• Professional advisors, auditors and regulators where required by law or to establish and defend legal claims.
• An acquirer or successor entity in the event of a reorganisation, merger or sale, subject to this policy.

7. International transfers

We work across India, the United States, the European Union and other markets, and our service providers may store data outside your country. Where information moves across borders, we use appropriate safeguards such as standard contractual clauses and provider commitments to equivalent protection.

8. Retention

We keep application material for up to 24 months after a decision unless you ask us to delete it sooner. Engagement records, contracts and financial documents are kept for the period required by contract, tax and accounting law. Newsletter data is kept until you unsubscribe.

9. Security

We use access controls, encryption in transit, restricted storage buckets and least-privilege permissions for uploaded documents. No system is perfectly secure, so please avoid sending material you consider highly sensitive through unprotected channels; ask us for a secure route instead.

10. Your rights

Subject to local law, you may request access to your personal information, correction of inaccurate data, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interests. You may also unsubscribe from marketing at any time using the link in our emails.

To exercise a right, write to privacy@startupxy.com. We respond within 30 days and may ask you to verify your identity. If you are in the EU or UK, you may also complain to your local data protection authority.

11. Cookies

We use essential cookies for site functionality and analytics cookies to understand which pages and tools are used. You can block or delete cookies in your browser settings; essential cookies are required for parts of the site to work.

12. Children

Our services are intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as our services and legal obligations change. The effective date below shows the latest version, and material changes will be notified by email or a notice on the site.

14. Contact

StartupXY LLP · privacy@startupxy.com. For anything relating to an engagement or application, you can also write to team@startupxy.com.