Privacy Policy

Last updated: 11 February 2026

1. Data Controller

Superconnectors B.V. is the data controller responsible for processing your personal data. You can contact us at:

Superconnectors B.V.
Aert van Nesstraat 45
3012 CA Rotterdam
The Netherlands
Email: [email protected]

2. What Personal Data We Collect

Account and profile data

When you create an account or complete onboarding, we collect your name, email address, phone number (optional), job title, LinkedIn URL (optional), profile photo (optional), and your role on the platform (superconnector, startup founder, partner, or guest).

Company and business data

If you represent a startup, we collect company name, website, value proposition, business challenge, year founded, employee count, funding raised, funding needed, and annual recurring revenue (ARR). This information is used to facilitate relevant introductions.

Network and expertise data (superconnectors)

If you participate as a superconnector, we may collect information about your professional network, including how frequently you make introductions, your LinkedIn connection count range, network geographic focus, and industry expertise.

Event and game data

When you attend events and participate in our networking game, we collect your pitch submissions (critical asks), bids (offered introductions), connection strength ratings, event attendance history, and game activity such as points earned and badges received.

Connection and follow-up data

We track the progress of introductions made through our platform, including connection status updates, meeting dates, and outcomes reported by both parties. This data powers our automated follow-up system at 1 week, 1 month, and 3 months after an introduction.

Technical and usage data

We automatically collect certain technical information when you use our platform, including page views, feature usage, browser type, device information, and performance metrics. We also collect error logs for debugging purposes.

Communication data

We keep records of emails sent to you through our platform, including transactional notifications, event invitations, connection updates, and follow-up emails.

3. How We Collect Your Data

• Directly from you: when you create an account, complete onboarding, submit pitches, place bids, or update your profile.
• Through event registration: when you register for events via our platform or through Luma (our event management partner).
• Automatically: through cookies, analytics tools, and server logs when you browse and use our platform.
• From third-party sources: we may receive company intelligence data (such as company description, industry, and size) from HubSpot to enrich your profile and improve the quality of introductions.

4. Legal Bases for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Performance of a contract (Art. 6(1)(b)): to provide the Superconnectors platform, facilitate introductions, manage your account, send transactional emails, and track connection outcomes.
• Legitimate interests (Art. 6(1)(f)): to improve our platform, analyse usage patterns, ensure security, send relevant follow-up emails about your connections, and enrich profiles with publicly available business information. You can object to processing based on legitimate interests at any time.
• Consent (Art. 6(1)(a)): for marketing communications and prospecting emails. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us.

5. How We Use Your Data

We use your personal data to:

• Operate and maintain your account on the platform
• Facilitate the networking game: match pitches with superconnectors, process bids, track winners, and manage the connection pipeline
• Send transactional emails: magic link sign-ins, connection requests, bid notifications, and status updates
• Send automated follow-up emails at 1 week, 1 month, and 3 months to help introductions lead to real outcomes
• Provide AI-powered recommendations to match you with relevant pitches and superconnectors
• Generate gamification features: points, badges, leaderboards, and rewards
• Analyse and improve platform performance, fix bugs, and develop new features
• Communicate about upcoming events and platform updates (with your consent for marketing emails)
• Ensure security, prevent fraud, and enforce our terms of service

6. AI-Powered Features

We use artificial intelligence to enhance your experience on the platform. Specifically:

• Matching and recommendations: we use AI to analyse pitch descriptions and bid content to suggest relevant matches between startups and superconnectors.
• Content analysis: we use AI to analyse the quality of critical asks and provide structured feedback to help founders refine their pitches.
• Translation: bid descriptions may be automatically translated to facilitate cross-language networking.

We access AI services through their APIs, which means your data is not used to train AI models. We have opted out of any data-sharing or model-training programmes offered by our AI providers. Data sent to AI services is processed solely to provide the features described above and is not retained by those providers for training purposes.

No automated decisions with legal or similarly significant effects are made based solely on automated processing of your data.

7. Who We Share Your Data With

We do not sell your personal data to third parties. We share your data only with the following categories of service providers who process data on our behalf (as data processors):

• Google Firebase (Google Cloud): hosting, authentication, and database storage.
• Vercel: website hosting and web performance analytics.
• Resend: email delivery for transactional and marketing communications.
• HubSpot: customer relationship management and profile enrichment.
• Luma: event registration and guest management.
• OpenAI: AI-powered features including matching, content analysis, and translation.
• PostHog: product analytics (EU-hosted).
• Sentry: error monitoring and performance tracking.

We may also share your data with other event participants in the context of the networking game. When you submit a bid or pitch, other participants at the same event can see your bid content and connection strength rating. Your name visibility is controlled by your privacy settings.

8. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), primarily in the United States. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including:

• EU-U.S. Data Privacy Framework (DPF) certifications where applicable
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission for the receiving country

You may request a copy of the safeguards in place by contacting us at [email protected].

9. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

• Essential cookies: a session cookie is used to keep you signed in. This cookie is strictly necessary for the platform to function and does not require consent.
• Analytics: we use analytics tools to collect anonymised usage data and help us improve the platform.
• Local storage: we use your browser's local storage for UI preferences (such as selected settings) to improve your experience.

We do not use advertising cookies or tracking pixels. We do not share cookie data with third-party advertisers.

10. Data Retention

We retain your personal data for as long as necessary to:

• Provide the services you have requested
• Maintain your account and connection history
• Comply with legal obligations (such as tax and accounting requirements)
• Resolve disputes and enforce our agreements

If you request deletion of your account, we will delete or anonymise your personal data within 30 days, unless we are legally required to retain certain information. Aggregated and anonymised data that cannot identify you may be retained indefinitely for analytical purposes.

Email communication records are retained for up to 12 months. Connection outcome data may be retained in anonymised form to measure platform impact.

11. Your Rights Under the GDPR

As a data subject, you have the following rights under the GDPR. You can exercise any of these rights by contacting us at [email protected]. We will respond within 30 days.

• Right of access (Art. 15): you can request a copy of all personal data we hold about you.
• Right to rectification (Art. 16): you can ask us to correct inaccurate or incomplete data. You can also update most of your data directly through your profile settings.
• Right to erasure (Art. 17): you can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.
• Right to restrict processing (Art. 18): you can ask us to restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20): you can request your data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21): you can object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent (Art. 7): where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

12. Email Communications and Unsubscribing

We send the following types of emails:

• Transactional emails (cannot be unsubscribed): magic link sign-ins, connection request notifications, bid notifications, and account-related updates. These are necessary for the platform to function.
• Follow-up emails (can be unsubscribed): automated check-ins at 1 week, 1 month, and 3 months after an introduction to track outcomes.
• Marketing and prospecting emails (can be unsubscribed): event invitations, platform updates, and outreach communications.

Every marketing and follow-up email contains an unsubscribe link. We support one-click unsubscribe in accordance with RFC 8058. You can also contact us to manage your email preferences.

13. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit (HTTPS/TLS) for all data transmitted between your browser and our servers
• Encryption at rest for stored data
• Secure authentication with session management and protection against common web vulnerabilities
• Role-based access controls for administrative functions
• Input validation on all API endpoints

14. Name Visibility and Privacy Settings

You can control the visibility of your full name on the platform through your account settings. When the "Show Full Name" setting is turned off, other users will see a partial version of your name. This setting is available under Settings in your dashboard.

15. Children's Privacy

Our platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

17. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

Superconnectors B.V.
Aert van Nesstraat 45
3012 CA Rotterdam
The Netherlands
Email: [email protected]