Privacy

What we keep

Your account: your email and a password. Passwords are stored scrambled by our sign-in provider; nobody at Sapnora can read them.
If you sign in with Google: Google tells us your name and email address. We never see your Google password, and we ask Google for nothing else.
What you write: your profile, the companies, ideas and requests you post, your messages, any terms you agree in a conversation, and the links you put in its Vault.
Your photo, if you add one: your browser makes it small and square before it is sent, which also removes the hidden details a phone photo carries, such as where it was taken.
If you try a startup: that you signed up to try it, and the review you leave, if you leave one.
Invite links: if you sign up after opening someone’s invite link, we note whose link it was. The code is kept in your browser’s local storage for up to 30 days, not in a cookie, and goes nowhere else.
If you press “I have this problem” on an idea: that you did, when, and the line you add about how you deal with it today, if you add one.
If you use Meet: your hello card (what you are building, what you are, who you want to meet, and a city if you add one), and the hellos you leave on other people’s cards.
If you ask for new roles by email: your email address, which page you signed up on, and when. It is used only to send that email, at most once a week. Every email has a link that takes you off the list for good, no account needed.
Visit counts: which kinds of page are opened, and roughly how many different people a day, so we know whether Sapnora is useful. We also note which website sent you here (only its name, like instagram.com) which of our own sapnora.com/go/ links you clicked, and which listed startup’s “Apply on their page” button you pressed. No cookies are used. Your address and browser are scrambled and mixed with a secret that is made each day and deleted the next, so a visit can never be traced back to you or matched with another day. A browser set to ask sites not to track it is not counted at all, and you can switch counting off for your own browser by opening sapnora.com/?nocount=1.
If you connect Stripe: a read-only key you make in Stripe. It is stored encrypted and used only to read your balance and payments when you connect or press Refresh, and your business name if Stripe allows it. Made as the steps say, with Read access only, it cannot move money, and Sapnora never tries to. Disconnecting deletes it; you can also delete it in Stripe at any time.

Who can see what

Everyone: your profile and its photo, and the companies, ideas and requests you post, including revenue read from Stripe for a company on the board. A company you add is seen by everyone once you show it as Just started or connect Stripe; until then, only by you. Also a startup’s build log updates, the reviews you leave, with your name, and your track record: counts of paid jobs done, terms agreed, times you paid others and startups you tried, worked out from what happened here without showing any conversation.
Everyone, while it shows: your Meet hello card with your name and photo, and the hellos under it, with the names of who wrote them. A card shows for 14 days from when you last put it up; after that only you see it. You can delete a hello you wrote, or one on your card, and take your card down at any time.
Only you and its founder: that you signed up to try a startup, and that you said you have an idea’s problem, with your line. Everyone else sees only how many people said it.
Only you: which startups you follow (each startup shows only how many follow it), and the startups suggested to you from your skills.
Founders whose startups need your skills: your name, photo, headline and track record in their suggestions, so they can invite you to talk. Turn this off on your profile and you are never suggested or invited.
Only the two people in it: a conversation and the terms agreed in it. The database itself enforces this, not just the pages.
In the Vault: both of you see what was put in and when. The link itself is seen only by the person who put it in, until they unlock it for the other person.
Only you: your dashboard and the details of your Stripe connection, and how many people joined through your invite link. The site never shows who they were.
Only the site’s owner: the visit counts, which are totals and never say who visited, and the new roles email list, so the email can be sent.

What we never do

We never sell your information or give it to advertisers. Ads here are plain text and learn nothing about you.
We use no tracking or advertising cookies. The only cookies keep you signed in.
Nobody from Sapnora will ever ask for your password, a card number or a secret key.

Who helps run the site

Supabase stores the database and handles sign-in. Our hosting provider serves the pages. Both keep short technical logs, such as IP addresses, to keep things working and safe. The site’s typeface comes from Google Fonts, so your browser asks Google for it. Stripe is contacted only if you connect your own account.

