Privacy & data retention

What we store

kuanta-clone stores the information you give us to run the product: your account details (email, name, and a hashed password — never the password itself), your organization's profile, invitations you send, pitch decks you upload and the text we extract from them, the evaluation reports we generate, your watchlists and saved searches, and a log of activity inside your organization. We also maintain a curated catalog of startups and founders, which includes some contact details of people outside our user base.

How long we keep it

These are the retention windows we commit to for each kind of data.

Data	How long we keep it
Your account (email, name, password hash)	Until you delete your account, plus a 30-day grace period After the 30 days, it is permanently deleted.
Your organization's profile (name, slug)	Until the organization is deleted, plus 30 days Deleting an organization also removes its members' data.
Invitations you send (invitee email)	Until the invitation expires, plus 30 days The invite token itself expires after 7 days.
Pitch decks you upload (file and extracted text)	Until you delete it or your account (plus 30 days), or 24 months after upload — whichever comes first You can ask us to delete a single deck without deleting your account.
Evaluation reports generated from a deck	Same lifetime as the deck they were generated from Deleted together with the source deck.
Activity log (who did what, when)	180 days If you delete your account, log entries are anonymized rather than deleted, to keep your organization's audit history intact.
Watchlists and their items	Until you delete your account, plus 30 days
Saved searches	Until you delete your account, plus 30 days
Scoring rubric settings (organization-level weights)	As long as the organization exists Contains no personal data.
Founder contact details in our startup catalog (name, email, LinkedIn)	Until removed on request or by our review, or 24 months after last update This is third-party information; see “Founders” below for how to request removal. The startup's non-personal profile is kept indefinitely.
Login sessions	24 hours Expire automatically.
Password-reset links	1 hour, single-use
Rate-limit counters	60 seconds Contain no personal data.
Cached copies of reports and search results	Same lifetime as the report they were made from Purged when the source report is deleted.

Deleting your account

Self-service account deletion is not yet available in this version of the product. To delete your account, email us at support@shinos.me from the address on your account. Here is what happens when we process a deletion request:

Your account is deactivated immediately: you are signed out everywhere and can no longer log in.
For 30 days your data is kept in a recoverable state. If you change your mind, email support within that window and we will restore your account.
After 30 days, your account, uploaded decks, evaluation reports, watchlists, and saved searches are permanently deleted. Activity log entries and invitations you sent are anonymized instead of deleted, so your organization's audit history stays intact.
We send a confirmation email when we receive the request, noting the 30-day cancellation window.
We keep a minimal deletion receipt (request ID, timestamp, and scope — not your data) for 7 years, as evidence that the deletion was carried out.

You can also ask us to delete a single uploaded deck without deleting your account, or to delete your whole organization (organization owners only) — email support@shinos.me for either.

Founders

Our startup catalog may include your name, email, or LinkedIn URL if you are a founder of a company we track. If you would like this information removed, email support@shinos.me and we will remove your personal details while keeping the company's non-personal profile.

Data that expires on its own

Login sessions expire after 24 hours, password-reset links after 1 hour (and are single-use), and rate-limit counters after 60 seconds. None of these need a request from you.

Questions

Anything unclear, or a request not covered above? Email support@shinos.me. Where this page doesn't state a rule, the honest answer is that it is not yet defined — ask us and we will give you a straight answer.