LEGAL

Privacy policy

Last updated: 2026-10-21.

Who we are

This policy explains how Startup MIS, operated by And Media ("we", "us"), handles personal data. It covers the Startup MIS website, the app, and Docivo document links.

What we collect

• Account data: your name and email address.
• Finance and project data you enter or import, such as budgets, actuals, plans and tasks.
• Documents you upload to a project or share through Docivo.
• Docivo viewer events: the email a viewer gives (if any), pages read, time spent, approximate location derived from the request, and a hashed IP address.
• Basic technical data needed to run and secure the service, such as request logs.

How we use it

• To run the service: sign you in, show your projects and reports, and deliver shared documents.
• To show document owners who opened a link and what they read.
• To send transactional email, such as invites and sign-in messages.
• To provide AI features on content you choose to use them on.
• To keep the service secure, prevent misuse and fix problems.

We do not sell personal data. We do not use it for advertising.

Service providers

We use service providers to run Startup MIS. They process data on our behalf and only to provide their service to us.

• Supabase: hosted database, authentication and file storage.
• Vercel: website and app hosting.
• A transactional email provider: sends account and invite emails.
• A hosted AI model provider: processes content you submit to AI features.

These providers may process data in countries other than your own. We may also disclose data where the law requires it.

How long we keep it

We keep your data while your account or project is active. When you ask us to delete it, we remove it from live systems. Backup copies are removed as backups expire on their normal cycle.

Your choices and rights

• Ask us by email for a copy of your data, or ask us to correct or delete it.
• Revoke a Docivo link at any time. A revoked link stops working.
• Choose whether to give your email when opening a Docivo link, where the link allows it.

You may have other rights under the law that applies to you. We will respond to requests within a reasonable time.

Cookies

• A session cookie keeps you signed in.
• A signed cookie remembers that you have been given access to a Docivo link.
• We do not use advertising or cross-site tracking cookies.

Security

Access to project data is limited to project members. We use reasonable technical and organisational measures to protect data. No system is fully secure, so we cannot guarantee absolute security.

Children

Startup MIS is a business service. It is not meant for children.

Changes

We may update this policy. The date at the top shows the latest version. We will tell account holders about significant changes.

Contact

Questions or requests: hello@startupmis.com.

Invite only for now. Pricing will be announced later.