Privacy Policy
Effective November 12, 2026
SeedLift ("we") is operated by Aaron Tang. This policy explains what we collect, why, who we share it with, and your choices. Short version: we collect only what the service needs, we don't sell your data, we don't show ads, and you can delete your account at any time.
What we collect
- Account details: your name, email address, password (stored only as a secure hash by our authentication provider) and whether you're a founder or investor.
- Investor profiles: the details investors enter (name, firm, sectors, check size, city, bio and any contact details they choose to add). Approved investor profiles are public; contact details are shown only to signed-in users.
- Startup pages: what founders enter about their startup, including images, team members' names and links. Private by default and used for AI matching and email drafts. You choose who else can see it: anyone with your page's link, or also verified investors (after a review). You can make it private again or make a new link at any time. Uploaded images are re-encoded, which removes hidden photo data such as location. Only add team members who agree to be listed.
- Saved lists and notes: investors, organizations, events and startups you save, and your notes. Only you can see them.
- Events, RSVPs and reports you submit. Approved events are shown to members. RSVPs and reports are private (reports are seen only by our admin). If you choose to appear on an event's "Who's going" list, other members see your name and your startup or firm, never your email.
- Approximate location: if you use "Use my location", your browser shares your position, which we round to about 1 km and use only for that search. We do not store it.
- Security records: to stop password guessing we keep one-way hashes (not readable copies) of sign-in attempts' IP addresses and emails, deleted within 24 hours. We also count AI requests per account to enforce daily limits.
- Technical logs kept briefly by our hosting providers (such as IP address and pages requested) to run and secure the service.
How we use it
To run the service: showing profiles and events, sending account and event-reminder emails, matching founders with investors, reviewing profiles and reports to keep out scams, and preventing abuse. We do not use your data for advertising and we do not sell or rent it.
Cookies
We use only the cookies needed to keep you signed in. No advertising or tracking cookies.
Who we share it with
We use these service providers, who process data on our behalf:
- Supabase: database and sign-in.
- Vercel: website hosting.
- Anthropic (Claude): when a founder uses AI matching or email drafts, their startup details and relevant public investor profiles are sent to Anthropic's API to generate results. Under Anthropic's commercial terms, API data is not used to train their models.
- Resend: sending email.
- Cloudflare Turnstile: the "Verify you are human" check on sign-up, sign-in and password reset, which helps stop fake accounts. Cloudflare sees your IP address and basic browser details to run that check.
- OpenStreetMap: city names are sent to turn them into map locations, and the map images load from OpenStreetMap's servers (which see your IP address, like any website).
We may also disclose information if required by law, or to protect users from fraud or harm.
How long we keep it
We keep your data while your account is open. When you delete your account, your profile, startup details, RSVPs, reports and submitted events are deleted right away. Copies may remain in our providers' backups for a short period before being overwritten.
Your choices and rights
- Edit your profile or startup details at any time.
- Delete your account from your account page.
- Ask us what we hold about you, or to correct or delete it, by emailing atang12346@gmail.com. California residents have these rights under the CCPA; we honor them for everyone and won't treat you differently for using them.
Security
We use encryption in transit, database access rules, reviewed investor profiles and limits on sign-in attempts. No system is perfectly secure, so please use a strong, unique password.
Children
SeedLift is for people 18 and older. We do not knowingly collect data from anyone under 18.
Changes
If we make important changes we'll update the date above and, where appropriate, notify you by email.
Contact
Aaron Tang · atang12346@gmail.com