StartPane Privacy Policy
This policy outlines how we handle your data in compliance with UK GDPR laws.
This Privacy Policy explains how StartPane ("we", "us") collects, uses, shares, and protects information when you visit our website or use our services (the "Service").
1. Who we are
Operator: StartPane is operated by a sole trader based in the United Kingdom, acting as the Data Controller.
Contact Email: support@startpane.com
Location: United Kingdom
Postal Address: Available upon request for legal correspondence.
2. What we collect
2.1 Information you provide
- Account data: To create an account, we collect your name, email address, and a password (which is cryptographically hashed and stored securely).
- Billing data: If you purchase a subscription, our payment processor (Stripe) collects your financial details. We do not store full credit card numbers on our servers; we only retain the payment status and transaction ID.
- Support communications: Content of messages and feedback you choose to share via email.
2.2 Information collected automatically
- Device and usage: We collect server logs which may include your IP address, browser type, and operating system. This is used solely for security, fraud prevention, and debugging.
- Cookies: We use only "strictly necessary" cookies required for the app to function (e.g., to keep you logged in). We do not use third-party analytics or marketing cookies.
3. How we use information
- Provide the Service: Managing your account, authenticating your identity, and providing the core functionality of the web app.
- Security: Preventing unauthorized access, fraud detection, and rate limiting to protect the Service.
- Billing: Processing payments and managing subscription status.
- Legal Compliance: Meeting obligations regarding tax, accounting, and UK data protection laws.
4. Legal bases (UK GDPR)
Under UK data protection law, we rely on the following legal bases to process your data:
- Contract: Processing is necessary to fulfill the terms of service (e.g., providing the app functionality you signed up for).
- Legitimate Interests: Necessary for keeping the Service secure and operational.
- Legal Obligation: Necessary to comply with UK law (e.g., retaining invoice records for HMRC).
5. Sharing and disclosure
We do not sell your personal data. We share information only with the following third-party service providers essential to running the Service:
- Hosting (Render): Our application and database are hosted on Render. Data you store in the app is processed on their infrastructure.
- Payments (Stripe): To securely handle payments and subscriptions.
- Legal Requirements: If required by UK law, court order, or to protect the rights and safety of the Operator or others.
6. International transfers
Our service providers (Render and Stripe) operate globally. As a result, your data may be processed on servers outside the UK (e.g., in the US). We rely on adequacy decisions (such as the UK-US Data Bridge) and standard contractual clauses to ensure your data remains protected to UK standards.
7. Data retention
We retain personal data only for as long as necessary to provide the Service.
- Account data: Retained until you delete your account.
- Transaction records: Retained for 6 years to comply with HMRC tax requirements.
If you delete your account, your personal data will be deleted from our active database within 30 days.
8. Your rights
Under the UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data.
- Portability: Request your data in a structured format.
To exercise these rights, please contact support@startpane.com. You also have the right to make a complaint to the Information Commissioner's Office (ICO) if you believe we have mishandled your data.
9. Changes
We may update this policy from time to time. If we make significant changes, we will notify you via email or a prominent notice within the app.