Welcome to StartupFeed.in (“StartupFeed,” “we,” “us,” or “our”), a digital news and information platform operated by Incunation Global, based in Gautam Buddha Nagar, Uttar Pradesh, India.

This Privacy Policy explains in simple, clear language what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your data. This policy is a standalone document as required by law and is separate from our Terms of Service.

This Privacy Policy is published in compliance with:

• The Digital Personal Data Protection (DPDP) Act, 2023 and DPDP Rules, 2025
• The Information Technology Act, 2000
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended through 2026)
• The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Google Publisher Policies and Google News content policies

By accessing or using StartupFeed.in, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our website.

1. Who We Are (Data Fiduciary Information)

Under the DPDP Act, 2023, we are the “Data Fiduciary” — the entity that decides how and why your personal data is processed.

2. What Personal Data We Collect

We only collect data that is necessary for running our news platform and improving your experience.

A. Data You Give Us Directly

B. Data Collected Automatically

C. Cookies and Similar Technologies

We use cookies (small text files stored on your device) and similar tracking technologies:

You can control cookies through your browser settings. You can also opt out of Google’s personalized advertising at adssettings.google.com.

D. Membership Number, Member Card and Invite Links

When you create a StartupFeed account:

• Membership number: we give you a membership number (for example, SF26 1234 5678) and email you a member card with your name, member type and number. We use the number to find your account when you write to us.
• Sharing your card: your dashboard lets you share your member card on LinkedIn, Facebook, X, WhatsApp and Instagram with your personal invite link. Nothing is shared unless you choose to share it. The card picture shows your name, member type and the month you joined, with the middle four digits of your membership number hidden. It is stored on our website at a link that appears only in what you share.
• Invite links: when you share your invite link, its preview shows your first name and card picture, and our sign-up page shows your first name, so people know who invited them. When someone opens your link, we save a small cookie (sf_ref) on their device for 30 days. If they create an account in that time, we record that you invited them. You see only how many people joined with your link, not who they are.
• Your control: you can download this data from your account page. Deleting your account deletes your membership number, invite link and card pictures.

E. Photos, Logos, Contact Details and the Funding Finder

If you add a photo or logo, or a phone number and email to your profile, we store them. Incubator and investor contact details show on their public profile. A founder’s are shown only to the incubators and investors they send a request to. Answers you give in the funding finder about your founders, such as women-led or SC/ST, stay in your browser and are not sent to us.

3. Why We Collect Your Data (Purpose of Processing)

We process your personal data only for specific, clear purposes. We will never use your data for a purpose not listed here without your consent.

• Delivering our news service: To publish articles and deliver newsletter subscriptions you signed up for.
• Responding to you: To reply to your queries, comments, feedback, or grievances.
• Improving our platform: To analyse website usage so we can improve speed, content, and relevance.
• Advertising: To display ads that fund our journalism. Third-party ad networks may use cookies for ad personalization.
• Legal compliance: To comply with court orders, government directives, law enforcement requests, and applicable Indian laws.
• Security: To detect, prevent, and address fraud, security threats, spam, and technical issues.
• Content attribution: To credit authors, editors, and contributors properly

4. Legal Basis for Processing Your Data

Under the DPDP Act, 2023, we process your personal data based on:

• Your Consent: When you sign up for our newsletter, submit a comment, fill out a form, or accept cookies — you give us consent to process that specific data for that specific purpose.
• Legitimate Uses: For purposes permitted under the DPDP Act without explicit consent, such as responding to a medical emergency, complying with a court order, or performing obligations under Indian law.
• Legal Obligation: When we are required to retain or disclose data by law, court order, or government directive under the IT Act or other applicable legislation.
•  

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, you (the “Data Principal”) have the following rights:

• Right to Access: You can request a summary of the personal data we hold about you and how we have used it.
• Right to Correction: You can ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data. We will do so unless legally required to retain it.
• Right to Withdraw Consent: You can withdraw your consent at any time. Withdrawing consent is as easy as giving it — simply email us or use the unsubscribe link in newsletters. Withdrawal does not affect lawfulness of processing done before withdrawal.
• Right to Grievance Redressal: You have the right to file a complaint about how we handle your data. See Section 12.
• Right to Nominate: You can nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

How to exercise your rights: Send an email to grievance@startupfeed.in with the subject line “Data Principal Rights Request”. We will acknowledge within 24 hours and act within a reasonable timeframe.

6. How We Share Your Data

We do not sell your personal data. We only share it in the following limited circumstances:

All third-party processors are contractually required to protect your data and process it only as we instruct.

7. Data Storage, Retention, and Deletion

Where we store your data: Your data is stored on secure servers. Some service providers may store data outside India. Where data is transferred outside India, we ensure compliance with the DPDP Act and any government restrictions.

How long we keep your data:

• Newsletter subscription data: Until you unsubscribe
• Contact form submissions: 1 year from submission
• Comments: As long as the article remains published
• Analytics data: Up to 26 months (Google Analytics retention)
• Server logs: 180 days (as required by CERT-In)
• Legal/compliance data: As required by applicable law

Deletion: Once the retention period expires or you request deletion, we will erase your data within a reasonable time.

8. Data Security

We implement reasonable security safeguards as required under the DPDP Act and IT Act:

• SSL/TLS Encryption: Our entire website uses HTTPS encryption to protect data in transit.
• Access Controls: Only authorized team members can access personal data, based on role-based permissions.
• Secure Passwords: All administrative accounts use strong passwords and, where available, two-factor authentication.
• Regular Updates: We keep our software, plugins, and systems updated to protect against vulnerabilities.
• Data Minimization: We only collect what we need and delete what we no longer require.

While we take all reasonable precautions, no electronic transmission or storage method is 100% secure. If you notice any security issue, contact us immediately at contact@startupfeed.in.

9. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India within 72 hours of becoming aware of the breach.
• Notify you (the affected Data Principal) promptly with details and recommended protective steps.
• Report the incident to CERT-In within 6 hours as required under CERT-In Directions, 2022.

10. Children’s Privacy

StartupFeed.in is a general news platform and is not directed at children under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child without verifiable parental or guardian consent, we will delete that data as quickly as possible. If you are a parent or guardian and believe your child has provided us with personal data, contact us at grievance@startupfeed.in.

In compliance with the DPDP Act, 2023, we will not engage in behavioural monitoring or targeted advertising directed at children.

11. Third-Party Links

Our articles may contain links to external websites not operated by us. We have no control over their content, privacy policies, or practices. We encourage you to read the privacy policy of every website you visit. We are not responsible for the privacy practices of third-party sites.