Version 1.0 · Date: 10th April 2026
The team at Projectify ("Projectify", "we" or "us") understands that privacy is important to all our users. We respect and value the privacy of everyone who visits or uses www.startupfinancialspro.com ("the Platform") and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and the data subject's rights under the law.
First things first, some important definitions.
| Term | Definition |
|---|---|
| Account | The primary means of accessing and using the Projectify Solutions. |
| Client | The individual or entity who accepted the ToU. |
| Client Data | All personal data that is inserted, uploaded or inputted by the Client to the Platform. |
| Data Protection Legislation | The GDPR, the Data Protection Act, Chapter 586 of the Laws of Malta and any relevant subsidiary legislation. |
| GDPR | EU Regulation 2016/679. |
| Projectify Solutions | All features and functionalities available on or through the Platform. |
| Terms of Use (ToU) | The terms of use governing the use of the Platform, as accessible through https://startupfinancialspro.com/Terms. |
| User | The individual or entity who is authorised by the Client to access the Account. |
Throughout this document, we will be using certain specific terms. Since our intention is that this document is easily understood, we would like to clarify what these terms are intended to refer to. Naturally, if anything is unclear, please do not hesitate to get in touch with us.
In terms of Data Protection Legislation, the term "personal data" is defined as 'any information relating to an identified or identifiable natural person ('data subject')'. Furthermore, the term "processing" is also given a wide meaning and is defined as 'any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.' This includes collection, recording, storage, adaptation, and use of personal data. A "data controller" is a person or organisation, who alone or jointly determines the purposes and means of the processing of personal data.
This policy provides an overview of the personal data we process when we act as data controllers in connection with the use of our Platform, including the delivery of our Projectify Solutions. As a data controller, we determine the purposes and means of certain processing of personal data. For example, we act as a data controller when a Client opens an Account or a User contacts our customer support. In these situations, we determine the purposes and methods of processing of the underlying personal data, and we ensure that it is handled in compliance with data protection regulations. This policy also provides details on how, in the situations where we act as data controllers, we collect personal data, how we use it, and how we ensure its protection.
However, there are also circumstances where we act as a data processor. In these cases, this privacy policy is not applicable. Instead, we process personal data on behalf of another company or organization (the Client), which is the data controller. In such situations, the Client, as the data controller, is responsible for deciding why and how that relevant personal data is processed, and their privacy policy—not this one—will govern how such data is handled.
We have grouped the personal data that we receive, use or otherwise process in the following categories:
| Category | Description | Source |
|---|---|---|
| Profile Information | Includes details provided when creating an Account, such as name, surname, and email address; details provided when purchasing a subscription plan; and any other information required to manage and operate your Account. | Provided directly by you (the Client or User) when the Account is created or during ongoing Account management. |
| Interaction Information | Information exchanged with us that is not included in other categories, including messages, feedback, and support interactions. | Provided directly by you (Client/User) through communications and interactions with our Platform or support team. |
| Financial Information | Data necessary to process subscriptions and payments, including fees owed, banking information, and payment transaction details. | Provided directly by you during financial transactions or subscription payments. |
| Usage Information | Information automatically collected when you access or use the Platform or Projectify Solutions. This may include pages or features accessed, frequency and duration of use, device and browser data (MAC address, device ID, operating system, browser type, manufacturer/model), and IP address. | Automatically collected by the Platform through log files and similar technical processes. |
When users use the Startup Financial Plan Pack, we may collect and process business profile information, selected financing items, use-of-funds text, report edits, projection data and AI-generated commentary.
Where personal data is transferred outside the European Economic Area (EEA), Projectify ensures adequate safeguards are in place, in accordance with GDPR and the Standard Contractual Clauses (SCCs) adopted by the European Commission.
Such transfers may occur when engaging third-party service providers outside the EEA for hosting, support, analytics, or payment processing.
Projectify requires all third-party recipients to implement appropriate technical and organizational measures to protect your personal data in accordance with GDPR and SCC requirements.
By using the Platform, you consent to these transfers under the protections provided by the SCCs and this Privacy Policy.
Our primary objectives in processing personal data are to manage Accounts, provide access to our SaaS financial projection Platform ("Projectify Solutions"), handle subscriptions, and ensure smooth delivery of our services. We also process personal data to comply with legal obligations and contractual commitments, including those under the Terms of Use.
