Privacy Policy

1. Introduction

1slap ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using 1slap, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

• Email address
• Password (encrypted)
• Profile information (name, optional)
• Payment information (processed by Stripe)

Pitch Content (Founders)

• Video uploads
• Pitch descriptions and metadata
• Business information you choose to share

Intent Information (Swipers)

• Buyer intent selections
• Collaboration interest
• Notification preferences
• Contact information you voluntarily provide

2.2 Information Collected Automatically

Usage Data

• Pages visited and features used
• Swipe actions (Slap/Flop)
• Video watch time and engagement metrics
• Session duration and frequency
• Referral sources

Device and Technical Information

• IP address
• Browser type and version
• Device type and operating system
• Screen resolution
• Unique device identifiers

Cookies and Tracking Technologies

• Session cookies
• Analytics cookies (PostHog)
• Authentication tokens
• Local storage data for anonymous users

2.3 Information from Third Parties

Social Login Data

If you use social authentication, we receive basic profile information from the provider (Google, etc.)

Payment Information

Stripe processes payments and may share transaction data with us

3. How We Use Your Information

3.1 Core Platform Functions

• Authenticate users and maintain accounts
• Display pitch videos to swipers
• Process swipes and record feedback
• Capture and store intent signals
• Generate analytics for founders
• Enable notifications about activity

3.2 Business Operations

• Process payments and subscriptions
• Provide customer support
• Moderate content for compliance
• Prevent fraud and abuse
• Enforce our Terms and Conditions

3.3 Platform Improvement

• Analyze usage patterns and trends
• Improve user experience and features
• Test new functionality
• Conduct research and development

3.4 Communications

• Send transactional emails (account verification, payment confirmations)
• Send push notifications (if enabled)
• Provide customer support responses
• Send platform updates (with option to opt out)

4. Email Masking and Privacy Protection

Founder-Swiper Privacy

• Founders never see swipers' real email addresses
• Intent data shows masked identifiers (e.g., "User #1234")
• We act as intermediary for launch notifications
• Real contact information is only revealed with explicit consent

Anonymous Swiping

• Users can swipe without creating an account
• Anonymous activity is tracked but not linked to personal identity
• Upgrading to an account retroactively associates past swipes

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with trusted third-party providers who help operate our Platform:

These providers are contractually required to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoenas, court orders)
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

5.3 Business Transfers

If 1slap is acquired or merged with another company, your information may be transferred to the new entity.

5.4 Aggregated Data

We may share anonymized, aggregated statistics about Platform usage, which cannot identify individual users.

5.5 With Your Consent

We may share your information in ways not described here if you explicitly consent.

6. Data Retention

• Active Accounts: We retain your data while your account is active and for a reasonable period after closure

• Pitch Videos: Stored until you delete them or close your account. May be retained longer if required for legal compliance

• Swipe Data: Retained for analytics and fraud prevention purposes. Anonymized after a specified retention period

• Payment Records: Kept for tax and accounting compliance (typically 7 years)

• Logs and Analytics: Retained according to our data retention schedule (typically 90 days to 2 years)

7. Your Rights and Choices

7.1 Access and Correction

• Request a copy of your personal data
• Update or correct inaccurate information
• Export your data in a portable format

7.2 Deletion

• Request deletion of your account and associated data
• Note: Some data may be retained for legal or legitimate business purposes

7.3 Opt-Out Rights

• Unsubscribe from marketing emails (transactional emails still sent)
• Disable push notifications in your browser or device settings
• Opt out of analytics tracking (may limit Platform functionality)

7.4 Cookie Management

• Configure cookie preferences in your browser settings
• Note: Some cookies are essential for Platform operation

7.5 Data Portability

Request your data in a structured, machine-readable format

7.6 Objection and Restriction

• Object to certain data processing activities
• Request restriction of processing under specific circumstances

To exercise these rights, contact us at [[email protected]]

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We take appropriate safeguards to ensure your data receives adequate protection.

For EU/EEA Users

• We comply with GDPR requirements
• Data transfers use standard contractual clauses or other approved mechanisms

For California Users

See Section 11 for CCPA-specific rights

9. Children's Privacy

1slap is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected data from a minor, we will delete it promptly. Parents who believe their child has provided information should contact us immediately.

10. Security Measures

We implement industry-standard security measures to protect your data:

Technical Safeguards

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication protocols
• Regular security audits

Organizational Safeguards

• Access controls and authentication
• Employee training on data protection
• Incident response procedures

Infrastructure Security

• Cloudflare WAF and DDoS protection
• Rate limiting and bot detection
• Regular security updates

Despite these measures, no system is 100% secure. You are responsible for protecting your account credentials.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights:

Right to Know

• What personal information we collect
• Sources of that information
• Purposes for collecting it
• Third parties we share it with

Right to Delete

Request deletion of your personal information (subject to exceptions)

Right to Opt-Out

We do not sell your personal information

Right to Non-Discrimination

We will not discriminate against you for exercising your rights

How to Exercise Rights

• Email: [[email protected]]
• We will respond within 45 days

12. European Privacy Rights (GDPR)

If you are in the EU/EEA, you have additional rights:

Legal Bases for Processing

• Contract performance (providing Platform services)
• Legitimate interests (Platform improvement, fraud prevention)
• Consent (marketing, optional features)
• Legal obligations (compliance, tax requirements)

Additional Rights

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

Data Protection Officer

Contact: [[email protected]]

13. Push Notifications

Web Push Notifications

• Require explicit browser permission
• Can be disabled at any time in browser settings
• Used for important updates and engagement

What We Send

• Pitch performance updates (founders)
• New idea alerts (swipers, if opted in)
• Important account notifications

Frequency Controls

• Throttling mechanisms to prevent spam
• User preference settings in your account

14. Analytics and Tracking

PostHog Analytics

• Tracks user behavior and engagement
• Creates funnels and retention reports
• Data is pseudonymized where possible

What We Track

• Page views and navigation
• Swipe actions and patterns
• Video engagement metrics
• Feature usage

Opting Out

You can disable analytics tracking, but this may limit Platform functionality

15. Third-Party Links

The Platform may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies independently.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes may be communicated via email or Platform notification. Continued use after changes constitutes acceptance.

17. Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours (where legally required)
• Describe the nature of the breach
• Provide guidance on protective measures
• Report to relevant authorities as required by law

18. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: [[email protected]]
Support: [[email protected]]
Address: [Your Company Address]

Response Time: We aim to respond to privacy requests within 30 days.