1. What We Collect

When you purchase the Acquisition Engine setup, we collect: your name, email address, phone number, and payment information (processed by Stripe — we never see or store your card details). During onboarding and intake, we collect business information including your offer details, customer economics, operational processes, and account access credentials as needed for system installation.

2. How We Use It

Your information is used to:

• Install, configure, and hand off the acquisition system
• Communicate with you during the build and handoff
• Provide onboarding access via secure magic-link authentication
• Fulfill our obligations under the Terms of Service

3. Payment Processing

All payment data is handled exclusively by Stripe. Starset Solutions receives a transaction reference and customer email from Stripe — never your card number, CVV, or banking details.

4. Data Storage

Business data and intake responses are stored in a Supabase (PostgreSQL) database with row-level security. Each client's data is isolated — no client can access another client's data. Account credentials you provide for system integration are stored securely and used solely for the purpose of installing and configuring your acquisition system.

5. Data Retention

We retain your business data and intake responses for the duration of the engagement and for 90 days after handoff, after which it is deleted unless you request earlier deletion. Payment records are retained as required for accounting and tax compliance.

6. What We Don't Do

We do not:

• Sell your data to third parties
• Share your intake responses with other clients
• Use your data for advertising or lead generation on our behalf
• Retain access to your accounts after handoff unless you explicitly grant it

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting info@starsetsolution.online. Upon handoff, you own all accounts, data, and infrastructure — we withdraw access unless retained.

8. Third-Party Services

The acquisition system may integrate with third-party platforms (Stripe, Supabase, Meta, Google, CRM providers). Each platform has its own privacy policy governing data stored on their infrastructure. We recommend reviewing those policies for platforms connected during your build.

9. Security

All model and processing calls occur server-side in Supabase Edge Functions — never in the client browser. API keys and secrets are stored in Edge Function secrets, never shipped to the browser. Database access is governed by row-level security policies, deny-by-default.

10. Changes

We may update this Privacy Policy. Material changes will be communicated to active clients via email.

11. Contact

Privacy questions: info@starsetsolution.online