Privacy Policy for Startup Suomi

Last Updated: 28.11.2025

Introduction

Startup Suomi ("we," "our," or "us") is run by a small team of three people who operate this website. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

Information We Collect

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: By creating an account, you consent to our collection and use of your username and email address
• Legitimate Interests: We have a legitimate interest in using anonymous analytics to improve our website

You have the right to withdraw your consent at any time by requesting account deletion.

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Enable you to log in to our service
• Communicate with you about your account
• Improve our website and user experience through anonymous analytics

Data Sharing and Third Parties

We use the following third-party services:

• GitHub OAuth: For authentication (subject to GitHub's Privacy Policy)
• Google OAuth: For authentication (subject to Google's Privacy Policy)
• Vercel Analytics: For website analytics (subject to Vercel's Privacy Policy)

We do not sell, trade, or otherwise transfer your personal information to third parties.

International Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including the United States, where our third-party service providers (GitHub, Google, Vercel) operate. These transfers are protected by appropriate safeguards such as Standard Contractual Clauses or Privacy Shield frameworks.

Your Rights Under GDPR

If you are a resident of the EEA, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a machine-readable format
• Right to Object: You can object to our processing of your personal data
• Right to Withdraw Consent: You can withdraw consent at any time

To exercise any of these rights, please see our About page for contact information. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

Data Retention

We retain your account information for as long as your account is active. To delete your account, please contact us through our About page and we will process your deletion request within 30 days. Some information may be retained longer if required by law or for legitimate business purposes (such as preventing fraud).

Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Complaints

If you are in the EEA and believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please visit our About page for contact information.