Legal

Privacy Policy

Last updated: June 2026

EcoStartup ("we", "us") connects startup founders, mentors, investors, and service professionals. This policy explains what personal data we collect, why, and your rights over it. We are committed to handling your data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information we collect

  • Account details: name, email, password (stored hashed), and your role.
  • Profile & portfolio data: company, product, team, sectors, links, and — for due diligence — legal & financial details such as CIN, PAN, DPIIT recognition, turnover, and funding.
  • Usage data: basic logs needed to operate and secure the service.

2. How we use it

  • To run the platform — build and review your portfolio, and publish what you choose.
  • To review and approve startup profiles before they go public.
  • To secure the service and prevent abuse.

3. What is made public

Only the sections you explicitly choose to publish appear on your public profile. Legal and financial sections are private by default. Your PAN is never published under any circumstances — it is collected solely for our internal review and is excluded from all public data. You can unpublish at any time.

4. Sharing

We do not sell your personal data. We share data only with service providers needed to operate the platform (e.g. hosting, email delivery), under appropriate safeguards, and where required by law.

5. Storage & security

Data is stored on secured infrastructure; passwords are hashed and one-time codes are stored only as hashes. No method is perfectly secure, but we apply reasonable technical and organisational measures.

6. Your rights

Under the DPDP Act you may access, correct, or request deletion of your personal data, and withdraw consent. Email us to exercise these rights.

7. Retention

We keep your data for as long as your account is active or as needed to provide the service and meet legal obligations.