Privacy Policy

Last updated: March 16, 2026

What we collect

Data	Why	Stored where
Email address	Authentication, notifications	Supabase (encrypted)
Experiment specs	Running the pipeline	Supabase
Generated code & memos	Delivering results to you	Supabase
Payment info	Billing	Stripe (we never see card numbers)

What we don't collect

• No analytics or tracking pixels
• No cookies beyond session authentication
• No selling or sharing of your data with third parties

Third-party services

• Stripe — payment processing
• Supabase — database and authentication
• Anthropic (Claude) — AI processing for research and code generation
• Resend — transactional email

Your experiment specs are sent to Anthropic's Claude API for processing. Anthropic does not use API inputs to train models. See Anthropic's privacy policy.

Data retention

Your experiments and generated code are retained as long as your account is active. Upon account deletion, all data is permanently removed within 30 days.

Your rights

You can export or delete your data at any time. Email anna@startupincubator.dev for data requests.

Security

All data is transmitted over HTTPS. Database access requires authenticated service role keys. We follow security best practices but cannot guarantee absolute security — no one can.