Effective Date: March 15, 2026 | Last Updated: March 15, 2026
Startup16 ("Company," "we," "us," or "our") operates the Startup16 platform (startup16.com) and related services. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our Service. By accessing or using Startup16, you consent to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
Account Information: Name, email address, password (hashed), and account preferences when you register.
Project Data: Business ideas, phase inputs, descriptions, and all content you enter into the platform.
Payment Information: Billing details processed securely by our payment processor (Stripe). We do not store your full credit card number on our servers.
Communications: Information you provide when contacting support or submitting feedback.
Phone Number: Phone number you provide to use voice interview features.
Voice Call Data: Call recordings, transcripts, call duration, session metadata, and voice responses when you use AI-powered phone interview features.
SMS Messages: Text messages you send to our service, including business ideas, questions, and commands (e.g., STOP, HELP).
1.2 Information Collected Automatically
Usage Data: Pages visited, features used, AI credits consumed, session duration, click patterns, and interaction data.
Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
Network Information: IP address, approximate geographic location, and referring URL.
Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies for authentication, preferences, and analytics.
1.3 Information from Third Parties
We may receive information from third-party authentication providers, payment processors (Stripe), and analytics services to enhance and operate the Service.
2. How We Use Your Information
Purpose
Legal Basis
Provide, operate, and maintain the Service
Contract performance
Process AI analyses and generate outputs
Contract performance
Process payments and manage subscriptions
Contract performance
Send service-related communications
Legitimate interest
Improve and personalize the Service
Legitimate interest
Detect and prevent fraud and abuse
Legitimate interest
Comply with legal obligations
Legal obligation
Aggregate and anonymize data for analytics
Legitimate interest
Enforce our Terms of Service
Contract performance
3. AI Data Processing
When you use AI Features, your input data is sent to AI model providers (including third-party large language model providers) for processing. We implement the following safeguards:
Your data is not used to train external AI models.
AI requests are processed in real-time and not persistently stored by third-party providers beyond the duration needed to generate a response.
Your business ideas are not shared with other users or made publicly accessible (unless you share a Venture Snapshot via its public URL).
We may use anonymized, aggregated data to improve the platform's AI capabilities.
Despite these safeguards, we cannot guarantee absolute confidentiality of data processed by third-party AI systems. Do not submit highly sensitive personal information, trade secrets, or classified information through the Service.
4. Voice Calls, Recordings, and SMS
When you use our AI-powered phone interview features, we collect and process additional data:
Call Recordings: All voice calls are recorded in their entirety. Recordings are used to generate transcripts, extract structured data for your projects, improve AI performance, and ensure quality assurance.
Transcripts: Call recordings are transcribed using speech-to-text services (Twilio and/or OpenAI Whisper). Transcripts are stored in your account and may be viewed, downloaded, or deleted by you at any time.
Voice Data Processing: Your voice responses are processed by AI systems (including Claude API) to extract meaning, improve articulation, and populate structured fields in your projects.
SMS Messages (Bidirectional): When you provide your phone number, you consent to send and receive SMS messages. Outbound messages include appointment reminders, call status notifications, session resume links, and AI-generated responses to your idea submissions. Inbound messages include business ideas you submit for AI analysis, questions, and service commands. We use Twilio to send and receive SMS messages. Your phone number and message content are stored securely and not shared with third parties except as required to deliver the Service.
Retention: Call recordings are retained for 90 days, after which they are automatically deleted. Transcripts, SMS message content, and extracted data are retained as long as your account is active or as needed to provide the Service. You may request deletion of recordings, transcripts, and SMS message history at any time by contacting us at privacy@startup16.com.
Third-Party Processors: Voice and SMS services are provided by Twilio. Call transcription may be performed by Twilio Speech-to-Text or OpenAI Whisper. AI processing of call content is performed by Anthropic Claude API. These providers process data on our behalf and are contractually obligated to protect your information.
Consent: By scheduling or accepting a voice call, you expressly consent to call recording and transcription. By providing your phone number, you consent to send and receive SMS messages. By texting a business idea to our service, you consent to AI processing of your message content. You may withdraw consent at any time by discontinuing use of voice features. SMS consent may be withdrawn by replying STOP to any message.
5. Data Sharing and Disclosure
We may share your information with:
Service Providers: Third-party vendors who assist in operating the Service (hosting, payment processing, AI processing, email delivery, analytics, voice/SMS services).
Legal Requirements: When required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
Protection of Rights: To protect our rights, safety, or property, or that of our users or the public.
With Your Consent: When you explicitly authorize sharing.
We do not sell your personal information to third parties. We do not share your business ideas or project data with other users.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup and recovery purposes, and we may retain anonymized, aggregated data indefinitely. We retain billing records as required by applicable tax and financial regulations. Call recordings are retained for 90 days and then automatically deleted unless you request earlier deletion.
7. Data Security
We implement industry-standard security measures including encryption in transit (TLS/SSL), hashed passwords, secure cloud infrastructure, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Portability: Request your data in a structured, machine-readable format.
Objection: Object to certain processing of your data.
Withdraw Consent: Withdraw previously given consent at any time.
To exercise any of these rights, contact us at privacy@startup16.com. We will respond within 30 days.
9. Cookies
We use essential cookies for authentication and session management, and functional cookies to remember your preferences. We may use analytics cookies to understand usage patterns. You can control cookie settings through your browser. Disabling essential cookies may impair the functionality of the Service.
10. Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@startup16.com.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to such transfers. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: know what personal information we collect, request deletion of your data, opt out of the sale of personal information (we do not sell your data), and not be discriminated against for exercising your privacy rights. Contact us at privacy@startup16.com to exercise these rights.
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under GDPR including the right to lodge a complaint with a supervisory authority. Our legal bases for processing are described in Section 2 above. For data protection inquiries, contact us at privacy@startup16.com.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
15. Contact Us
For privacy-related questions, requests, or complaints, contact us at: