← ZeroToOpen
Draft template — not legal advice.

This page describes what the app actually stores and sends today, but it hasn't been reviewed by a lawyer. Have it reviewed by a licensed attorney — and checked against any applicable data-protection law — before relying on it for a real launch, and especially before partnering with a nonprofit, accelerator, or government office that may have its own data-handling requirements.

Privacy Policy

Last updated: 2026-07-21

What we store

When you create an account, we store your email address and a securely hashed password (scrypt) — never your password in plain text. Your business plan data (checklist, budget, timeline, tasks, notes, contacts, documents, chat history) is stored in a database tied to your business workspace, along with basic usage events (like signup and setup completion) used to understand how the app is used.

Cookies

We use a single session cookie to keep you signed in. It's marked HttpOnly and SameSite=Strict, meaning it isn't readable by JavaScript and isn't sent on cross-site requests. We don't use tracking or advertising cookies.

Third parties we send data to

We don't sell your data or share it with advertisers.

Who can see your data

Only you, and anyone you've explicitly invited to your business workspace via an invite link, can see your business plan data. ZeroToOpen operators can access the underlying database for support and maintenance, but don't use your business data for any other purpose.

If you choose to connect your business to an organization (an accelerator, nonprofit, investor, or government program) via its referral link or code, that organization can see your launch progress metrics — things like your business name, industry, checklist completion percentage, budget totals, and milestone counts. It can never see your notes, documents, messages, contacts, or individual budget line items. You can disconnect from an organization at any time in Settings, which immediately stops the sharing.

How long we keep it

We keep your data for as long as your account exists. If you delete your account, your business data is removed. The database is backed up periodically for disaster recovery (same server, not offsite) and old backups are pruned automatically.

Your choices

You can change your password, remove partners from your workspace, and disconnect Google Drive at any time from Settings. To delete your account entirely, contact support.

Changes

This policy may change as the app evolves. Continued use after a change means you accept the updated policy.