Privacy Policy
Last updated: August 2026
This notice is for visitors in the European Economic Area, the United Kingdom, and Switzerland. Auf Deutsch. In the United States? Read our US Privacy Notice.
This policy explains how Starlife Technologies, Inc. ("Starlife," "we," "us") handles personal data on our website at starlife.ai — for people who visit the site, ask us for a demo, or apply for a job.
At a glance
- We collect what you send us through a form (your email, and anything you add) and the basic technical data every website receives.
- We use PostHog analytics only after you accept it in the cookie banner.
- You can access, correct, or delete your data, or object to a use, by emailing [email protected].
1. Who we are and how to reach us
The website is run by:
Starlife Technologies, Inc.
418 Broadway #11385
Albany, NY 12207, USA
[email protected]
Our Data Protection Officer is Dr. Paul Jewell, reachable at the same address (please write "DPO" in the subject line).
EU representative
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:
- European Union (EU)
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit https://app.prighter.com/portal/11959645947.
2. What we collect, why, and on what basis
We keep this to what the website actually needs. The table below lists each purpose, the data involved, our legal basis under Article 6 GDPR, and how long we keep the data.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Respond to a demo or contact request | The email address you enter, plus anything you tell us afterwards | Steps at your request before a contract, Art. 6(1)(b); our interest in answering enquiries, Art. 6(1)(f) | Until the enquiry is resolved, then up to 24 months after our last contact |
| Understand and improve how the site is used (analytics) | Usage events, pages viewed, approximate location, device and browser, a session recording of your visit | Your consent, Art. 6(1)(a) and § 25(1) TDDDG | Up to 12 months |
| Operate, secure, and deliver the site | IP address, request metadata, and server / content-delivery logs | Our legitimate interest in a working, secure site, Art. 6(1)(f) | Short-lived; log data up to 30 days |
| Handle job applications | The details and documents you submit to our recruiting tool | Steps before an employment contract, Art. 6(1)(b) and § 26(1) BDSG | Up to 6 months after a decision, or longer with your consent |
| Meet legal obligations and defend legal claims | Whichever of the above is relevant to the obligation or claim | Legal obligation, Art. 6(1)(c); our legitimate interest, Art. 6(1)(f) | As long as the obligation or limitation period requires |
Providing this data is voluntary. If you do not enter an email, we cannot reply to your enquiry; the rest of the site works regardless.
3. Cookies and analytics
Beyond what is strictly necessary to run the site, we use one analytics tool, PostHog, to see how the site is used. It starts only after you accept it in the cookie banner; if you decline, it does not load. You can change or withdraw your choice at any time through the "Cookies" link in the footer, and we treat a Global Privacy Control signal as a refusal.
| Cookie / storage | Purpose | Set when |
|---|---|---|
| Consent record | Remembers your cookie choice so we do not ask again | Always — strictly necessary |
| PostHog (e.g. ph_*) | Analytics and session replay, on our own and related Starlife subdomains | Only after you accept |
Our video embeds load from YouTube's privacy-enhanced domain and only when you press play; until then, YouTube receives nothing.
4. Job applicants
Our careers page shows open roles through a third-party recruiting tool (Polymer). When you apply, the details and documents you submit are processed to assess your application. We keep them for up to six months after a decision, unless you agree to us keeping them longer for future roles.
5. Who we share data with
We use a small set of service providers to run the website. They may only use the data to provide their service to us, under a data-processing agreement. For website visitors these are:
- Hosting and delivery — Railway (hosting) and Cloudflare (content delivery and security).
- Forms — Formspree, which receives what you submit through the demo form.
- Analytics — PostHog, only after you consent.
- Recruiting — Polymer, for job applications.
6. International transfers
If a service provider is outside the EEA — for example in the United States — and the country has no EU adequacy decision, we protect the transfer with:
- the EU-US Data Privacy Framework, for providers certified under it (for example PostHog); and
- the European Commission's Standard Contractual Clauses (Decision 2021/914), together with a transfer assessment and additional safeguards, for the others (for example Formspree and Polymer) — and as a fallback for certified providers.
You can ask us for a copy of the safeguards we use at [email protected].
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data deleted (Art. 17);
- restrict how we use it (Art. 18);
- receive it in a portable format (Art. 20); and
- withdraw a consent you gave, at any time, without affecting what we did before you withdrew it (Art. 7(3)).
To exercise any of these, email [email protected]. We answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority — in the EU, typically the one where you live or work. If you have no way to identify your data to us (for example, you only visited the site), tell us roughly when and how you used it so we can find it.
Your right to object (Article 21)
Where we rely on our legitimate interests, you have the right to object to that processing at any time, on grounds relating to your particular situation. If your data is ever used for direct marketing, you can object at any time, with no need to give a reason, and we will stop.
8. Automated decisions
We do not make decisions about website visitors by automated means alone that produce legal effects for you or similarly significantly affect you (Art. 22 GDPR). Our analytics measure use of the site in aggregate; they do not score, rank, or make decisions about individual people.
9. Children
The site is meant for a general, adult audience. We do not knowingly collect personal data from children under 16. If you believe a child has given us their data, contact us and we will delete it.
10. Changes and contact
We may update this policy as our practices evolve; the current version always lives here, with its date at the top, and we will flag material changes. Questions or requests go to [email protected].