SYSTEM ONLINEOPERATOR: INVALID
Start Here — Ready. Set. Make.
LEGAL · PRIVACY

Privacy Policy

LAST UPDATED · AUGUST 3, 2026
The short version: we collect what we need to run the tools, save your work, and take payment. We don't sell your data. Your measurements and designs are yours — export or delete them whenever you like. Card numbers never touch our servers.

01Who we are

Start Here is a set of shop-floor tools — a box maker, a nut and bolt generator, a measurement vault, cut-list and setup calculators — operated by Start Here Tooling Co. (“Start Here”, “we”, “us”). This policy covers starthere00.com, the signed-in app, and our mobile app.

Questions about anything here go to zero@starthere00.com, or through the support form.

02What we collect

Account information

Your email address, the name you give us, and your preferred units (mm or inches). Passwords are handled by our authentication provider and stored only as salted hashes — we never see or store your plaintext password.

What you make

The work you save: projects, objects, cut pieces, measurements, box and nut-and-bolt designs, machine setups, checklists, notes, and saved email addresses you send cut lists to. All measurements are stored in millimetres; mm/inch is a display preference only.

Voice capture

If you use voice measurement capture, we process the audio you record to turn it into a number. Audio is sent to our speech-to-text provider for transcription, and the resulting text is sent to our AI provider to extract the measurement. We keep the parsed measurement and, where you have corrected a result, the correction — so the tool gets better at hearing you. We do not use your recordings to train third-party AI models.

Payment information

Subscriptions and Scrap Bin purchases are processed by Stripe. Card numbers never reach our servers. We store the subscription status, plan, billing period, and the Stripe identifiers needed to keep your account in sync.

Usage and device data

Pages viewed, tools used, features clicked, which variant of an A/B test you saw, approximate location derived from IP, browser and device type, and IP address. IP addresses are also used to rate-limit public forms and abuse-prone endpoints.

What you send us

Messages you submit through the support or contact forms, including your name, email and whatever you write in them.

03How we use it

  • Run the tools and save your work between sessions.
  • Authenticate you and keep your account secure.
  • Take payment, manage subscriptions, and send receipts.
  • Answer support requests — the email you write from is used to reply to you.
  • Send service email you can't opt out of while you hold an account: welcome, billing receipts, failed payments, cancellations.
  • Send marketing email and our newsletter, only where you asked for it. Every one has an unsubscribe link.
  • Understand what people actually use, measure conversion, and run A/B tests on copy and layout.
  • Detect and block abuse, spam, and prompt-injection attempts against our AI-backed features.
  • Meet our legal and tax obligations.
We do not sell your personal information, and we do not share the designs or measurements you save with anyone outside the providers listed below.

05Who we share it with

We use the following providers to run the service. Each receives only what it needs, and each is bound to handle it on our instructions.

  • Supabase — database, authentication and file storage. Holds your account and everything you save.
  • Vercel — hosting, request logs, and privacy-friendly traffic analytics.
  • Stripe — payments, subscriptions and invoices.
  • Resend — delivery of transactional and support email.
  • AssemblyAI — speech-to-text for voice measurement capture.
  • Anthropic — parsing a transcript into a structured measurement.
  • Google — Analytics and Tag Manager for usage measurement; Search Console for search performance.
  • Meta — advertising conversion measurement. Where we send an email address it is hashed before it leaves our servers.
  • Notion — our internal log of contact-form enquiries and orders.
  • beehiiv — newsletter delivery, if you subscribe.
  • Twilio — SMS, where you have opted into text-message features.

We may also disclose information if the law requires it, to enforce our User Agreement, or as part of a merger or sale — in which case we will tell you before your information moves.

06Cookies and tracking

Essential cookies keep you signed in and hold your session. The site does not work without them.

Analytics and advertising cookies measure traffic, conversion and experiment results. You can refuse them through your browser, or by sending a Global Privacy Control signal, without losing access to any tool.

We honour Do Not Track and Global Privacy Control signals for non-essential tracking where your browser sends them.

07How long we keep it

  • Account and saved work — for as long as your account is open, then deleted within 30 days of you closing it.
  • Voice recordings — kept only as long as it takes to transcribe and parse them; the measurement is what we keep.
  • Billing records — up to 7 years, because tax law requires it.
  • Support messages — up to 2 years, so we have the history of a problem.
  • Analytics — up to 26 months, then aggregated or deleted.

08Your rights

Wherever you live, you can ask us to do all of the following, and we will not charge you or treat you differently for asking:

  • Get a copy of the personal information we hold about you.
  • Correct anything that is wrong.
  • Delete your account and the data in it.
  • Export the measurements and designs you have saved.
  • Opt out of marketing email and of analytics tracking.
  • Object to or restrict processing, and — in the UK/EEA — lodge a complaint with your data protection authority.

Email zero@starthere00.com or use the support form. We respond within 30 days. We will ask you to confirm you control the account's email address before we act on a request.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising beyond the conversion measurement described above.

09How we protect it

Traffic is encrypted in transit. Data is encrypted at rest by our database provider. Access to your rows is enforced in the database itself by row-level security, not just in application code, so one account cannot read another's work. Administrative access is limited to those who need it, and privileged API keys are never exposed to the browser.

No system is perfect. If a breach ever affects your personal information, we will notify you and the relevant regulator as the law requires.

10Where your data lives

We are based in the United States and our providers process data in the United States and other countries. Where information moves out of the UK/EEA, that transfer is covered by Standard Contractual Clauses or an equivalent safeguard in our agreement with the provider.

11Children

Start Here is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us data, write to zero@starthere00.com and we will delete it.

12Changes to this policy

When we change this policy we update the date at the top. If a change materially affects your rights, we will email account holders before it takes effect. Continuing to use Start Here after that means the new version applies to you.

13Contact

Start Here Tooling Co.
Address on file — contact us at the email below
zero@starthere00.com

For anything else — a tool misbehaving, a billing question — the support page reaches the same people at zero@starthere00.com.