Privacy notice
Last updated . Metameta Launchpad (launchpad.metametaclub.com) is run by Metameta Club, part of Metameta Campus. We collect as little personal data as we can. Questions or requests: privacy@metametaclub.com.
In short
- Browsing Launchpad needs no account and sets no tracking cookies. The only thing saved in your browser is your light or dark theme choice.
- Listings are built from public sources: company websites, public startup databases, press and public videos. We do not publish founder names or private contact details.
- When you send us something (a suggestion, a removal request, a claim, or the waitlist), we keep only what that task needs, for a set time (see how long we keep it).
- We never sell personal data or share it for advertising.
What is live today
Our database is not switched on yet. Until it is, the suggestion, removal, claim and waitlist forms show a “not available yet” message and save nothing. The rules below apply from the day each one opens. We will update this notice and the changelog when that happens.
Claiming a startup page
- To claim a page you use an email address on the startup's own website domain. We email a 6-digit code and a one-time link to prove you can read that inbox.
- We store that company email address and its domain, so we can send the code and keep an audit record of who claimed the page. Only Launchpad admins can see it, and admin lists show it masked.
- We also store when the claim was started, emailed, confirmed and reviewed, how it was confirmed (code or link), whether it came from the website or an agent, the browser or agent's user agent, and a keyed hash of the IP address.
- Your filming and publicity choice for Hustle Yangu and when you made it. It is off unless you turn it on, and saying no never affects your listing.
- Codes and links are stored only as keyed hashes, expire after 15 minutes and work once.
- A claimed page shows a “Claimed” badge and the claim date. It never shows who claimed it or their email address. The same is true of our JSON API.
Waitlist
- Your email, your role, and the startup or fund name if you give one; when you agreed to this notice and, if we send a confirmation link, when you confirmed.
- Whether you joined on the website or through the API, the user agent, and a keyed hash of your IP address.
- We use it only to send Launchpad updates. You can leave at any time by writing to us; we then delete your entry.
How long we keep it
A clean-up job runs automatically and deletes data on this schedule:
- Hashed IP addresses and user agents (claims, waitlist, forms): removed after 30 days.
- Claims that were never confirmed, expired or were rejected: deleted, with their history, 30 days after their last change.
- Revoked claims: the email address is erased 90 days after revocation; only the date and status stay in the audit record.
- Active claims: kept while the claim is active, so we know who manages the page.
- Waitlist entries whose confirmation link expired unused: deleted 30 days after the link expired. Other entries are kept until you leave or the waitlist closes.
- Anti-spam tokens and rate-limit counters: deleted after they expire (within a day).
- Contact emails on suggestions and removal requests: deleted within 90 days of resolving them.
Deleting your data
Write to privacy@metametaclub.com from the address concerned and ask us to delete it. We remove your waitlist entry and erase your email from any claim (an active claim is revoked, and the page shows as unclaimed). We confirm within 30 days. The deletion itself is recorded in our audit log by a one-way hash only.
Your consent choices
Each choice is a separate box that starts unticked. Saying no never affects your listing or your access to Launchpad.
- Updates by email: whether we may email you about new opportunities and deadlines.
- Filming: whether a claimed startup is happy to be contacted about being filmed (for example by Hustle Yangu). Being filmed is always optional.
- Contact visibility on a claimed page: “intro only” (the default; funders ask us for an introduction) or “public”.
- Replies about a suggestion: if you add an email to a suggestion, you must tick a box to let us reply. Without the tick we do not keep the email.
You can change or withdraw any choice at any time by writing to privacy@metametaclub.com.
Suggestions and removal requests
- Suggestions need the name and official link of what you suggest. Your email is optional.
- Removal and correction requests need an email so we can confirm the request and reply. We use it for nothing else.
- We delete contact emails from suggestions and removal requests within 90 days of resolving them.
Hashed IP addresses and spam protection
- To stop spam and abuse, forms use a small proof-of-work check, and Cloudflare Turnstile (a check that does not ask you to solve puzzles) once it is switched on before launch.
- We do not store your IP address. When a form is sent we store a salted hash of it (a keyed one-way code) that lets us spot repeated abuse but cannot be turned back into the address. Hashes are deleted after 30 days.
- Our host, Cloudflare, processes IP addresses to deliver and protect the site, under its own privacy policy.
Your rights
You can ask to see, correct or delete personal data we hold about you, or object to how we use it, under Kenya's Data Protection Act, 2019. Write to privacy@metametaclub.com; we reply within 30 days. If a listing is about you or your company, you can also use the removal form. You may complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
Contact
Data and privacy requests: privacy@metametaclub.com. General: startups@metametaclub.com.