Privacy Policy

We collect minimal personal and technical information to deliver our AI business copilot and founder tools: • Account & Identity Data: When you sign up or sign in using email or Google OAuth, we collect your full name, email address, and profile picture avatar. • Startup & Workspace Inputs: Data you input into AI business interviews, pitch decks, market research briefs, financial budget estimations, and strategic prompt responses. • Technical Telemetry: IP address, browser metadata, session cookies, and interaction diagnostics to ensure platform security and optimal performance.

When you authenticate using Google Sign-In: • Data Received: We access only your basic Google public profile information (name, email address, and profile avatar URL). • Purpose of Use: We use this data exclusively to authenticate your identity, establish your secure workspace session, and personalize your founder dashboard. • No Data Sales or Misuse: We do not sell, rent, or transfer your Google user data to third parties. We do not use your Google user data for advertising or marketing profiling. • LLM Privacy Guarantee: Data retrieved from your Google account is never used to train global AI/LLM models.

Your business ideas, financials, and strategies represent your competitive edge. • We do NOT sell your startup data or business plans to third parties. • Inputs submitted to our AI co-founder features are processed securely using enterprise API endpoints (OpenAI API) under strict non-training, zero-data-retention privacy policies. • Data generated in your workspace is isolated and accessible only by your authenticated account.

• Database Security: Account credentials, sessions, and database entries are stored securely in PostgreSQL (Supabase) enforced with strict Row Level Security (RLS) policies. • Encryption: All data in transit is encrypted using industry-standard TLS 1.3/SSL protocols, and stored data is protected with AES-256 encryption at rest.

We use essential HTTP-only cookies managed by Supabase SSR to authenticate your user session and maintain your signed-in status across pages. We do not use intrusive cross-site tracking cookies.

As a founder on Anza, you retain full control over your data: • Data Access & Export: You may access and export your generated business plans and strategy documents at any time. • Complete Deletion: You can request the total deletion of your user profile, Google authentication links, and all associated startup workspace data by emailing privacy@startupcopilot.africa.

If you have any questions regarding this Privacy Policy or Google User Data usage, please reach out to our privacy compliance team: Email: privacy@startupcopilot.africa Domain: https://startup-copilot-africa.vercel.app