Privacy Policy

Last Updated: October 13, 2025

Introduction

Welcome to Fortuna, a product of Kuip Limited ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at fortuna.provable.dev (the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Information We Collect

Information You Provide to Us

Account Information:

  • Email address (required for account creation)
  • Display name or username (if provided)
  • Password (stored in encrypted form)
  • Profile information you choose to provide

Payment Information:

  • When you subscribe to a paid plan, payment information is collected and processed by Stripe, our payment processor
  • We store your Stripe customer ID, subscription ID, and transaction records
  • We do NOT store your credit card numbers or sensitive payment information on our servers

User-Generated Content:

  • Opportunities you submit (hackathons, grants, accelerators, VC programs)
  • Organization information you provide
  • X/Twitter posts or links you submit

Communications:

  • Messages you send to us via email or contact forms
  • Support requests and correspondence

Information from Third-Party Services

Google OAuth:

  • If you sign in using Google, we receive your email address and basic profile information from Google
  • We do not access your Google account beyond the initial authentication

Stripe:

  • Payment processing data
  • Subscription status and billing information
  • Payment success/failure notifications

How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain Our Service:

  • Create and manage your account
  • Process your subscription payments
  • Provide access to premium features based on your tier
  • Track promo code usage and redemptions
  • Manage your points balance

To Improve Our Service:

  • Understand how users interact with our platform
  • Identify and fix technical issues
  • Develop new features and functionality
  • Conduct analytics and research (may be implemented in the future)

To Communicate With You:

  • Send transactional emails (account confirmation, password resets)
  • Notify you about subscription renewals or expirations
  • Respond to your inquiries and support requests
  • Send important service announcements

To Ensure Security and Prevent Fraud:

  • Detect and prevent fraudulent transactions
  • Monitor for abuse of promotional codes
  • Protect against unauthorized access
  • Enforce our Terms of Service

For Compliance:

  • Comply with legal obligations
  • Respond to legal requests and prevent harm

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal or compliance purposes.

Specific Retention Periods:

  • Account data: Retained while account is active + 90 days after deletion
  • Payment records: Retained for 7 years for tax and accounting purposes
  • Usage logs: Retained for 12 months
  • Support communications: Retained for 3 years

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

With Service Providers:

  • Supabase: Database hosting and authentication
  • Stripe: Payment processing
  • Google: OAuth authentication
  • These providers are contractually obligated to protect your data and use it only for the purposes we specify

For Legal Reasons:

  • To comply with legal obligations (court orders, subpoenas)
  • To protect our rights, property, or safety
  • To prevent fraud or illegal activity

Business Transfers:

  • If we are involved in a merger, acquisition, or sale of assets, your information may be transferred
  • We will notify you before your information is transferred and becomes subject to a different privacy policy

With Your Consent:

  • We may share information for other purposes with your explicit consent

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability:

  • Request a copy of your personal information
  • Download your data in a structured format

Correction:

  • Update or correct inaccurate information
  • You can update most information directly in your account settings

Deletion:

  • Request deletion of your account and personal information

Opt-Out:

  • Unsubscribe from marketing emails (if we send them in the future)
  • Disable cookies through your browser settings (may affect functionality)

Data Portability:

  • Request a machine-readable copy of your data

Objection:

  • Object to processing of your personal information in certain circumstances

Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption of data in transit (HTTPS/TLS)
  • Encrypted storage of passwords using industry-standard hashing
  • Regular security updates and monitoring
  • Access controls and authentication requirements
  • Secure payment processing through Stripe (PCI-DSS compliant)

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

International Data Transfers

Our Service is operated in the European Union. If you access our Service from outside the EU, please be aware that your information may be transferred to, stored, and processed in the EU or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

Third-Party Links

Our Service may contain links to third-party websites (e.g., X/Twitter, organization websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification for material changes (if you have an account)

We encourage you to review this Privacy Policy periodically for any changes.

Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context:

  • Contract Performance: To provide our Service and fulfill our contract with you
  • Legitimate Interests: To improve our Service, ensure security, and communicate with you
  • Consent: For optional features like analytics (if implemented)
  • Legal Obligations: To comply with laws and regulations

If you have questions about this Privacy Policy or our privacy practices, please contact us.

Fortuna - A product of Kuip Limited. Your gateway to global opportunities.