Privacy Policy
Last updated: December 1, 2025
We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (the "Site").
1. Data Controller
StepUp Ventures by The California Open Source Company
San Francisco, CA, USA
Email: privacy@stepup.ventures
2. Information We Collect
A. Information you provide directly via the contact form
- Name
- Email address
- Message content
- IP address and timestamp (collected automatically for spam prevention)
B. Information collected automatically
When you browse the Site, we (and our third-party partners) automatically collect:
- Browser type, operating system, device type
- Approximate location (city/country level)
- Pages visited, time spent, referring site
- Cookies and similar technologies (see Section 5)
3. How We Use Your Information
- To reply to your contact form messages
- To prevent spam and abuse (Botpoison)
- To understand how visitors use the Site and improve it (Google Analytics)
- For remarketing and interest-based advertising – we may use Google Analytics and its advertising features (e.g., Remarketing, Demographics and Interests reporting, Google Ads integration) to show you ads on other sites based on your previous visits here
- To comply with legal obligations
Important: We do not sell your personal data in the traditional sense, but under California (CCPA/CPRA) and some other laws, using Google Analytics for remarketing or interest-based advertising can be considered a "sale" or "sharing" of data. See Section 8 for your opt-out rights.
4. Who We Share Your Data With
| Service | What they receive | Purpose | Location / Safeguards |
|---|---|---|---|
| Formspark | Name, email, message, IP, timestamp | Store & forward contact forms | USA – Standard Contractual Clauses + EU-U.S. DPF |
| Botpoison | IP address, browser fingerprint, behavior data | Spam & bot protection | EU or USA (see https://botpoison.com/legal) |
| Google LLC | IP address, cookie IDs, usage data, advertising IDs | Analytics + possible remarketing | USA – EU-U.S. Data Privacy Framework + SCCs |
| Web hosting & technical providers | Only as strictly necessary | Hosting, security, backups | Contractually bound to confidentiality |
| Legal authorities | Only when required by law | Compliance | N/A |
5. Cookies & Tracking Technologies
| Cookie / Identifier | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _gid, _gat, _ga_* | Google Analytics | Analytics & possible remarketing | Up to 2 years |
| _gcl_au, _gclid | Google Ads | Conversion tracking (if we run ads) | 90 days |
| Botpoison-related cookies | Botpoison | Spam/bot protection | Session or short |
| Session cookies (if any) | Our server | Basic site functionality | Session |
You can block or delete cookies in your browser at any time.
Opt-out links
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Google Ads personalization: https://adssettings.google.com
6. Data Retention
- Contact form submissions (Formspark): up to 36 months or until the inquiry is resolved
- Botpoison data: deleted shortly after verification
- Google Analytics data: 26 months (automatically deleted thereafter)
7. International Data Transfers
Your data may be transferred to and processed in the United States (Formspark, Google, possibly Botpoison). We rely on the EU-U.S. Data Privacy Framework (where certified) and Standard Contractual Clauses.
8. Your Rights & Choices
Depending on your location, you have the right to:
- Access, correct, or delete your personal data
- Object to or restrict processing
- Opt out of "sale" or "sharing" of personal information
- Withdraw consent where we rely on it
California residents: Using Google remarketing is considered "sharing" under CCPA. You can opt out via the Google links above or by contacting us.
To exercise any right, email privacy@stepup.ventures. We will respond within 30 days.
9. Security & Children
We use HTTPS, regular updates, and reasonable security measures.
The Site is not directed at children under 13 (or 16 in some jurisdictions), and we do not knowingly collect their data.
10. Changes to This Policy
We will post any changes here and update the "Last updated" date.
11. Contact Us
Questions or requests?
Email: privacy@stepup.ventures
Turn confusion into clarity, and
bottlenecks into opportunities.
Book a call with us to gain clarity about your next steps and learn more about our process.
BOOK A CALL