Legal

Privacy Policy

Last updated: April 2026

1. Who We Are

M3XI is a technology company based in England and Wales. StartUp is a mobile application developed and operated by M3XI. For data protection purposes, M3XI is the controller of your personal data.

Contact: support@m3xi.com

2. Information We Collect

We collect information you provide directly and information generated through your use of our services:

• Account information: Name, email address, Google account data used for sign-in, and optional LinkedIn profile data used for verification.
• Profile data: Business descriptions, ideas, posts, and content you publish to the feed.
• Media you choose to upload: Photos and videos selected from your gallery/library or captured with your camera for posting.
• URL input data: URLs you submit for business insight or analysis features.
• Usage data: Pages visited, features used, interactions with posts and other users.
• Payment data: Processed securely via Stripe. We do not store card details.
• Device data: Device type, operating system, and app version for troubleshooting.

3. How We Use Your Information

• To provide and improve the StartUp platform and M3XI services.
• To match users with relevant investors and business opportunities via the feed algorithm.
• To generate business analysis and valuation reports on request.
• To process URLs submitted by users and generate business-related insights for the requested feature.
• To process payments for subscriptions and premium features.
• To send service notifications (not marketing, unless you opt in).
• To ensure platform safety and enforce our Terms and Conditions.

4. Authentication (Google Sign-In and LinkedIn Verification)

StartUp uses Google Sign-In as the primary authentication method. When you sign in with Google, we receive basic account data (such as name and email address) via Google's OAuth service to create and secure your account.

We also offer optional LinkedIn verification. If you choose this feature, we receive relevant LinkedIn profile data through LinkedIn OAuth for identity/profile verification. LinkedIn verification is not required to use the app. We do not post to Google or LinkedIn on your behalf.

5. Camera and Media Access

StartUp may request camera and media library/gallery permissions so you can create posts with photos or videos.

• Camera access is used only when you choose to capture new media for a post.
• Media library/gallery access is used only when you choose to upload existing media.
• We do not access photos, videos, or camera input without your direct action in the app.

6. User-Generated Content and Moderation

You retain full ownership of any ideas, business plans, or content you post on StartUp. We do not claim ownership of your intellectual property. Other users are contractually prohibited from misappropriating your ideas under our Terms and Conditions.

Users are responsible for the content they publish. Content is not actively pre-screened or fully filtered before posting. We use a moderation framework that includes user reporting, blocking, and strike-based enforcement, and we may review and remove content or restrict accounts where needed to protect users and enforce our rules.

7. URL Processing and Analysis

When you submit a URL in StartUp, we may process and analyze that URL and related page data to generate business-related insights or analysis requested by you. We use this data only to deliver the requested feature and related service functionality, and not for unrelated advertising purposes.

8. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase: Our backend infrastructure provider (data hosting and authentication).
• Stripe: Payment processing (card data never touches our servers).
• Google: OAuth authentication for account sign-in.
• LinkedIn: Only when you choose optional LinkedIn verification via OAuth.
• Legal authorities: When required by law or to protect safety.

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

10. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact support@m3xi.com.

11. Data Deletion Requests

You can request deletion of your account and personal data at any time by emailing support@m3xi.com from your registered email address with the subject line "Data Deletion Request". We may need to verify your identity before completing the request. Once verified, we will delete or anonymise your personal data within 30 days, except where we must retain limited records to comply with legal, tax, fraud-prevention, or dispute-resolution obligations.

12. Cookies

The StartUp app does not use browser cookies. Our website uses minimal session cookies required for functionality. We do not use tracking or advertising cookies.

13. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), Row Level Security on our database, and secure OAuth flows. No system is 100% secure — please use a strong, unique password and report any concerns to support@m3xi.com.

14. Children

StartUp is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has registered, please contact us immediately.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via the app or email.

16. Contact

For all privacy-related enquiries: support@m3xi.com

For StartUp app support: startup@m3xi.com