Legal
Privacy Policy
Last updated: May 2026
This policy describes how Submit Your Startup("we", "us", "our"), operating at submityourstartup.now, collects, uses, and protects information when you use our service.
1. Information we collect
Account data. When you register, we store your name, email address, and a bcrypt-hashed version of your password (if you chose email registration). If you sign in via GitHub, we receive your GitHub username, display name, and public email address.
Startup submissions. Any startup name, tagline, description, website URL, logo URL, and category you submit are stored and displayed publicly.
Interactions. Votes, comments, and changelog updates you create are stored and associated with your account.
Analytics. When a visitor views a startup page, we record the referring URL and a pseudonymous viewer identifier. No cross-site tracking or fingerprinting is performed.
Session cookies. We use a single session cookie to keep you signed in. No third-party tracking cookies are set.
2. How we use your information
- →To operate and display your public startup listing.
- →To authenticate your account and protect against unauthorised access.
- →To show founders analytics about their listing (view counts, referrers).
- →To allow other users to interact with your listing via votes and comments.
- →To enforce our content policies and respond to abuse reports.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-party services
Neon (database). Your data is stored in a Postgres database hosted by Neon, Inc. Their privacy policy applies to data at rest.
GitHub OAuth.If you use GitHub sign-in, GitHub's privacy policy governs data shared during the OAuth flow.
Cloudflare. Our domain is proxied through Cloudflare for DDoS protection and CDN delivery. Cloudflare processes request metadata per their privacy policy.
DeepSeek AI.When you use the "Analyze with AI" feature, your startup's public website content is sent to DeepSeek's API to generate listing text. No personal data is sent.
4. Data retention
Account data is retained until you request deletion. Startup listings, votes, and comments associated with a deleted account are anonymised rather than deleted, to preserve discussion integrity.
5. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. We will respond within 30 days.
You can also delete your account and startup listings directly from your account settings.
6. Security
Passwords are hashed with bcrypt (12 rounds) and never stored in plain text. All connections are encrypted with TLS. We do not have access to your plain-text password.
7. Changes to this policy
We may update this policy periodically. Material changes will be announced on the site. Continued use of the service after changes constitutes acceptance of the revised policy.
8. Contact
Questions about this policy: [email protected]