Legal
Effective August 19, 2026
This policy explains what information YIP Founder Growth Lab ("YIP," "we," "us") collects when you use yip.ac and the founder workspace it links to, why we collect it, and the choices you have. It applies to visitors, applicants, and admitted founders and mentors alike.
Creating an account (by invitation, after admission) requires an email address and password, handled by our authentication provider, Supabase. Your public profile name, username, avatar, headline, bio, and location, is either set up on your behalf or entered by you when you edit your profile. None of it is required to be your real identity, but the directory is public by design: anything you put on your profile is visible to other members and, for the public /members directory, to anyone who visits the site.
Applying to a cohort collects your name, email, startup or company name, an optional website or social link, and free-text answers about what you're building, your stage, and your biggest current challenge. We use this solely to evaluate applications and communicate with applicants, it is not published anywhere.
Inside the founder workspace, messages you post in community channels, comments on blog posts, reactions, calendar RSVPs, and lesson progress/notes are all stored so the product can function, a chat with no message history, or a course with no progress tracking, isn't useful to anyone. Your own private lesson notes are visible only to you; nobody on our team can read them, including admins.
We use a small number of cookies to keep you signed in, these are set by Supabase and are required for the site to work, not for tracking. A separate cookie remembers your light/dark theme choice. Blog post likes and view counts are deduplicated in your browser's local storage rather than tied to an account, so we know a post was liked once from a given browser, not who liked it.
We do not run third-party advertising trackers or sell any data to anyone.
We don't sell personal information. A handful of vendors process data on our behalf, strictly to run the service:
Each of these providers has its own privacy practices governing the infrastructure they run; we choose vendors that support the security and privacy commitments in this policy. We may also disclose information if required by law, or to protect the rights, safety, or property of YIP or our members.
We keep account and profile data for as long as your account is active. If your account is deleted, associated personal data is removed from active systems; content that continues to make sense without attribution (for example, a community message, per our own moderation history requirements) may be retained with the author unlinked rather than deleted outright.
We rely on our infrastructure providers' security practices (encryption in transit, access controls, row-level database permissions) and apply our own access rules on top, for example, admin actions are logged, and private notes are never readable by staff. No method of storing or transmitting data is perfectly secure, and we can't guarantee absolute security.
YIP is a program for startup founders and is not directed at, or knowingly used by, children under 16. If we learn we've collected information from a child under 16, we'll delete it.
YIP's members and mentors are based in multiple countries. By using the site, you understand your information may be processed in a country other than the one you live in, by the infrastructure providers listed above.
If we make a material change to this policy, we'll update the effective date above and, where appropriate, let members know directly.
Questions about this policy, or requests to access, correct, or delete your data, can be sent to privacy@yip.ac.