Privacy Policy

• Account data — your email address and authentication credentials.
• Your submitted content — the startup ideas you describe, your interview answers, and the refinement working session.
• Generated content — the classification, investor-panel takes, verdict and MVP spec we produce from your input.
• Operational logs — minimal request/error logs for security and reliability.

Please don’t submit special-category data (health, political opinions, etc.) — the service doesn’t need it.

We process your account data and your submitted content to deliver the service you asked for — running your idea through the AI committee and returning a verdict and build kit. The lawful basis is performance of a contract (GDPR Art. 6(1)(b)). We don’t use your content for advertising, and we don’t sell it.

We use a small set of vetted processors under Data Processing Agreements with Standard Contractual Clauses (SCCs) for any transfer outside the EEA:

• Supabase — database & authentication.
• Vercel — application hosting.
• Anthropic (Claude API) — analyses the text you submit. Anthropic does not train its models on API data by default, deletes API inputs/outputs within about 30 days (up to 2 years only if content is flagged for a policy violation), and we call it server-side only.

Your verdict and spec are generated by AI (Anthropic’s Claude). They are advisory and informational only — not professional, financial, legal or investment advice — and produce no legal or similarly significant effect, so they are not “automated decision-making” under GDPR Art. 22. Investor “lenses” are archetypes inspired by public investing philosophies, not the named individuals. If you disagree with an output or want a human to look at it, contact us.

We keep your data while your account is active and delete it when you delete your account; backups purge within about 30 days. At Anthropic, submitted text is deleted within ~30 days as described above.

You have the right to access, rectify, erase, port, restrict and object to processing, and to lodge a complaint with your supervisory authority. You can exercise the main ones yourself:

• Access & portability — Settings → Export my data (machine-readable JSON).
• Erasure — Settings → Delete my account (hard-deletes everything).
• Rectification, restriction, objection — contact us and we’ll action it within one month.

We use only a strictly-necessary authentication session cookie to keep you signed in. We don’t use analytics or marketing cookies, so there’s no consent banner to click through.

Questions or a rights request? Email admin@fixster.ai or write to Fixster Inc, 848 Brickell Ave, Ste 747, Miami, FL 33131, USA. We respond within one month. You may also lodge a complaint with your local data-protection supervisory authority.