Privacy Policy for Platform of innovative projects

This Privacy Policy explains how Association of startups of Ukraine (“we”, “us”, “our”) collects, uses, and shares personal data when you use https://platform.startups.org.ua/ (the “Platform”).

If you have questions or requests, contact us at [email protected].

1) What data we collect

A. Account and profile (registration)
When you create an account, we may collect:

Email and password (password is stored in a protected/hashed form).
Profile information you choose to provide (e.g., name, organization, position, contact details, and other profile fields available on the Platform).

Important (public profile): Some profile information is visible to other users of the Platform and may be accessible within the Platform environment. Please avoid adding information you do not want to be visible to others.

B. Contact form (Fluent Forms)
If you submit a form, we collect the fields you provide:

Name
Email
Phone
Comment
Your consent selection (via the checkbox, where applicable)

C. Payments (WayForPay)
If you make a payment, the payment is processed by WayForPay. We typically receive and store payment status and transaction details (e.g., confirmation, date/time, amount, order reference).
We do not intentionally collect or store full payment card details on our servers; those are handled by the payment provider.

D. Usage data, cookies, and similar technologies
We use:

Google Tag Manager (GTM)
Google Analytics (GA)
Google Ads / Remarketing / Consent Mode
Meta (Facebook) Pixel

These tools may collect data such as IP address (in some cases), device and browser information, approximate location, pages viewed, actions taken, and cookie identifiers.

2) Why we use your data (purposes)

We use personal data to:

Provide and operate the Platform (accounts, login, user profiles)
Respond to your messages and form submissions
Process and manage payments and confirmations
Improve performance, analytics, and user experience
Run advertising/remarketing and measure marketing effectiveness (where enabled and subject to consent, as applicable)
Prevent fraud, protect security, and enforce our terms
Comply with legal obligations

3) Legal bases (where applicable)

Depending on context, we process data based on:

Contract necessity (to provide the Platform and account features)
Consent (e.g., marketing checkbox, certain cookies/trackers where required)
Legitimate interests (service improvement, security, fraud prevention)
Legal obligations (accounting, compliance, responding to lawful requests)

4) Who we share data with

We may share data with:

Hosting provider: Hostinger (to host the WordPress site and related services)
Analytics and advertising partners: Google (GTM/GA/Ads/Consent Mode) and Meta (Pixel)
Payment provider: WayForPay (to process payments)
Contractors and service providers who help us operate and maintain the Platform (limited access, as needed)
Authorities or advisors if required by law or to protect rights and security

We do not sell your personal data in the sense of “selling” for money, but some advertising technologies may be considered “sharing” under certain laws.

5) Cookies and tracking

We use cookies and similar technologies for:

Essential site functions
Analytics (GA)
Advertising/remarketing (Google Ads, Meta Pixel)

Where required, we show a consent mechanism and use Consent Mode. You can also control cookies via your browser settings and opt out of personalized ads via Google/Meta ad settings.

6) Data retention

We keep personal data only as long as necessary for the purposes described above, including:

As long as your account is active
As needed to respond to requests
As required by law (e.g., accounting/transaction records)
Until you withdraw consent (where processing is based on consent) or request deletion, where applicable

7) Security

We use reasonable technical and organizational safeguards (access controls, least-privilege access, and standard security practices). However, no method of transmission or storage is 100% secure.

8) International users and transfers

The Platform is available worldwide. Our service providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for cross-border transfers.

9) Your rights

Depending on your location, you may have rights to:

Access your data
Correct or update it
Delete it
Object to processing or request restriction
Withdraw consent (where applicable)
Request data portability

To exercise rights, contact [email protected]. We may need to verify your identity.

10) Children

The Platform is intended for a general audience. We do not knowingly collect sensitive data and do not intentionally collect personal data from children where prohibited by applicable law.

11) Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.