Last Updated: 01/07/2026
This Data Policy explains how StartDotCom processes, stores, secures, transfers, retains, and deletes information across its platform, products, applications, APIs, artificial intelligence systems, integrations, and supporting infrastructure.
This document supplements the:
and forms part of the contractual framework governing the use of StartDotCom Services.
This policy has been designed to support compliance with:
StartDotCom is committed to the following principles:
Data is processed only where lawful grounds exist.
Processing activities are conducted fairly and transparently.
Users are informed about how information is processed.
Data is collected only for specified and legitimate purposes.
Only data necessary to provide Services is collected.
Reasonable efforts are made to maintain accurate records.
Information is retained only as long as necessary.
Appropriate technical and organisational measures are implemented to protect information.
StartDotCom maintains governance processes designed to demonstrate compliance with applicable laws.
Depending on the Services used, StartDotCom may act as either:
Where StartDotCom determines the purposes and means of processing. Examples include:
Where StartDotCom processes information on behalf of customers. Examples include:
Customers remain responsible for ensuring that information uploaded to the Services is collected and processed lawfully.
Information processed through StartDotCom may include:
Information uploaded and managed by users within CRM, ecommerce, support, marketing, or automation tools.
StartDotCom uses artificial intelligence systems to provide platform functionality.
AI systems may process:
AI processing may be used to:
Unless explicitly authorised by customers, StartDotCom does not use customer content to train publicly available artificial intelligence models.
Customer content remains under customer ownership.
StartDotCom uses reputable cloud infrastructure providers and technology vendors.
Data may be hosted, processed, replicated, backed up, or secured within:
Processing locations may vary depending on infrastructure architecture, disaster recovery requirements, service providers, or customer-selected configurations.
StartDotCom may engage approved subprocessors to support Service delivery. Examples may include providers supporting:
All subprocessors are required to maintain appropriate security and confidentiality obligations.
StartDotCom remains responsible for managing subprocessor relationships in accordance with applicable law.
Where personal information is transferred internationally, StartDotCom implements appropriate safeguards, including where applicable:
Transfers are conducted only where lawful mechanisms exist.
StartDotCom maintains security controls designed to protect information against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse.
Security controls may include:
No system can guarantee absolute security.
Unless a longer retention period is required by law, contractual obligations, litigation holds, fraud investigations, or regulatory requirements, information may be retained as follows:
Users may request deletion of eligible personal information by contacting: privacy@startdotcom.com
To protect users, identity verification may be required.
Deletion requests may be denied or partially fulfilled where retention is required for:
Where deletion is approved, StartDotCom will take reasonable steps to remove or anonymise eligible information.
Users may disconnect connected social media accounts through: Settings → Connected Accounts
To request deletion of social integration information, users may contact: privacy@startdotcom.com
Upon successful verification, StartDotCom will delete eligible social connection data, associated access tokens, and related records within thirty (30) days unless retention is required by law or legitimate security obligations.
Where applicable law grants such rights, individuals may request:
Requests should be submitted to: privacy@startdotcom.com. Additional information may be requested to verify identity.
StartDotCom maintains procedures designed to identify, assess, investigate, contain, and remediate security incidents.
Where required by law, affected parties and regulators may be notified in accordance with applicable legal obligations.
Not every security event constitutes a reportable data breach.
Customers remain responsible for:
StartDotCom does not assume responsibility for unlawful customer data collection practices.
Enterprise customers may request a separate Data Processing Agreement (DPA).
Where executed, the DPA shall govern processing activities and prevail over this Data Policy where conflicts arise.
StartDotCom reserves the right to investigate:
Relevant information may be retained, disclosed, preserved, or reviewed where legally required or reasonably necessary to protect the Services, users, partners, or the public.
This Data Policy may be updated periodically.
Material changes may be communicated through the platform, email notifications, account notices, or website updates.
Continued use of the Services following updates constitutes acceptance of the revised version.
Privacy Team: privacy@startdotcom.com
Legal Team: legal@startdotcom.com
Security Team: security@startdotcom.com
General Support: support@startdotcom.com
TechDotAI Ltd
United Kingdom
All rights reserved.