Privacy Policy

Last updated: June 2025

At FLASH, we understand that your startup information is highly sensitive and confidential. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to protecting your privacy and maintaining the security of your data.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, company name, role, and other registration details
• Startup Information: Business details, financial metrics, team information, market data, and other information you provide through our assessment
• Communications: Feedback, support requests, and other communications with us
• Payment Information: Billing details processed securely through our payment providers

Information Collected Automatically

• Usage Data: How you interact with our platform, features used, and assessment results
• Device Information: Browser type, IP address, operating system, and device identifiers
• Cookies: We use cookies and similar technologies to enhance your experience

2. How We Use Your Information

We use your information solely to provide and improve FLASH services:

• Generate your fundability analysis and personalized recommendations
• Provide access to the FLASH Fund for qualifying startups
• Communicate with you about your account and our services
• Improve our algorithms and analysis quality
• Ensure platform security and prevent fraud
• Comply with legal obligations

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict authentication and role-based access to data
• Infrastructure: Secure cloud infrastructure with regular security audits
• Employee Training: All team members are trained on data security best practices
• Incident Response: Established procedures for handling security incidents

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal or startup information with third parties, except:

• Service Providers: Trusted vendors who help us operate our platform (under strict confidentiality agreements)
• FLASH Fund: If you score 75+ and apply for investment, relevant information will be shared with our investment team
• Legal Requirements: When required by law or to protect our rights
• Consent: With your explicit permission

5. Your Data Rights

You have full control over your data:

• Access: Request a copy of all data we have about you
• Correction: Update or correct any inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a standard format
• Opt-out: Unsubscribe from marketing communications

6. Data Retention

We retain your data only as long as necessary to provide our services. Active accounts maintain data indefinitely. If you delete your account, we remove your data within 30 days, except where legally required to retain certain information.

7. International Data Transfers

We operate globally and may transfer data across borders. All transfers comply with applicable data protection laws, including GDPR requirements for EU residents.

8. Children's Privacy

FLASH is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any information.

10. California Privacy Rights

California residents have additional rights under CCPA, including the right to know what information we collect, request deletion, and opt-out of data sales (which we don't do).

11. Updates to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via email or platform notification. Continued use after changes constitutes acceptance.