Privacy Policy

Voluntary Participation

The use of this website is voluntary. You are in no way forced to provide personal information. However, certain services such as email contact or account registration require you to submit personal data.

Data Administrator

The administrator of personal data processing on this website is the operator of Startup Starter.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right to access - You can request information about your personal data being processed
Right to rectification - You can request correction of inaccurate personal data
Right to erasure - You can request deletion of your personal data (the "right to be forgotten")
Right to restriction of processing - You can request limitation of processing your data
Right to object - You can object to the processing of your personal data
Right to data portability - You can request transfer of your data to another service provider
Right to withdraw consent - You can withdraw your consent to data processing at any time
Right to lodge a complaint - You can file a complaint with the supervisory authority for personal data protection

Purpose of Data Processing

We process your personal data for the following purposes:

Email Communication

Responding to contact form inquiries
Sending service-related notifications
Account verification and password reset
System updates and important announcements

Payment Processing

Processing subscription payments via Stripe
Managing billing information
Generating invoices and receipts
Handling refunds and disputes

Analytics and Performance

Website usage analytics via Umami
Understanding user behavior and preferences
Improving website performance and user experience
Statistical analysis (anonymized data)

Marketing and Optimization

Service improvement based on user feedback
Product development and feature optimization
Understanding user needs and preferences

Information We Collect

Usage Data

Pages visited
Time spent on the website
Browser type and version
Device information
IP address (anonymized in analytics)
Referring website

Payment Information

Billing details (processed securely via Stripe)
Payment history
Subscription status

Communication Data

Email correspondence
Support tickets
Feedback and inquiries

Data Recipients and Transfers

Your personal data may be shared with the following service providers:

EU-Based Services

Amazon AWS (Ireland) - Database storage (DynamoDB)

Non-EU Services

Amazon AWS (Edge Locations) - Content delivery and performance optimization
Stripe - Payment processing
Email service providers - Transactional emails

All data transfers outside the EU are conducted in accordance with GDPR requirements, using appropriate safeguards such as Standard Contractual Clauses or Privacy Shield framework (where applicable).

Cookies and Tracking Technologies

Essential Cookies

We use essential cookies necessary for the website to function properly, including:

Authentication cookies
Session management
Security features

Analytics

We use Umami Analytics, a privacy-focused analytics platform that:

Does not use cookies
Does not track users across websites
Does not collect personally identifiable information
Complies with GDPR, CCPA, and PECR

You can opt out of analytics by:

Using browser incognito/private mode
Blocking analytics scripts in your browser
Enabling "Do Not Track" in your browser settings

You can manage your cookie preferences at any time through your browser settings. However, disabling essential cookies may affect website functionality.

Data Retention

We retain your personal data only for as long as necessary:

Payment records: As required by law (typically 7 years for accounting purposes)
Communication logs: Until they become obsolete or upon request
Analytics data: Automatically deleted after 30 days (anonymized data may be retained longer)
Server logs: Automatically deleted after 30 days

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption of data in transit (SSL/TLS)
Encrypted storage of sensitive data
AWS security infrastructure
Regular security audits
Access controls and authentication
Secure payment processing via PCI-compliant providers

Account Management and Data Deletion

You have full control over your account and data:

Data Export

You can request a copy of your personal data by contacting us at the email below.

Third-Party Services

This website integrates with third-party services:

AWS Amplify - Backend infrastructure and authentication
Stripe - Payment processing (see Stripe Privacy Policy)
Umami - Privacy-focused analytics
Email service providers - Transactional emails

Each service has its own privacy policy and data processing practices.

Changes to Privacy Policy

We may update this privacy policy from time to time. Significant changes will be communicated via:

Email notification to registered users
Notification on the website
Update to the "Last Updated" date

Children's Privacy

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Contact

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Email: info@cresh.me

For data protection inquiries, you can also contact the relevant data protection authority in your jurisdiction.

Last Updated: November 2025

This privacy policy is designed to comply with GDPR and other applicable data protection regulations. By using our service, you acknowledge that you have read and understood this privacy policy.