Last updated: 10 June 2026

This policy explains what data Incubateer collects, how we use it, who we share it with, and the rights you have. Incubateer is operated by Mahesh Kadamkode from Kerala, India ("Incubateer", "we", "us"). Questions or requests: [email protected].

1. What we collect

• Account details: your name, email, and password (stored only as a secure hash, never in plain text).
• Startup profile: the information you enter, such as startup name, industry, stage, bio, the problem you solve, team size, revenue stage, funding stage, location and state, legal entity, founder category, DPIIT or Udyam status, and website.
• Activity: grants you save or track, applications and their status, documents you upload, and basic usage analytics.
• Technical data: IP address, browser and device information, and cookies needed to keep you signed in.

2. How we use it

• To match grants and schemes to your startup and score how well you fit.
• To run the service: your account, dashboard, application pipeline, and documents.
• To send you account emails and, if you opt in, a grant digest. You can unsubscribe from the digest at any time.
• To improve the product and keep it secure.

3. AI processing

To match grants and help draft applications, we send relevant parts of your startup profile (such as your bio and sector) to AI providers, currently Google (Gemini), Groq, and Anthropic, through their APIs. They process this data to return results to us. We do not authorise them to use your data to train their own models, and we send only what is needed for the feature you are using.

4. Who we share it with

We use a small set of trusted service providers to run Incubateer:

• Hosting and database providers (to store your data securely).
• Email delivery (Resend) for account and digest emails.
• AI providers (as described above) for matching and drafting.
• Error monitoring and basic analytics to keep the service working.

We may also disclose data if required by law.

5. Your rights

Under India's Digital Personal Data Protection Act and applicable law, you can:

• Access the data we hold about you.
• Correct or update it.
• Delete your account and data.
• Withdraw consent for optional processing, such as the email digest.
• Raise a grievance about how your data is handled.

To exercise any of these, email [email protected] and we will respond within a reasonable time.

6. Data retention

We keep your data while your account is active. If you delete your account or ask us to remove your data, we delete it, except anything we must keep for legal or security reasons.

7. Security

Passwords are hashed, sessions use signed tokens, and data is encrypted in transit. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you of a breach where the law requires it.

8. International transfers

Some of our providers (for hosting and AI) process data on servers outside India. Where that happens, we rely on those providers' safeguards to protect your data.

9. Cookies

We use cookies and similar storage to keep you signed in and to understand basic, aggregate usage. We do not use them for third-party advertising.

10. Children

Incubateer is for people aged 18 and over. We do not knowingly collect data from children.

11. Changes

We may update this policy. If we make a material change, we will give reasonable notice and update the date above.

12. Contact and grievances

For any privacy question, request, or grievance, contact Mahesh Kadamkode at [email protected].