Your choices

Edit or delete your profile, listings and requests at any time, and change or remove your photo; a removed photo is deleted.
Delete a startup or idea from its Edit page. Its build log, followers and the conversations about it are deleted with it. Once terms have been agreed with someone about it, it can only be taken off the board, so they keep their record of the work.
Disconnect Stripe from your dashboard; the key is deleted at once.
To delete your whole account and everything in it, email shauryashethsapnora@gmail.com from the address you signed up with.

What we keep

Your account: your email and a password. Passwords are stored scrambled by our sign-in provider; nobody at Sapnora can read them.

If you sign in with Google: Google tells us your name and email address. We never see your Google password, and we ask Google for nothing else.

What you write: your profile, the companies, ideas and requests you post, your messages, any terms you agree in a conversation, and the links you put in its Vault.

Your photo, if you add one: your browser makes it small and square before it is sent, which also removes the hidden details a phone photo carries, such as where it was taken.

If you try a startup: that you signed up to try it, and the review you leave, if you leave one.

Invite links: if you sign up after opening someone’s invite link, we note whose link it was. The code is kept in your browser’s local storage for up to 30 days, not in a cookie, and goes nowhere else.

If you press “I have this problem” on an idea: that you did, when, and the line you add about how you deal with it today, if you add one.

If you use Meet: your hello card (what you are building, what you are, who you want to meet, and a city if you add one), and the hellos you leave on other people’s cards.

If you ask for new roles by email: your email address, which page you signed up on, and when. It is used only to send that email, at most once a week. Every email has a link that takes you off the list for good, no account needed.

Visit counts: which kinds of page are opened, and roughly how many different people a day, so we know whether Sapnora is useful. We also note which website sent you here (only its name, like instagram.com) which of our own sapnora.com/go/ links you clicked, and which listed startup’s “Apply on their page” button you pressed. No cookies are used. Your address and browser are scrambled and mixed with a secret that is made each day and deleted the next, so a visit can never be traced back to you or matched with another day. A browser set to ask sites not to track it is not counted at all, and you can switch counting off for your own browser by opening sapnora.com/?nocount=1.

If you connect Stripe: a read-only key you make in Stripe. It is stored encrypted and used only to read your balance and payments when you connect or press Refresh, and your business name if Stripe allows it. Made as the steps say, with Read access only, it cannot move money, and Sapnora never tries to. Disconnecting deletes it; you can also delete it in Stripe at any time.

Who can see what

Everyone: your profile and its photo, and the companies, ideas and requests you post, including revenue read from Stripe for a company on the board. A company you add is seen by everyone once you show it as Just started or connect Stripe; until then, only by you. Also a startup’s build log updates, the reviews you leave, with your name, and your track record: counts of paid jobs done, terms agreed, times you paid others and startups you tried, worked out from what happened here without showing any conversation.

Everyone, while it shows: your Meet hello card with your name and photo, and the hellos under it, with the names of who wrote them. A card shows for 14 days from when you last put it up; after that only you see it. You can delete a hello you wrote, or one on your card, and take your card down at any time.

Only you and its founder: that you signed up to try a startup, and that you said you have an idea’s problem, with your line. Everyone else sees only how many people said it.

Only you: which startups you follow (each startup shows only how many follow it), and the startups suggested to you from your skills.

Founders whose startups need your skills: your name, photo, headline and track record in their suggestions, so they can invite you to talk. Turn this off on your profile and you are never suggested or invited.

Only the two people in it: a conversation and the terms agreed in it. The database itself enforces this, not just the pages.

In the Vault: both of you see what was put in and when. The link itself is seen only by the person who put it in, until they unlock it for the other person.

Only you: your dashboard and the details of your Stripe connection, and how many people joined through your invite link. The site never shows who they were.

Only the site’s owner: the visit counts, which are totals and never say who visited, and the new roles email list, so the email can be sent.

Who helps run the site

Your choices

Edit or delete your profile, listings and requests at any time, and change or remove your photo; a removed photo is deleted.

Delete a startup or idea from its Edit page. Its build log, followers and the conversations about it are deleted with it. Once terms have been agreed with someone about it, it can only be taken off the board, so they keep their record of the work.

Disconnect Stripe from your dashboard; the key is deleted at once.

To delete your whole account and everything in it, email shauryashethsapnora@gmail.com from the address you signed up with.