Privacy Policy

This Privacy Policy (“Policy”) describes how Slurp (“we,” “us,” or “our”) processes personal information when you visit slurp.cc, browse startup listings, submit a product, create an account, purchase listing packages, vote on listings, receive email, or interact with related features (collectively, the “Service”).

For purposes of applicable data protection laws, Slurp is the controller of personal information described in this Policy, unless we process information solely on behalf of a business customer under a separate written agreement.

This Policy supplements our Terms of Service and should be read together with our Security Overview.

“Personal Information”

Information that identifies, relates to, or could reasonably be linked with you or your household, directly or indirectly.

“Processing”

Any operation performed on personal information, including collection, storage, use, disclosure, and deletion.

“Listing Data”

Product descriptions, media, founder profiles, categories, analytics, moderation records, and other information associated with a startup listing on the Service.

We collect the following categories of information:

We do not intentionally collect government identifiers, precise geolocation, or sensitive categories of personal information unless you voluntarily include them in Listing Data or support communications.

We process personal information for the following purposes:

• Provide, operate, and maintain the Service, including directory browsing, submissions, and publication
• Authenticate users, enforce Listing Entitlements, and deliver transactional email
• Conduct Moderation, prevent fraud, and enforce our terms and content standards
• Process payments, manage refunds, and resolve billing disputes
• Detect, investigate, and prevent abuse, security incidents, and policy violations
• Provide customer support and communicate service changes
• Measure listing performance, improve product quality, and operate analytics where enabled
• Send optional marketing communications where permitted and with appropriate consent
• Comply with law, respond to lawful requests, and enforce our terms

Where required by applicable law, we rely on one or more lawful bases such as contract performance, legitimate interests, consent, or legal obligation. You may withdraw consent for optional processing where consent is the basis, without affecting the lawfulness of prior processing.

When you submit a Listing, information you provide may become publicly visible upon approval and publication, including product name, description, media, website links, founder details, and engagement metrics such as vote counts. Public profiles may be indexed by search engines unless we configure otherwise.

You are responsible for ensuring Listing Data does not include private customer information, regulated data, or confidential materials you are not authorized to publish. We may redact or remove Content that violates law or our Content Policy.

Maker or founder profile pages display information you choose to publish and may link to your associated Listings.

Slurp sends transactional emails for account authentication, submission status, moderation updates, purchase confirmations, launch notifications, and support responses. These are separate from marketing email.

The Monday drop newsletter is an optional marketing list with explicit consent, double opt-in where enabled, and a preference center for unsubscribe. We may track limited first-party engagement signals to improve content relevance. We do not send recurring promotional campaigns without your preferences and consent where required by law.

Transactional emails do not include advertising tracking pixels by default.

We use necessary cookies and local storage for authentication, session continuity, and abuse prevention. We do not use advertising cookies in the current product.

If optional analytics are enabled in your deployment, they are configured to minimize unnecessary personal data in event payloads. Where required by law, we will obtain consent before placing non-essential cookies.

We disclose personal information to service providers that process data on our behalf under contractual obligations consistent with this Policy, including:

• Supabase - database, authentication, and encrypted object storage
• Stripe - payment processing and fraud prevention
• Resend - transactional email delivery
• Vercel - application hosting and edge delivery
• Clerk or comparable identity providers - authentication where enabled

We may also disclose information:

• To comply with law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Slurp, users, or the public
• In connection with a merger, acquisition, financing, or sale of assets with appropriate safeguards
• With your direction or consent

We do not sell personal information in the ordinary course of operating Slurp, and we do not share personal information for cross-context behavioral advertising as defined under applicable U.S. state privacy laws.

We retain listing submissions, public profile content, and associated media for as long as your listing remains active or as needed to operate the Service. Account and transactional records may be retained for up to 365 days after account closure where permitted by law. Backup systems may retain residual copies for a limited period before automatic purge.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Payment, tax, and accounting records may be retained longer where required by law, even after account deletion requests. Backup systems may retain residual copies for a limited period before automatic purge.

Configured defaults: listing media retention up to 90 days where archival policies apply; account-related records up to 365 days after closure where permitted.

We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted transport, access controls, rate limiting, and restricted internal access. See our Security Overview for a factual summary. No online service can guarantee perfect security.

Slurp may process and store information in the United States and other countries where we or our service providers operate. Where required by applicable law, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms recognized by relevant authorities.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information, and to withdraw consent where processing is consent-based.

Account and listing controls. You may update Listing Data through the Founder Dashboard where available. Account deletion and data removal requests may be submitted via contact. We will honor verified requests where no legal or accounting retention requirement applies. Public listings may remain in cached or third-party copies outside our control after removal.

California residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended, including rights to know, delete, correct, and opt out of certain sharing. To exercise rights, contact [email protected]. We will not discriminate against you for exercising privacy rights.

EEA, UK, and Switzerland. If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data protection law, including the right to lodge a complaint with a supervisory authority. Our lawful bases and transfer safeguards are described in this Policy.

Authorized agents. Where permitted by law, you may designate an authorized agent to submit requests on your behalf with appropriate verification.

Slurp uses automated processing for Moderation checks, spam detection, vote integrity, and operational analytics. Automated decisions may affect whether a Listing is flagged, queued, or rejected, but material moderation outcomes are subject to human review in ordinary operation.

Where required by applicable law, you may request information about automated processing or human review options by contacting [email protected].

The Service is not directed to children under thirteen (13), and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact [email protected] and we will take appropriate steps to delete it.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law, using contact information associated with your account or submission.

The Service may link to third-party websites, including websites listed in startup profiles. Their privacy practices are governed by their own policies. We encourage you to review third-party policies before providing personal information.

We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date. Where required by law, we will provide additional notice or obtain consent.

Privacy questions and rights requests: [email protected]

General support: [email protected]