MRRPromote

Privacy Policy

Last updated: May 15, 2025

MRRPromote ("we", "our", or "us") operates mrrpromote.com (the "Service"). This Privacy Policy describes how we collect, use, store, and protect information when you use the Service. By using the Service, you agree to the practices described in this Policy. If you do not agree, please discontinue use.

1. Information We Collect

1.1 Information You Provide

  • Startup Listings. If you submit a startup, we collect the information you voluntarily provide: startup name, description, website URL, revenue figures, and a read-only payment provider API key for verification.
  • Communications. If you contact us by email, we retain those communications to respond to your inquiry and improve the Service.

1.2 Information Collected Automatically

  • Usage Data. Pages visited, time spent, referring URLs, browser type, device type, and IP address — collected automatically via server logs and analytics.
  • Cookies & Local Storage. We use strictly necessary cookies for the Service to function and optional analytics cookies to understand aggregate usage patterns. No advertising or third-party tracking cookies are used.

1.3 Revenue Data via API Keys

When you provide a payment provider API key, we use it to retrieve the following revenue metrics only:

  • Total revenue and Monthly Recurring Revenue (MRR)
  • Last 30-day revenue and growth percentages
  • Active subscription count, churn rates, and aggregate customer count
  • Publicly available business account information (name, description, website)

We do not collect, store, or process any of your customers' personal data, including names, email addresses, payment method details, individual transaction records, or any other personally identifiable information (PII) belonging to your customers.

2. How We Use Your Information

  • To operate, maintain, and improve the Service.
  • To display your startup's verified revenue data on the public leaderboard and listings.
  • To calculate and display growth metrics and rankings.
  • To detect, prevent, and address fraud, abuse, and technical issues.
  • To respond to your inquiries and provide support.
  • To comply with applicable legal obligations.

We do not use your information for advertising, profiling, or any purpose not listed above. We do not send marketing emails without your explicit opt-in consent.

3. Sharing of Information

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

  • Service Providers. We engage trusted third-party vendors (e.g., Cloudflare for hosting, infrastructure, and DDoS protection) who process data solely on our behalf under strict confidentiality obligations and data processing agreements.
  • Public Listings. Revenue data and startup information you submit for public display will be visible to all users of the Service. Do not submit information you wish to keep private.
  • Legal Process. We may disclose information if required by law, court order, subpoena, or other valid legal process, or to protect the rights, property, or safety of MRRPromote, our users, or the public.
  • Business Transfers. In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred to the successor entity, subject to the same privacy protections.

4. API Key Storage and Security

API keys you provide are stored and transmitted using industry-standard security measures. Access to stored API keys is strictly limited to authorized systems performing revenue data retrieval. We do not expose raw API keys in application logs or error reports.

If you suspect your API key has been compromised, immediately rotate or revoke it through your payment provider's dashboard and contact us at [email protected].

5. Data Retention

We retain your startup listing data for as long as your listing is active on the Service. Revenue metrics are refreshed periodically; historical snapshots may be retained to display growth trends. You may request deletion of your data at any time — upon verified request, we will delete your listing, associated API key, and derived revenue data within 30 days.

Usage data and server logs are retained for up to 90 days for security and operational purposes, after which they are deleted or anonymized.

6. Cookies

We use the following categories of cookies:

  • Strictly Necessary. Required for the Service to function. Cannot be disabled.
  • Analytics (Optional). Help us understand how visitors use the Service in aggregate. No personal profiles are built. These can be disabled via your browser settings.

We do not use advertising cookies, retargeting pixels, or any third-party tracking technologies for commercial purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Request correction of inaccurate or incomplete data.
  • Deletion. Request deletion of your personal data.
  • Portability. Receive your data in a structured, machine-readable format.
  • Withdraw Consent. Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will delete it promptly.

9. Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest for sensitive credentials, and strict access controls. We conduct regular security reviews and promptly address identified vulnerabilities.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

10. International Data Transfers

The Service is operated on Cloudflare's global infrastructure, which may process data across multiple jurisdictions. By using the Service, you acknowledge and consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Third-Party Links

The Service may contain links to third-party websites. These links are provided for reference only. We have no control over the content or privacy practices of third-party sites and are not responsible for them. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

[email protected]

We aim to respond to all privacy-related inquiries within 5 business days.