Privacy Policy

Last updated: July 18, 2026

Flip Friday Inc (“we”, “us”) handles user information in VCRadar (the “Service”), a pitch deck diagnosis service, in accordance with this policy.

1. Information We Collect

Account information: email address and authentication-related information.
User content: uploaded pitch decks (PDF or PPTX) and the results of their analysis.
Usage information: diagnosis history, operation logs, and technical information about access.
Payment information: we outsource payment processing to Stripe and do not collect or retain payment information such as credit card numbers (Stripe processes it).

2. Purposes of Use

Providing the Service (analyzing decks, generating and displaying results).
Managing accounts, payments, and billing status.
Sending notification emails such as diagnosis completion or failure.
Preventing misuse, and improving and operating the Service.
Responding to inquiries.

3. Disclosure to and Transmission to External Services (Subprocessors)

To provide the Service, we transmit information to, and entrust processing to, the following external services to the extent necessary.

Anthropic (AI analysis): we send the contents of the uploaded deck to AI models in order to run the diagnosis. That data is not used to train AI models.
Supabase (authentication, database, storage): storage of account information and diagnosis data, and temporary storage of decks (deleted after analysis).
Stripe (payments): payment processing.
Resend (email): delivery of notification emails.
Upstash (QStash) (job execution): asynchronous execution of diagnosis processing.
Vercel (hosting and analytics): delivery of the Service, and aggregation of anonymous access statistics such as page views without using cookies. We do not carry out tracking for advertising purposes.

These subprocessors may be located outside your country. We take the measures necessary to ensure that they maintain appropriate safeguards.

4. Handling and Deletion of Decks

Uploaded decks are stored in private storage and cannot be accessed by third parties who do not know the URL. Before analysis, decks pass a security scan that detects improper instructions such as prompt injection. Once analysis completes, the original uploaded deck file is deleted automatically. Diagnosis results (reports) are retained so that users can view them from their history, and for purposes such as providing the Service and handling defects. If you would like a diagnosis result deleted, please contact us at the address below.

5. Provision to Third Parties

Except as required by law, we do not provide personal information to third parties other than the subprocessors listed above without obtaining the User’s prior consent. However, if a User joins the Service through an invitation from a program organizer (such as an accelerator), the diagnosis results belonging to that program (including scores, reasoning, and suggested fixes) are shared with that program’s organizer. This sharing is disclosed to the User on the invitation acceptance screen before it occurs.

6. Use of Cookies

The Service uses cookies and similar technologies only to the extent necessary to provide the Service, such as maintaining login and session state. We do not currently use behavioral tracking cookies for advertising purposes. If we introduce analytics or advertising cookies in future, we will update this policy and put a consent mechanism in place where required.

7. Security Measures

We take appropriate security measures to prevent the leakage, loss, or damage of the information we collect.

8. Requests for Disclosure, Correction, and Deletion

Users may request disclosure, correction, suspension of use, or deletion of their own information. Please contact us at the address below.

9. Changes to This Policy

We may revise this policy as necessary. Revised content takes effect when displayed within the Service.

10. Contact

For questions about this policy, please contact contact@vcradar.ai.