Privacy policy
Last updated 12 November 2026
RevenueBoard (revenueboard.in) is run by [Legal name of the business — to be added], [Registered address — to be added] (“we”, “us”). This policy explains what personal data we collect, why, and the choices you have. We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).
In short: we collect only what we need to run the leaderboard, we never sell your data, and you can ask us to delete it at any time.
1. What we collect
| Data | From whom | Why |
|---|---|---|
| Email address, and name and photo if you sign in with Google | Founders and anyone who signs in | To create your account and sign you in |
| Optional profile details (X handle, LinkedIn URL) | Founders | Shown on your startup's public page |
| Startup details you enter (name, website, description, city, asking price) | Founders | To publish your listing |
| Payment-provider keys (Stripe restricted key, Lemon Squeezy key) | Founders who connect them | To read revenue figures once a day. Stored encrypted; never shown again |
| Revenue figures (MRR, last-30-day revenue, number of paying subscriptions) and daily history | Read from your provider, or submitted for manual review | To verify and rank your startup and draw its chart |
| Manual-verification proof (a link to your screen recording) and notes | Founders who choose manual review | Reviewed by our team only; never published |
| Buyer inquiries: name, email and message | Visitors who contact a founder | To pass your message to the founder, who replies to you directly |
| Purchase records (amount, Razorpay order and payment IDs) | Founders who buy a placement | To deliver the placement and keep accounting records |
| A one-way hash of your IP address | Visitors who send an inquiry | To prevent spam (rate limits). We can't recover your IP from it |
We do not collect your customers' personal data. We only request aggregate payment data needed to calculate totals, and we don't store customer names, emails or card details from your payment provider. Card and UPI details for purchases are handled entirely by Razorpay; we never see them.
We don't use advertising or analytics trackers. We use one essential cookie to keep you signed in.
2. What is public
- Your startup listing, your founder name and any social links you add.
- Revenue, according to the setting you choose: a range (default), exact numbers, or hidden. For ranges, exact figures are never sent to visitors' browsers. Rankings use the verified figure.
- That your revenue is verified, and how (for example “via Stripe” or “via manual review”).
- Your asking price, as a range, if you turn on “Open to offers”.
Your email address is never shown publicly, including to buyers who contact you, until you choose to reply to them.
3. Legal basis
We process your data with your consent, which you give by creating an account, connecting a provider, submitting a form or making a purchase, and for legitimate uses permitted under Section 7 of the DPDP Act (for example, keeping payment records required by law). You can withdraw consent at any time; see section 6.
4. Who we share data with
We use these service providers (“Data Processors”) to run the site. They process data only on our instructions:
- Vercel (hosting) and Neon (database).
- Resend (sending sign-in links, inquiry and verification emails).
- Razorpay (payments for featured placements).
- Google (only if you choose “Continue with Google”).
- Stripe and Lemon Squeezy: we read your data from them using the key you provide; we don't send them your personal data.
When a buyer contacts you through an “Open to offers” form, we email their name, email and message to the startup's founders. We may disclose data if required by law or a valid government request. We never sell personal data.
Some of these providers store data on servers outside India. We only use providers with appropriate security safeguards, and we will follow any restrictions on transfers notified by the Government of India under the DPDP Act.
5. How long we keep it
- Account and listing data: until you delete your account or listing.
- Payment-provider keys: until you disconnect them, which deletes the key immediately.
- Revenue history: for as long as the listing exists; deleted with the listing.
- Buyer inquiries: until the founder deletes the startup, or 2 years, whichever is sooner.
- Purchase records: 8 years, as required by Indian tax law.
- Sign-in sessions expire after 30 days.
6. Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how it is processed.
- Correct or update it. You can edit most of it yourself in your dashboard.
- Erase it. You can delete your account yourself, which removes your profile, the startups only you manage, their revenue history and stored keys. Purchase records we must keep by law are retained.
- Withdraw consent, for example by disconnecting a payment provider or deleting your account.
- Nominate someone to exercise these rights if you die or become incapacitated.
- Raise a grievance with us (section 8), and if unresolved, complain to the Data Protection Board of India.
To use any of these rights, email grievance@revenueboard.in. We reply within 30 days.
7. Security
Payment-provider keys are encrypted with AES-256-GCM and are never displayed after you save them. We ask for read-only Stripe keys and refuse full secret keys. Connections to the site use HTTPS. No system is perfectly secure; if a breach affects your personal data, we will notify you and the Data Protection Board as the DPDP Act requires.
8. Grievance Officer
[Grievance Officer name — to be added]
[Legal name of the business — to be added], [Registered address — to be added]
Email: grievance@revenueboard.in
We acknowledge complaints within 24 hours and resolve them within 15 days.
9. Children
RevenueBoard is for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
10. Changes
If we change this policy in a way that matters, we'll email registered users and update the date above before the change takes effect.
11. Contact
Questions: hello@revenueboard.in. See also our Terms of Service.