Privacy Policy

StartupBros LLC ("Company," "we," "us," or "our") operates startupbros.com and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service.

1. Information We Collect

Information You Provide Directly

• Account information: Name, email address, and password when you create an account.
• Payment information: All payments are processed by Stripe, Inc. We do not store your credit card number, expiration date, or CVC on our servers. Stripe handles all payment card data under their own privacy policy and PCI-DSS compliance. We receive only a transaction record: your name, email, last four digits of your card, and purchase details.
• Profile information: Any additional details you provide in your member profile or community posts.
• Communications: Information you provide when contacting support or participating in surveys.

Information Collected Automatically

• Usage data: Pages visited, features used, interactions with the platform, and referral sources.
• Device information: Browser type, operating system, screen resolution, and device identifiers.
• IP address and approximate geographic location derived from it.
• Cookies and similar technologies: See Section 4 and our Cookie Policy for details.

2. How We Use Your Information

• Providing, maintaining, and improving the Service
• Processing purchases and managing your account
• Sending transactional emails (purchase confirmations, account updates, password resets)
• Sending marketing emails about new products, workshops, and updates (you can unsubscribe at any time)
• Running A/B tests and analyzing usage patterns to improve the experience
• Preventing fraud, abuse, and violations of our Terms
• Responding to your support requests
• Complying with legal obligations
• Measuring the effectiveness of our advertising campaigns through conversion tracking

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

Service Providers (Sub-Processors)

We use third-party services to operate the Service. These providers receive only the data they need to perform their function and are contractually bound to protect your information:

Automated Content Moderation

When you send a message in a live event chat, the text of your message is sent to OpenAI's content moderation API to screen for prohibited content (harassment, hate speech, violence, and other categories that violate our Terms of Service). Only the message text is sent — no user identifiers, email addresses, or account information are included in the moderation request. Messages that are flagged by the moderation system are blocked from posting. OpenAI processes this data under their API data usage policy, which prohibits using API inputs to train their models.

Advertising and Conversion Tracking

We use Meta Pixel, Meta Conversions API (CAPI), and Google Ads conversion tracking to measure the effectiveness of our advertising. When you visit our site:

• Meta may receive information about your visit to measure ad performance and build audiences. See Meta's privacy policy.
• Google may receive similar information for analytics and ad measurement. See Google's privacy policy.

When you make a purchase, we may send a hashed (non-reversible) version of your email address to Meta and Google server-side to measure conversion performance. This server-side conversion tracking respects your opt-out preferences: if you have declined cookies via our consent banner or enabled Global Privacy Control (GPC) in your browser, we suppress these events entirely.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or respond to a government request.

Business Transfers

If StartupBros LLC is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. For a complete listing of cookies, their purposes, and durations, please see our Cookie Policy. The categories include:

• Essential cookies: Keep you logged in and remember your preferences. Required for the Service to function.
• Analytics cookies: Help us understand how people use the Service (PostHog, Google Analytics 4).
• A/B testing cookies: Assign you to test variants to measure which features work better.
• Advertising cookies: Measure advertising effectiveness and build audiences for campaigns (Meta Pixel, Google Ads).

We show a consent banner when required by law (for example, in the EU). Declining consent prevents advertising and analytics cookies from being set. You can also control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working correctly.

Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. There is no uniform standard for responding to these signals. We do not currently respond to DNT signals. However, you can use our cookie consent banner to control non-essential tracking, or adjust your browser settings to manage cookies directly.

5. Data Security

We use encryption in transit (TLS/HTTPS), secure authentication, and access controls to protect your data. Payment data is handled entirely by Stripe under PCI-DSS standards. While we strive to use commercially acceptable means to protect your personal data, no system is perfectly secure and we cannot guarantee absolute security.

Data Breach Notification

In the event of a data security breach that affects your personal information, we will:

• Within 72 hours: Notify the appropriate supervisory authority (for EU/UK residents under GDPR)
• Without undue delay: Notify affected users if the breach is likely to result in high risk to your rights and freedoms
• As required by law: Notify California residents within 60 days (per CCPA requirements) and comply with any other applicable state breach notification laws

Breach notifications will include:

• The nature of the breach and data types affected
• The likely consequences of the breach
• The measures we have taken or will take to address it
• Recommended steps you can take to protect yourself

6. Data Retention

• Account data: Retained for as long as your account is active. For lifetime access products, this means we retain your data for as long as we operate the Service.
• Purchase records: Retained as required by tax and accounting laws (typically 7 years).
• Usage and analytics data: Individual-level analytics data is retained for up to 24 months, then aggregated.
• Advertising data: Meta and Google may retain conversion data according to their own retention policies.
• Deleted accounts: When you request account deletion, we remove your personal data within 30 days, except for data we are required to retain by law (such as purchase records for tax compliance).

7. Your Rights and Choices

You can:

• Access your data by logging into your account or emailing us
• Update your data through your account settings
• Delete your account by emailing support@startupbros.com
• Opt out of marketing emails by clicking the unsubscribe link in any marketing email
• Request a copy of your data by emailing us. We will provide it within 30 days in a standard machine-readable format.
• Withdraw consent for non-essential data processing at any time via the cookie consent banner or by contacting us

European Economic Area, UK, and Switzerland

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your data include:

• Performance of contract: Processing necessary to provide the Service you have purchased (account management, payment processing, content delivery)
• Consent: Analytics and advertising cookies (which you can decline via the consent banner)
• Consent: Affiliate tracking cookies (which you can decline via the consent banner), also required under the ePrivacy Directive (Directive 2002/58/EC)
• Legitimate interests: Fraud prevention, service improvement, security, and automated content moderation of live event chat to maintain a safe community environment
• Legal obligation: Tax record-keeping and compliance with applicable laws

Under GDPR, you additionally have the right to:

• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restrict processing: Request we limit how we use your data
• Data portability: Receive your data in a structured, machine-readable format
• Object to processing: Object to processing based on legitimate interests
• Lodge a complaint: File a complaint with your local data protection authority

International Privacy Contact: If you are located in the EEA, UK, or Switzerland, you may direct privacy inquiries to privacy@startupbros.com. We are committed to cooperating with the guidance and decisions of the relevant data protection supervisory authorities regarding any complaints or concerns that cannot be resolved directly with us.

International Data Transfers

As a US-based company, your data is transferred to and processed in the United States. For users in the EEA, UK, and Switzerland, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission to provide appropriate safeguards for cross-border data transfers.

8. California Privacy Rights (Do Not Sell or Share)

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) grants you additional rights:

• Right to Know: What personal information we collect, use, and disclose. You may request this up to twice in a 12-month period.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out: Opt out of the sale or sharing of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Categories of Personal Information We Collect

• Identifiers: Name, email address, IP address, account username
• Commercial information: Purchase history, subscription details, payment records
• Internet activity: Browsing history, interaction with the Service, referral sources
• Inferences: Profile reflecting preferences and engagement patterns

Do Not Sell or Share My Personal Information

We do not sell your personal information in the traditional sense. However, our use of advertising cookies (Meta Pixel, Google Ads) for cross-context behavioral advertising may constitute "sharing" under CCPA. To opt out:

• Decline advertising cookies using the consent banner on our website
• Email support@startupbros.com with the subject line "Do Not Sell or Share"

We will process your request within 15 business days. We verify your identity before processing CCPA requests and will respond within 45 days.

9. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to remove that information from our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy? Contact us at:

StartupBros LLC
100 1st Ave N, #2706
St. Petersburg, FL 33701, USA
Email: support@startupbros.com
Privacy inquiries: privacy@startupbros.com