Last updated: 20 February 2026
This Privacy Policy explains how [StartupPal Ltd] (“StartupPal”, “we”, “us”, “our”) collects, uses, discloses and protects personal data when you use the StartupPal mobile application and related services (together, the “App”).
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner in accordance with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and, where applicable, the EU General Data Protection Regulation (“EU GDPR”).
By using the App, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for your personal data is:
StartupPal Ltd
18 Longridge Road
London
SW5 9SL
Jurisdiction, for England and Wales
Contact email: contact@startuppal.co.uk
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Account and identity data
• Name (if provided).
• Email address (including email from social login providers).
• Login provider information (for example Google, Apple).
• Contact or business email you choose to provide for StartupPal and investor communication.
• Password (hashed, if using email and password sign-up).
2.2 Usage and device data
• App usage information (for example features used, session times, navigation flows).
• Device information (for example device model, operating system version, unique device identifiers).
• Approximate location or locale (for example language, country derived from store settings), where permitted by your device settings.
• Log data, such as IP address, timestamps and error or crash reports.
2.3 Content data
• AI-generated scripts created or stored in the App.
• Video recordings, including audio, images and overlays.
• Metadata related to videos (for example duration, storage location, associated startup name, plan type).
• Investor preferences you select (for example industry, investor type, funding stage).
2.4 Subscription and billing data
• Plan type (Free, Starter, Plus).
• Subscription status and renewal information (via Apple App Store, Google Play and RevenueCat).
• Purchase history (product IDs, dates, status) as reported by the app stores or RevenueCat.
• We do not receive or store your full payment card details used for Apple or Google in-app purchases.
2.5 Communication data
• Messages, enquiries or feedback you send to us (for example via email, in-app contact or support forms).
• Marketing preferences, where you opt in to receive news or offers from us.
3. How We Collect Your Data
We collect personal data in the following ways:
3.1 Directly from you
• When you create an account or update your profile.
• When you use the App to generate scripts, record videos or select investor preferences.
• When you contact us for support or send feedback.
• When you choose to opt in to marketing communications.
3.2 Automatically
• When you use the App, we may automatically collect usage and device data through technologies such as log files and analytics tools.
3.3 From third parties
• Authentication providers such as Google and Apple (for example identity tokens, email address).
• App stores (Apple App Store and Google Play) regarding subscription status and purchases.
• Subscription management providers such as RevenueCat (for example entitlements, product IDs, subscription events).
• Cloud service providers such as Firebase (authentication, analytics, crash reporting) and AWS (video storage) as part of providing the service.
4. Legal Bases for Processing
We process your personal data on the following legal bases:
• Performance of a contract: to create and maintain your account, provide access to the App and its features, and manage your subscription.
• Legitimate interests: to operate, improve and secure the App, analyse usage, prevent abuse and communicate with you about the App (for example important updates, service messages).
• Consent: for certain marketing communications and, where required, for specific analytics or optional features.
• Legal obligations: to comply with laws, regulations or lawful requests from authorities.
5. How We Use Your Personal Data
We use personal data for the following purposes:
5.1 To provide and operate the App
• Creating and managing user accounts.
• Authenticating users via email/password, Google or Apple sign-in.
• Generating AI-assisted scripts and storing them for your use.
• Enabling teleprompter and video recording features.
• Uploading and storing videos in cloud storage (for example AWS S3).
• Applying plan-based limits to features and storage.
5.2 To manage subscriptions and payments
• Determining your plan (Free, Starter, Plus) via app store purchases and RevenueCat.
• Applying entitlements and access rules based on your subscription.
• Synchronising subscription status between RevenueCat, app stores and our backend.
5.3 To distribute your content to investors (Plus and relevant plans)
• Storing your investor preferences and mapping them to investor categories.
• Sending or providing access to your videos to investors in our database, where you request this via the App and your plan permits it.
5.4 To communicate with you
• Sending service-related emails (for example account verification, security alerts, changes to terms).
• Responding to your support requests and feedback.
• With your consent, sending marketing or promotional communications about StartupPal’s features, updates or offers.
5.5 To improve and secure the App
• Monitoring and analysing usage patterns and performance.
• Diagnosing and fixing errors, crashes or technical issues.
• Preventing abuse, fraud and unauthorised access.
6. How We Share Personal Data
We may share personal data with:
6.1 Service providers
Trusted third-party service providers that help us operate the App, including:
• Firebase (authentication, database, analytics, crash reporting).
• RevenueCat (subscription and entitlement management).
• AWS or other cloud storage providers (video and file storage).
• Email service providers (for example to send verification and notification emails).
• Analytics and monitoring providers.
These providers process personal data on our behalf and are bound by contractual obligations to protect your data and use it only as instructed by us.
6.2 Investors (Plus and applicable plans)
Where you actively choose to send your video and related information to investors via the App:
• We may share links to your video and associated metadata (for example startup name, high-level sector) with relevant investors in our database, according to the preferences you select.
• Once shared, investors will handle any personal data they receive in accordance with their own policies. We are not responsible for their independent use of your data.
6.3 Legal and regulatory authorities
We may disclose personal data where we believe it is necessary to:
• Comply with a legal obligation.
• Respond to lawful requests from courts, regulators or law enforcement.
• Protect our rights, property or safety, or that of our users or others.
6.4 Business transfers
In the event of a merger, acquisition, restructuring or sale of some or all of our assets, personal data may be transferred as part of the transaction, subject to appropriate safeguards.
We do not sell your personal data to third parties.
7. International Transfers
We may transfer personal data outside the UK or European Economic Area (EEA), for example where our service providers are located in other countries.
Where we do so, we will ensure that appropriate safeguards are in place, such as:
• Adequacy decisions by the UK or European Commission.
• Standard contractual clauses or equivalent mechanisms approved by relevant authorities.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including:
• For as long as your account is active and for a reasonable period thereafter for backup, audit and dispute resolution purposes.
• Video content for the durations described in the App for each plan (for example 7 days, 30 days or while the subscription remains active), after which it may be deleted or anonymised.
• Longer where required by law or necessary to establish, exercise or defend legal claims.
When personal data is no longer needed, we will delete or anonymise it in a secure manner.
9. Your Rights
Depending on your location and subject to certain conditions, you may have the following rights in relation to your personal data:
• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request restriction of processing in certain circumstances.
• Right to data portability: to request a copy of your data in a structured, commonly-used and machine-readable format.
• Right to object: to object to certain types of processing, including direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at [insert contact email]. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).
10. Marketing Communications
If you opt in to receive marketing emails from us:
• We may send you information about new features, offers or updates to StartupPal.
• You can opt out at any time by using the unsubscribe link in the email or by contacting us.
Service communications (for example security alerts or changes to terms) are not considered marketing and you may receive these even if you have opted out of marketing.
11. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include:
• Encryption in transit where appropriate.
• Access controls and authentication.
• Regular monitoring and logging.
However, no system can be completely secure. You are responsible for keeping your login details confidential and for ensuring that any devices you use to access the App are properly secured.
12. Children
The App is not intended for use by children under 18, and we do not knowingly collect personal data from children under 18. If you believe that we have collected personal data from a child, please contact us and we will take appropriate steps to delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do so, we will update the “Last updated” date above and, where appropriate, notify you via the App or by email.
Your continued use of the App after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the App.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
• Email: contact@stratuppal.co.uk
• Postal address: Longridge Road, London SW5 9SL