What we process
The calculator works in your browser without an email. If you request the optional email copy, we process your email address, language, marketing-consent choice and the result data needed to send the plan, including the business type, region, budget assumptions, runway, cuts, red flags, next step and checklist. With that request we also process delivery metadata: the page address, the landing page, the referring site and campaign tags (UTM), so we can see which channels bring users. To protect the service against abuse we briefly process your IP address; the raw rate-limit entry is deleted within 24 hours and lead records keep the IP only in a shortened, hashed form.
What not to submit
Use rounded planning amounts. Do not enter bank logins, account numbers, documents, private identifiers, private customer data, health data or confidential legal information.
Why we process it
Planning inputs are used in the browser to calculate your first-sale budget plan. Detailed planning inputs and result data are sent to us only when you request the optional email copy, so we can render and deliver that plan, secure and support the service, and record delivery. The delivery record is kept for up to 90 days, and your contact and attribution details are also stored in our lead log and CRM so we can respond to you and measure which channels work. Occasional marketing tips are sent only if you give separate consent.
Controller
StartupCostCheck is operated as part of Mill AI. Contact: contact@millai.eu.
Mill AI newsletter
Our websites offer an optional signup for the Mill AI newsletter (practical tips and news from Mill AI tools, at most twice a month). Subscribing is voluntary, separate from using the product, and uses double opt-in: we send a confirmation e-mail and only a confirmed address joins the list. The subscriber list is administered at the Mill AI portfolio level (contact@millai.eu) and stored on encrypted infrastructure in the EU (AWS, eu-central-1). Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every issue or by writing to contact@millai.eu - withdrawal takes effect immediately. We delete unconfirmed signups after 30 days, and after you withdraw consent we keep only an irreversible hash of your address, so that we never contact you again.
Recipients, retention and transfers
Data required to operate the service may be disclosed to categories of providers responsible for hosting, result generation where applicable, delivery, customer support, security and consent-based analytics. Providers may process data only for documented purposes and under applicable contractual safeguards.
Data is kept only for the period necessary for delivery, security, support, legal duties or the exercise of claims, and is then deleted or anonymized.
Where data is transferred outside the EEA, we use an applicable transfer mechanism and supplementary safeguards where required.
Consent choices and current vendors
Necessary, Analytics and Advertising are separate choices. Optional technologies remain off until the choice is recorded. Analytics consent does not enable Advertising, and Advertising consent does not enable Analytics.
Only vendors marked active in the current registry may run after consent for their category.
Your current choice does not authorise a vendor added later. A change to the policy, copy, consent schema or vendor registry requires a new choice.
Necessary
- Purpose
- Required for security, consent storage and core site functions. Always active.
- Domains and endpoints
- https://www.startupcostcheck.com, https://api.startupcostcheck.com/api/consent/receipt
- Browser storage
- millai_privacy_v1_scc, millai_privacy_v1_scc_id
- Allowed data
- We store a first-party consent identifier, firm and locale, document and software versions, category choices, choice source, timestamps and a reference to the previous receipt. The browser choice lasts 180 days. The append-only consent receipt is kept for 1095 days to demonstrate and honour the choice.
- Role
- Mill AI is the controller of the consent choice and receipt.
- Retention
- P180D / P1095D
- International transfers
- Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.
Analytics
Advertising
No vendor is active in this category under the current registry.
Consent settings
You can change or withdraw either optional choice at any time through Consent settings in the footer. Withdrawal records a new receipt and prevents new optional collection; it does not affect processing that lawfully occurred before withdrawal.
Your data protection rights
Where the GDPR applies and subject to its conditions, you may request access, rectification, erasure, restriction and portability of your data; object to processing; withdraw consent without affecting earlier lawful processing; and lodge a complaint. You also have the rights provided by law in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
Right to complain
Where the GDPR applies, you may lodge a complaint with the competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.