Support, Retention & Data Requests

Last updated: 2026-10-11

Product support

For help with StartWith accounts, projects, or service features, email support@startwith.xyz.

Privacy and data requests

For access, correction, deletion, or other privacy requests, email privacy@startwith.xyz. Depending on what applies to your data, you may also request a portable copy, restrict or object to certain processing, withdraw consent for future processing, opt out of marketing communications, or lodge a complaint with the relevant data-protection authority.

Identity verification and response target

Email privacy@startwith.xyz with the subject “Privacy Request (StartWith)” from an address associated with the account where possible. Requests are subject to verification of authority. StartWith responds without undue delay and within the period required by applicable law; GDPR rights requests are generally answered within one month, subject to permitted extensions.

Retention schedule

Retention describes how long records are kept. A deletion request is handled separately, subject to the exceptions below.

Account, workspace, project, and generated content: For the life of the account or project and afterwards only as needed to complete deletion, comply with law, resolve disputes, enforce agreements, or protect the service.
Billing and transaction records: For the period required by accounting, tax, fraud-prevention, and other applicable legal obligations.
Support and privacy request records: For as long as needed to handle the request, demonstrate the response, resolve disputes, and comply with applicable law.
Security, usage, diagnostic, and MCP audit data: For the shortest period reasonably needed for security, abuse prevention, troubleshooting, audit integrity, and legal obligations; raw credentials and OAuth secrets are excluded from bounded MCP diagnostics.
Backups and disaster-recovery copies: Until rotated out under managed backup and disaster-recovery cycles, unless preservation is legally required.
Marketing preferences: Until consent is withdrawn or the user opts out, with a limited suppression record retained to honour the choice.

Deletion, backups, and legal holds

You may request deletion through the privacy contact above. StartWith may retain records required for accounting, tax, regulatory, or other legal obligations; information needed to prevent fraud, abuse, or security incidents; and information needed to establish, exercise, or defend legal claims or enforce agreements. Residual encrypted backup copies remain until they rotate out under the normal backup cycle. For organisation-controlled data, the relevant workspace administrator may need to action the request.

MCP disconnect and revocation when enabled

StartWith’s hosted MCP server at https://app.startwith.xyz/api/mcp connects ChatGPT or Codex to StartWith after browser sign-in and OAuth consent. It can return authorised project summaries and bounded context, or an explicitly requested record. Depending on the action, it can prepare or save project content and change publication state. Each call checks current authority and the exact target; sensitive writes use additional controls, and social provider actions require native current-user confirmation. Compliance-document generation creates a draft, not a publication.

StartWith keeps project content, versions, usage records, and bounded action or diagnostic receipts to provide, secure, and audit the service. MCP diagnostics exclude raw credentials, full request bodies, tool arguments, and document bodies. ChatGPT or Codex stores the revocable OAuth credential under the host provider’s controls.

OAuth expiry, Clerk-side revocation, or disconnecting the server in ChatGPT or Codex ends access. Reconnecting creates a new credential binding and invalidates prior action intents. Disconnecting does not itself delete StartWith project data; deletion requests remain subject to verified authority and lawful retention exceptions.

Organisation and contact

StartWith
Trade Centre Rd, Dubai, United Arab Emirates
https://startwith.xyz

Product support: support@startwith.xyz
Privacy and data requests: privacy@startwith.xyz