Legal

Privacy Policy

Last updated: 2026-07-05

This Privacy Policy explains how Ameno Teknoloji Limited Şirketi (brand "StartupInvest", "we"), the data controller, collects, uses, and protects your personal data when you use our mobile app and website (the "Service"). Our registered address is Barbaros Mh. Lale sk. no 2 /13 Ataşehir İstanbul. We are committed to complying with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

1. Data We Collect

1.1 Data you provide

  • Account: name, email, password (hashed), role (founder or investor).
  • Profile: startup details (name, sector, stage, traction), investor criteria (check size, stages, sectors), headline, bio, photos you upload.
  • Pitch decks: PDF files you upload for AI analysis and investor sharing.
  • Communications: messages between founders and investors sent through the Service.

1.2 Data collected automatically

  • Usage data: screens viewed, taps, in-app events (used for product improvement).
  • Device data: device model, OS version, locale, IP address (used for security and abuse prevention).

1.3 Purchase data

When you buy a subscription, the App Store or Google Play processes the payment. We receive only a purchase token and receipt that lets us verify the purchase and unlock the paid features. We never see your full card number or billing details — those stay with Apple or Google.

We process your personal data under the following legal bases:

  • Performance of a contract (Art. 6(1)(b)) — to operate your account and provide the Service you signed up for.
  • Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and product analytics, where our interest does not override your privacy rights.
  • Consent (Art. 6(1)(a)) — for optional analytics or marketing communications; you can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)) — where we are required to retain data by law (e.g. tax records).

3. How We Use Your Data

  • To create and manage your account.
  • To match founders with investors based on the criteria you provide.
  • To run AI-powered analysis on pitch decks you upload.
  • To enable messaging between matched users.
  • To detect fraud, spam, and security threats.
  • To improve the Service through aggregated, anonymized analytics.

4. Sharing and Processors

We share data with the following categories of third parties:

  • Supabase (database and authentication) — hosts your account and profile data in secured PostgreSQL tables with row-level security.
  • Apple App Store / Google Play — handle in-app purchases. Each platform processes its own payment and shares only the data necessary to validate the purchase.
  • AI providers — pitch deck content is sent to a language-model API for analysis. Content is processed for the purpose of generating your report and is not used to train models on your data.
  • VirusTotal — scans uploaded pitch decks for malware before they are shared with investors.

We do not sell your personal data to third parties.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your profile, decks, and messages within 30 days. Some data may be retained in backups for up to 90 days, and certain records (e.g. financial transactions) may be kept longer where required by law.

6. Security

We protect your data with industry-standard measures including encrypted transit (TLS), row-level security in the database, and access controls on production systems. No method of storage is 100% secure, but we work to minimize risk.

7. International Data Transfers

Your data may be processed in countries other than your own, including the EU, the United States, and Turkey. Where data leaves the EU, we rely on Standard Contractual Clauses or another approved transfer mechanism.

8. Your Rights

Under the GDPR and KVKK, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Restrict or object to processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent at any time (without affecting prior processing).
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@startupinvest.net or use the "Delete account" option in the app's settings. We respond within 30 days.

9. Children's Privacy

The Service is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email. Continued use after changes take effect constitutes acceptance.

11. Contact

Questions about your privacy? Email privacy@startupinvest.net.