Privacy Policy
Last updated: August 30, 2026
We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (the "Site").
1. Data Controller
StepUp Ventures by The California Open Source Company
San Francisco, CA, USA
Email: privacy@stepup.ventures
2. Information We Collect
A. Information you provide directly via the contact form
- Name
- Email address
- Company or asset name (optional)
- Message content
- Submission metadata such as page URL and timestamp
B. Information collected automatically
When you browse the Site, we (and our third-party partners) automatically collect:
- Browser type, operating system, device type
- Approximate location (city/country level)
- Pages visited, time spent, referring site
- Cookies and similar technologies (see Section 5)
3. How We Use Your Information
- To reply to your contact form messages
- To prevent spam and abuse
- To understand how visitors use the Site and improve it (Google Analytics, Apollo.io)
- For remarketing and interest-based advertising – we may use Google Analytics and its advertising features (e.g., Remarketing, Demographics and Interests reporting, Google Ads integration) to show you ads on other sites based on your previous visits here
- To comply with legal obligations
Important: We do notsell your personal data in the traditional sense, but under California (CCPA/CPRA) and some other laws, using Google Analytics for remarketing or interest-based advertising can be considered a "sale" or "sharing" of data. See Section 8 for your opt-out rights.
4. Who We Share Your Data With
| Service | What they receive | Purpose | Location / Safeguards |
|---|---|---|---|
| Z2V Form | Submitted fields and submission metadata | Store, protect, and forward contact forms | Self-hosted; administration restricted to our private network |
| Google LLC | IP address, cookie IDs, usage data, advertising IDs | Analytics + possible remarketing | USA – EU-U.S. Data Privacy Framework + SCCs |
| Apollo.io (ZenLeads Inc.) | IP address, usage data, business identifiers | B2B analytics & visitor ID | USA – Standard Contractual Clauses |
| Web hosting & technical providers | Only as strictly necessary | Hosting, security, backups | Contractually bound to confidentiality |
| Legal authorities | Only when required by law | Compliance | N/A |
5. Cookies & Tracking Technologies
| Cookie / Identifier | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _gid, _gat, _ga_* | Google Analytics | Analytics & possible remarketing | Up to 2 years |
| _gcl_au, _gclid | Google Ads | Conversion tracking (if we run ads) | 90 days |
| Apollo-related cookies | Apollo.io | B2B visitor identification | Session / Persistent |
| Session cookies (if any) | Our server | Basic site functionality | Session |
You can block or delete cookies in your browser at any time.
Opt-out links
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Google Ads personalization: https://adssettings.google.com
6. Data Retention
- Contact form submissions (Z2V Form): up to 36 months or until the inquiry is resolved
- Google Analytics data: 26 months (automatically deleted thereafter)
7. International Data Transfers
Your data may be transferred to and processed in the United States through our self-hosted infrastructure and providers such as Google and Apollo. Where applicable, we rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
8. Your Rights & Choices
Depending on your location, you have the right to:
- Access, correct, or delete your personal data
- Object to or restrict processing
- Opt out of "sale" or "sharing" of personal information
- Withdraw consent where we rely on it
California residents:Using Google remarketing is considered "sharing" under CCPA. You can opt out via the Google links above or by contacting us.
To exercise any right, email privacy@stepup.ventures. We will respond within 30 days.
9. Security & Children
We use HTTPS, regular updates, and reasonable security measures.
The Site is not directed at children under 13 (or 16 in some jurisdictions), and we do not knowingly collect their data.
10. Changes to This Policy
We will post any changes here and update the "Last updated" date.
11. Contact Us
Questions or requests?
Email: privacy@stepup.ventures
Built something worth continuing?
Let's talk about the next chapter.
Tell us what exists today, what has been hard, and what outcome would feel fair. We will keep the first conversation simple and confidential.
START A CONVERSATION