Privacy policy

Who handles your information

3rdLoop Solutions operates 3C and handles personal information used to provide the platform. Philippine privacy requirements, including Republic Act No. 10173 (the Data Privacy Act of 2012), guide this policy. For a privacy request, use the company contact page below and state that your request concerns 3C.

If an organization adds information to its workspace, it also has responsibilities for the information it chooses to collect and share. Ask your workspace administrator about its own purposes and access rules.

Information we process

Account and profile information includes your email, name, authentication information, and optional fields such as headline, city, and professional links. Co-founder matching uses the founder profile, preferences, and interactions you provide for that feature.

Workspace information includes startup profiles, membership and roles, invitations, ideas, surveys and responses, customer and contact records, projects, files, documents, finance records, and other content your team adds. Batch applications, program updates, office-hour bookings, and introduction requests may include additional information you submit.

Technical data may include security and service logs, IP address, browser and device information, authentication cookies, and preference storage. If configured and you allow it, Google Analytics processes browsing and interaction data. The cookie policy explains the controls.

Why we use it and our basis for processing

We use account and workspace information to authenticate users, provide requested features, manage membership, deliver service communications, and respond to support requests. This processing supports providing the service you request and our agreement with you.

We use security and operational information to protect accounts, diagnose faults, prevent abuse, and maintain the service, subject to legitimate purposes and proportionate safeguards. We may process information to meet legal obligations. Optional analytics is based on your choice, which you may withdraw in Cookie settings.

Do not add personal or sensitive information unless you have a lawful basis and need it for the task. When you collect survey responses or customer records, explain your own purposes to the people involved.

What other people can see

Workspace members can access information according to their roles and database access policies. Accelerator staff can review submitted applications and program information. A public startup profile, including information returned by the public team feature, is visible to visitors when the listing is public. Accepted batch startups may be listed as part of the program.

Co-founder discovery and mutual matches expose the information intended for those features. Public survey links let recipients submit responses; they do not automatically publish every response. Review your audience and visibility settings before sharing a link or publishing information.

Service providers and AI features

We use infrastructure and service providers to operate authentication, data storage, hosting, communication, and security. The application uses Supabase for authentication and data services. AI features may send the prompts and relevant content you submit to OpenRouter and its selected model providers, or to TypeSafe for Batayan AI decision features. Web research may contact external search and crawling services.

Use AI and research features only with content you are authorized to process through them. External providers may process data outside the Philippines under their own applicable terms and safeguards. We do not promise that every provider uses the same retention period or hosts data in the same country.

When enabled with your permission, Google Analytics receives usage information. We do not sell personal information. We may disclose information when required by law, to protect rights and security, or as necessary in a lawful business transfer with appropriate notice and safeguards.

Retention and security

We retain information for the purposes described here, including maintaining active accounts and workspaces, resolving support and security issues, and meeting legal obligations. The appropriate period depends on the record, why it is needed, and applicable requirements; we do not keep personal information indefinitely merely because storage is available.

You can use available editing, membership, and deletion controls or contact us about records you cannot remove yourself. Deletion may not immediately remove backup copies, records required by law, or copies held by other members or third parties. We assess those limits when handling a request.

We use role-based access controls, database policies, and other organizational and technical measures to protect information. No online system can guarantee absolute security. Protect your login and notify us if you suspect misuse.

Your rights and choices

Subject to applicable law and verification, you may request information about processing, access or correction, object to processing, withdraw consent, request erasure or blocking, and exercise portability or other available rights. You may also raise a complaint with the Philippine National Privacy Commission.

Use profile and workspace settings for available self-service changes. For access, account deletion, or other requests, contact us through the link below with enough information to locate your account and understand the request. Do not include your password. We may ask for reasonable proof of identity before sharing or changing personal information.

Withdrawing optional analytics does not prevent you from using the core service. Removing information needed to operate an account or requested feature may affect that feature.

Children, external links, and updates

The service is intended for people legally able to use it under our terms. Do not submit children’s personal information unless you have the required authority and a valid purpose. Contact us if you believe information has been collected improperly.

External websites have their own privacy practices. This policy applies to 3C, not every linked product or resource. We will update this page when our practices change and provide appropriate notice of material changes.