Privacy Policy

Last updated: March 21, 2026

1. Introduction

At UpStart Quest ("we," "us," or "our"), we are committed to protecting your privacy. We operate as the data controller under the General Data Protection Regulation (GDPR) and other applicable EU data protection laws. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website scraping and recommendation service (the "Service"). By using the Service, you consent to the practices described in this policy.

Our contact details: UpStart Quest, email: [email protected].

2. Identity of the Data Controller

UpStart Quest is the data controller responsible for your personal data. We have no Data Protection Officer (DPO), but you can contact us for all data matters at [email protected].

3. Information We Collect

We collect only the minimum information necessary to provide the Service:

  • Personal Information: Your name and email address, provided voluntarily when requesting the Service.
  • Website Content: Content from the website you request us to scrape, used solely for analysis to generate recommendations. We respect robots.txt and do not scrape protected content.

We do not collect cookies, browsing history, or any other tracking data. No automated data collection occurs without your explicit request.

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR Art. 6:

  • Contractual necessity (Art. 6(1)(b)): To process your request and provide personalized recommendations.
  • Legitimate interests (Art. 6(1)(f)): To communicate updates, improve the Service, and analyze scraped content (assessed via Legitimate Interests Assessment (LIA), available on request).
  • Consent (Art. 6(1)(a)): For any optional communications. You can withdraw consent anytime.

5. How We Use Your Information

We use the collected information solely for:

  • Processing your request and providing personalized recommendations for promoting your startup.
  • Communicating with you about the Service (e.g., sending results).
  • Improving the Service and ensuring its proper functioning.

Scraped website content is used exclusively for generating your recommendations and is not retained or used for other purposes.

6. Sharing of Information

We do not sell, rent, or share your personal information with third parties, except:

  • Subprocessors and tools for scraping and analysis (e.g., cloud hosting provider), bound by Data Processing Agreements (DPAs) and confidentiality. A list of current subprocessors is available on request.
  • As required by law (e.g., authorities).

No international transfers outside the EEA occur. If needed, we use Standard Contractual Clauses (SCCs).

7. Data Security

We implement appropriate technical and organizational measures (e.g., encryption, access controls) to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

8. Your Rights under GDPR

You have the following rights (Art. 15-22 GDPR):

  • Access, rectification, or erasure of your data.
  • Restriction of processing or objection (including to legitimate interests).
  • Data portability (in structured format).
  • Withdraw consent.
  • Right against automated decisions (none applied here).

To exercise these rights, contact [email protected] within 1 month. We may charge a fee for complex requests.

You also have the right to lodge a complaint with the supervisory authority of your EU Member State (list at https://edpb.europa.eu/about-edpb/board/members_en).

9. Data Retention

  • Personal information: You can request deletion in the settings.
  • Scraped content: You can request deletion in the project menu.

10. Changes to This Privacy Policy

We may update this Privacy Policy. The "Last updated" date reflects changes. Check periodically; significant updates will be emailed.

11. Contact Us

Questions? Email [email protected].