We will only process personal data when we have a lawful basis to do so. The legal bases we rely upon for processing personal data are outlined in the table below:
| Purpose | Types of Personal Data | Lawful Basis (GDPR Article) |
|---|---|---|
| Account Onboarding Setting up Accounts, verifying Client/User identity, and granting access to the Platform. | Profile Information; Interaction Information | Legal obligation (6(1)(c)); Legitimate interests (6(1)(f)) – to administer onboarding and safeguard our platform and reputation |
| Subscription and Account Management Managing Accounts, communicating subscription benefits, and providing access to platform features. | Profile Information; Interaction Information; Subscription Information | Performance of a contract (6(1)(b)); Legitimate interests (6(1)(f)) – to ensure platform functionality and service delivery |
| Customer Support & Relationship Management Handling inquiries, providing support, and maintaining effective communication with Clients/Users. | Profile Information; Interaction Information; Shared Content | Contractual necessity (6(1)(b)); Legal obligation (6(1)(c)); Legitimate interests (6(1)(f)) – to maintain accurate records and provide high-quality support; Consent (6(1)(a)) when applicable |
| Payment Processing & Billing Processing subscription fees, refunds, and managing financial transactions. | Profile Information; Financial Information; Interaction Information | Contractual necessity (6(1)(b)); Legitimate interests (6(1)(f)) – to collect payments securely |
| Marketing & Communications Sending information about updates, new features, promotions, or newsletters. | Profile Information; Service Information; Interaction Information | Consent (6(1)(a)); Legitimate interests (6(1)(f)) – to maintain and grow our client base responsibly |
| Business Intelligence & Analytics Analyze anonymized data to improve user experience. | Profile Information; Service Information; Interaction Information | Legitimate interests (6(1)(f)) – to optimize the Platform and user experience |
| Security & Risk Management Monitoring, preventing, and responding to security threats, fraud, intellectual property violations, or other unlawful activity. | Profile Information; Interaction Information; Service Information; Financial Information; Usage Information | Legitimate interests (6(1)(f)) – to safeguard the Platform, our users, and infrastructure; Legal obligation (6(1)(c)) |
| Corporate Transactions Sharing information with prospective buyers, partners, or advisors in connection with mergers, sales, acquisitions, or other business transactions. | Profile Information; Interaction Information; Service Information; Financial Information | Legitimate interests (6(1)(f)) – to facilitate potential business transactions |
We may use user inputs, projection data and related report content to generate financial plan reports, AI-generated commentary, summaries, charts and downloadable documents.
We only use personal data for the purposes for which it was initially collected. If we need to use personal data for a new, unrelated purpose, we will notify you and explain the legal basis that allows such processing.
While we respect the choices of data subjects not to provide personal data, please note that certain information is essential for the proper use of our SaaS Platform and Projectify Solutions.
We require specific personal data to:
Without the necessary data, you may be unable to access certain features of the Platform, receive important updates, or fully benefit from the functionality of the Projectify Solutions.
The Client is responsible for ensuring that a valid legal basis for processing exists at the time of transferring the relevant Personal Data to Projectify and that Projectify is permitted to Process the relevant Personal Data for the purposes set out in these Terms. Upon Projectify's request, the Client undertakes, in writing, to account for and/or provide documentation of the basis for processing. In addition, the Client warrants that the data subjects to which the personal data pertains have been provided with sufficient information on the processing of their personal data.
Where relevant, and to the extent that it is applicable, the Client also undertakes to provide any third-party data subject with a copy of this Privacy Policy in a timely manner.
Under the GDPR, certain personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, health information, or data concerning a person's sex life or sexual orientation—are classified as "special categories of personal data" and require stricter protections.
For the purposes of using the Projectify SaaS financial projection Platform, we do not collect, process, or store any special categories of personal data.
No.
We will share personal data with third parties where required by law, where it is necessary to administer the relationship with our clients, and as otherwise provided hereunder.
Furthermore, we may sometimes contract with third parties to supply certain functionalities on our Platform and this may require that personal data is disclosed to third parties. Furthermore, we will also share personal data as follows:
We may also process personal data to comply with our regulatory requirements or in the course of dialogue with our regulators as applicable, which may include disclosing personal data to government, regulatory or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so.
