Build Up Labs ← Back

Privacy Policy

Last Updated: February 2026

1. Introduction

Build Up Labs (operated by Associação Studios PT – ASPT) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you interact with us through our websites (builduplabs.com, incubator.builduplabs.com, and startuptools.builduplabs.com), our digital platforms, our programs, and any in-person activities or events. It applies to all services and activities of Build Up Labs, including our venture studio, startup incubator applications, free interactive web tools for founders (equity split calculator, fundraising simulator, SaaS unit economics simulator, idea validation framework, AI marketing assistant), events, co-working space usage, mentorship sessions, newsletters, email communications, and internal community platforms.

By using our services or providing personal information, you acknowledge that your data will be processed as described in this Policy, in accordance with applicable laws. If you do not agree with our data practices, please refrain from using our websites or services.

2. Who We Are (Data Controller)

Build Up Labs ("we", "us", "our") refers to Associação Studios PT – ASPT, a private non-profit association registered in Portugal. Associação Studios PT – ASPT operates as a startup studio and incubator with offices at HOOD, Edifício Altejo, Rua 3 da Matinha, 101, 1950-326 Lisbon, Portugal. Associação Studios PT – ASPT is the data controller for the personal data processed under this Policy.

If you have any questions about this Privacy Policy or wish to contact us regarding your personal data, you can reach us by email at [email protected] or by mail at the above postal address.

3. Personal Data We Collect

We collect various categories of personal data in the course of operating Build Up Labs. The types of information we collect depend on how you interact with us:

  • Contact Information: Name, email address, phone number, and postal address when you fill out a contact form, apply to programs, or sign up for newsletters.
  • Application and Profile Data: Professional background, business idea details, team information, application answers, and pitch decks when applying to our incubator or programs.
  • Community and Communication Data: Messages or content you post on internal forums or chat platforms, email correspondence, mentorship feedback, or support inquiries.
  • Usage Data: IP address, device and browser type, pages viewed, referring website, and visit timestamps. We may use cookies and similar technologies to remember preferences and gather analytics (see our Cookie Policy).
  • Payment and Billing Information: Payments are handled by trusted third-party processors. We may receive limited billing information but do not store full credit card details.
  • Event and Media Data: Photographs or video recordings during events, workshops, or in the co-working space to document and promote our community.
  • Other Information You Provide Voluntarily: Survey responses, feedback, or additional details in your user profile.

We do not knowingly collect data from children. Our services are intended for adults (18 or older).

4. How We Use Personal Data

We process your personal data for the following purposes, in accordance with the GDPR:

  • Providing and Managing Services: Operating our websites, programs, and services; evaluating applications; facilitating mentorship; organizing events. Legal basis: performance of a contract or pre-contractual steps.
  • Facilitating Community and Networking: Connecting founders, mentors, and partners; featuring profiles in cohort listings. Legal basis: contract performance and legitimate interest.
  • Communicating with You: Administrative communications, program updates, and marketing emails (with consent). Legal basis: contract performance, legitimate interest, and consent for marketing.
  • Improving and Developing Services: Analyzing usage data and feedback to improve design, content, and user experience. Legal basis: legitimate interest.
  • Security and Legal Compliance: Preventing fraud, ensuring security, and complying with legal obligations. Legal basis: legal obligation and legitimate interest.
  • Other Purposes with Your Consent: Any additional processing will be based on your consent, which you can withdraw at any time.

5. Cookies and Analytics

Our websites use cookies and similar tracking technologies. We use both essential cookies (necessary for site functionality) and non-essential cookies (for analytics and personalization). Where required by law, we obtain your consent via a cookie consent banner. You can manage or disable cookies at any time through your browser settings.

For more information, please see our Cookie Policy.

6. How We Share Personal Data

We do not sell your personal data. We share information only in the following circumstances:

  • With Your Consent or At Your Direction: When you specifically request or authorize sharing.
  • Within the Build Up Labs Community: Basic profile information shared with members, mentors, or displayed on websites for community-building.
  • Service Providers (Processors): Trusted third-party companies assisting in delivering services (cloud hosting, email, analytics, payment processors), bound by data processing agreements.
  • Mentors and Partners: Limited information shared with mentors or corporate partners supporting your startup, subject to confidentiality.
  • Legal Requirements: When required by law or to protect rights, property, and safety.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, with continued privacy protections.

7. International Data Transfers

We primarily store and process personal data on servers within the European Union. When transfers outside the EEA are necessary, we ensure adequate safeguards are in place, including adequacy decisions, Standard Contractual Clauses (SCCs), or other GDPR-permitted safeguards. You can request more information about international data transfers by contacting us.

8. Data Security Measures

We implement technical and organizational measures to safeguard your personal information, including encryption (HTTPS and data at rest), access controls, staff training, system monitoring and patching, regular backups, and physical security controls. While we strive to protect your data, no method of transmission or storage is completely secure.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. When no longer needed, we erase or anonymize the data. If you have specific questions about retention periods, please contact us.

10. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

  • Right of Access: Request confirmation and a copy of your personal data.
  • Right to Rectification: Have inaccurate or incomplete data corrected.
  • Right to Erasure: Request deletion of your data in certain circumstances.
  • Right to Restrict Processing: Request limitation of processing under certain conditions.
  • Right to Data Portability: Obtain your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right not to be subject to Automated Decisions: Not be subject to solely automated decision-making with significant effects.
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.

11. Exercising Your Rights

You can exercise your rights by contacting us:

  • Email: [email protected] (subject: "Privacy Request")
  • Postal Mail: HOOD, Edifício Altejo, Rua 3 da Matinha, 101, 1950-326 Lisboa, Portugal

We will respond within one month (extendable by two months for complex requests). If you are not satisfied, you have the right to lodge a complaint with a supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our website or email. The "Last Updated" date at the top will always indicate the latest revision. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or how Build Up Labs handles your personal data, contact us at [email protected] or at our postal address above.