Privacy Policy

StartME is operated by Oderinlo Nurudeen Oyinola in Lagos, Nigeria. This policy covers www.startme.site and the StartME company workspace.

We determine how account, billing, security and service-administration information is processed. When you provide personal information about customers, staff or contacts for company tasks, you must have authority and a lawful basis to provide it. Where applicable, we process that information on your instructions. Business customers can contact us to discuss required data-processing terms.

The information involved depends on what you use and choose to connect.

• Account and contact information, including email, display name, authentication records and support messages.
• Company content, including requirements, documents, repository files, chats, generated outputs and saved company knowledge.
• Workflow information, including assignments, employee memory, approvals, permissions, connection status, usage, budgets and execution records.
• Connected-account information and credentials or authorization details needed for services you connect.
• Payment references, purchase amounts, credit movements and transaction status. The checkout provider collects payment details directly; do not send card numbers or security codes in chat or support email.
• Technical information involved in hosting and operating the service, such as IP addresses, browser/device information, connection events, errors and security logs.

We use information to operate accounts and workspaces, carry out instructions, retrieve relevant company context, generate work, coordinate employees, manage permissions, process purchases and refunds, provide support, diagnose service problems, prevent abuse and meet legal obligations.

Where a legal basis is required, we rely on performance of our agreement for service delivery, legitimate interests for proportionate security and service administration, legal obligations for required records, and consent where required for optional processing. You can ask about the basis for a particular use.

To perform a task, StartME may send relevant instructions, selected company context, files and tool results to external AI providers. Saved knowledge and employee memory can be retrieved for that customer's work. Using context this way is different from training a model shared across customers.

StartME will not use your private code, documents, chats or other private customer content to train models shared across customers without separate opt-in consent. Using the service or accepting these policies is not that consent. If we introduce an optional training program, we will explain its scope and choices separately.

External AI providers process requests under their applicable terms, account settings, retention rules and data-use policies. We do not promise that every provider has zero retention or excludes all training. Provider selection and connected-account settings can affect processing. Contact us before uploading information subject to special confidentiality, location or regulatory requirements.

We share information needed for the features you use with infrastructure, AI, search, integration, communication and payment providers. Not every task uses every integration. Relevant categories include:

• Hosting, database and authentication infrastructure, including Vercel and Convex.
• AI inference and search, including OpenRouter, Google Gemini and Tavily where used. OpenRouter can route requests to downstream model providers.
• Connected-service authorization and execution through Composio, and services you connect, such as GitHub, email, CRM and social platforms.
• Code execution and preview runtimes, including E2B when you start or authorize sandbox work.
• Email delivery, including Resend where configured, and Zoho Mail for support and billing correspondence.
• Checkout and payment processing, currently Paystack for the credit-purchase flow. The provider identified at checkout or on your receipt handles that payment under its own terms.

We do not sell or rent your personal information or private company content. Sharing needed information with providers to deliver your requested features is described above.

We may disclose information when legally required, to protect rights and security, or in a business transfer subject to applicable safeguards. Review connection permissions and revoke access you no longer need. A connected service may retain information already sent under its own policy.

StartME operates from Nigeria and uses providers that may process information in other countries. We do not promise that information stays in Nigeria or in your country. Where applicable law requires cross-border transfer safeguards, those requirements apply. Contact us about relevant processing locations and safeguards before providing restricted data.

Authentication and browser storage support sign-in, session recovery and saved interface preferences. Hosting and connected services may have their own technical storage or logging. Clearing browser storage may sign you out or reset preferences.

If we introduce optional tracking that requires consent, we will provide the required information and choices before using it. Accepting the Terms is not consent to optional advertising or tracking.

We retain account and company information while needed to provide your workspace and for legitimate purposes such as security, dispute resolution and legal recordkeeping. Some high-volume activity records and snapshots are periodically pruned. Different record categories have different retention needs; we do not promise one fixed period for every record.

You can request access, export or deletion using the contact below. We may need to verify account ownership and clarify the request. A refund or stopping work does not itself delete an account. Information may remain for legal obligations, unresolved disputes, security needs or limited backup retention. Independent providers can retain information under their own policies; disconnecting them does not necessarily delete information already sent.

We use access controls and other safeguards intended to protect information, but no online service is completely secure. Protect your account and connected credentials, use the authorization flows provided, and revoke or rotate credentials if you suspect misuse. Do not place passwords, private keys or payment-card details in ordinary prompts or support messages.

Contact us if you need details of the safeguards for a particular feature before connecting a sensitive system.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information; object to or restrict certain processing; withdraw consent for consent-based processing; and complain to a competent data protection authority. Withdrawal does not invalidate earlier lawful processing. Some requests are subject to exceptions and identity checks.

For individuals in Nigeria, relevant rights arise under the Nigeria Data Protection Act 2023 and applicable implementing requirements. You may contact the Nigeria Data Protection Commission. Where other laws, including European or applicable US state privacy laws, apply, we will handle requests under those requirements. This is not a claim of certification under every privacy law.

You can adjust company permissions, pause company or employee automation, and revoke connected-account access using available controls. Already-running external operations may finish before a pause or revocation takes effect.

StartME accounts are for people aged 18 or older. We do not knowingly offer accounts to children. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

We may update this policy as the service and legal requirements change. The updated date identifies this version. Where required, we will provide additional notice or obtain consent for a material change.

For support, privacy requests or questions, contact Oderinlo Nurudeen Oyinola, StartME, Lagos, Nigeria, using the email below.