Prior to sharing data with a third-party service provider, we require them to commit in implementing appropriate security measures to protect personal information in line with our policies. We do not allow our third-party service providers to use personal data we provide for their own purposes. We only permit them to process personal data for specified purposes and in accordance with our instructions.
Where AI-generated commentary is used, relevant user inputs, projection data and related report content may be processed by third-party service providers acting on our behalf to provide AI generation functionality.
All personal data is primarily processed in Malta and the European Economic Area (EEA). However, it may sometimes be transferred outside of the EEA, for example, when we engage third-party service providers or contractors to support our Platform and Projectify Solutions.
When personal data is transferred outside the EEA, Projectify ensures that such transfers comply with GDPR and maintain an adequate level of data protection by implementing Standard Contractual Clauses (SCCs) approved by the European Commission.
Specifically, we safeguard international transfers in the following ways:
By using our Platform, you acknowledge and consent to such international transfers under these safeguards.
We may process session and usage information to manage feature limits, including AI generation limits and export access.
The GDPR grants data subjects a number of rights that can be exercised in certain circumstances, including:
| Right | Description |
|---|---|
| Right of Access | You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it. |
| Right to Rectification | You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. |
| Right to Erasure | You have the right to ask us to delete or remove personal data where there is no good reason for us to continue processing it (also known as the 'right to be forgotten'). |
| Right to Restrict Processing | You have the right to ask us to suspend the processing of your personal data in certain circumstances, for example if you want us to establish its accuracy or the reason for processing it. |
| Right to Data Portability | You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format. |
| Right to Object | You have the right to object to the processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. |
We do not carry out any fully automated decision-making or profiling.
In those occasions where we have indicated that we are basing our processing on our legitimate interest, please note that in terms of Article 21 GDPR, data subjects have the right to object to that processing.
Where the legal basis of processing is based solely on the data subject's consent, the data subjects may withdraw such consent at any time by notifying us accordingly. This shall be without prejudice to the lawfulness of processing based on consent before such withdrawal.
For more information about these rights and how to exercise them (when we are acting in our capacity as data controllers), kindly contact us on the contact details set out hereunder.
Where Financial Plan Pack content is available in the platform, users may review, edit or delete their report content where the relevant feature allows.
The length of time for which we hold personal data depends on a number of factors, such as regulatory rules and any legal requirements. We also consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of personal data, the purposes for which we process personal data and whether we can achieve those purposes through other means.
For further information about our data retention policies, please get in touch with our data privacy manager on the contact details set out hereunder.
Saved Financial Plan Pack content, including user edits and generated commentary, may be stored with the user's account or projection where saving is available.
If you need more information about this privacy notice or how we handle personal information, please contact our data privacy manager, on hello@useprojectify.com.
Any correspondence can also be addressed to:
Projectify,
58, Valley Road,
Birkirkara BKR 9013, Malta
Privacy and data protection is a two-way street, and while we strive to uphold it diligently, the active participation of everyone is crucial. This means that along with enjoying privacy rights, data subjects also have certain responsibilities. As part of these obligations, we anticipate that data subjects take reasonable measures to assist us in effectively safeguarding and managing your privacy.
For instance, to ensure that we maintain accurate, complete, and up-to-date personal information, we kindly ask you to promptly notify us if personal details previously submitted to us become inaccurate, incomplete, or outdated.
Users should avoid entering highly sensitive personal information or confidential third-party information into projections, report fields or AI commentary prompts unless necessary.
We go to great lengths to ensure that we handle personal data responsibly. If there are any concerns or issues with anything related to these matters, please do not hesitate to get in touch with us and we assure you that we will do our utmost to address your concerns.
In any case, if you are not satisfied with the way we manage personal data, you have the right to file a complaint with any relevant data protection authority (particularly the one situated where you habitually reside). Contact details of the competent authority in Malta are as follows:
Version 1 · Date: 10th April 2026
Changes to the Privacy Policy — We may alter these terms at any time, but in any case we will inform you accordingly, by means we deem reasonable in the circumstances. In the event of any conflict between the current version of these terms and any previous version(s), the provisions current and in effect shall prevail unless it is expressly stated otherwise.