Indies Club

Last updated: 3 September 2026

Indies Club publishes revenue figures that founders choose to verify through their own Stripe account. This page says what we collect to do that, what becomes public, and what stays private.

Indies Club is operated by VP Technology Ltda (CNPJ 30.286.117/0001-44), São Paulo, Brazil.

What we collect

Your account. You sign in with Google or GitHub. From that provider we keep your name, email address, and avatar, and we create a username for your public profile. You can edit your name, username, avatar, bio, location, and social links in your settings.

Your startups. The name, tagline, website, logo, founding date, country, categories, tech stack, funding, and team size you enter for each startup. All of it is public on the startup's page.

Your Stripe data. When you verify a startup, you give us a restricted Stripe key with read access. We store that key encrypted and use it to read charges, refunds, subscriptions, and invoices from your Stripe account, plus the account's settlement currency and login email. From those records we compute the figures shown on the site: monthly recurring revenue, revenue over time, active subscriptions, and churn.

Technical data. Standard server logs (IP address, browser, pages requested), a session cookie, and a cookie that keeps you signed in between visits. We measure page views with Clickbase, a privacy-focused analytics service that records the page, the referrer, and the browser and country a visit came from, without cookies and without identifying you. We do not run advertising scripts.

What is public

A verified startup's page shows its revenue figures, the date they were last read from Stripe, and the founder's public profile. The Stripe login email is never shown publicly; only you see it, in your own settings, to confirm which account is connected. Individual customers, invoices, and payment details are never shown anywhere.

How we use it

To display verified revenue, rankings, and the map.
To keep your figures current by reading your Stripe account again.
To keep you signed in and to contact you about your account.

We do not sell personal data and we do not share it with anyone except the services we need to run the site: Stripe (as the source of the figures), Google and GitHub (sign-in), Cloudflare R2 (logos and avatars), Laravel Nightwatch (error and performance monitoring, which receives request logs), Clickbase (page-view analytics), and our hosting provider.

Keeping and deleting data

Disconnecting Stripe from a startup deletes the stored key, the webhook we created in your Stripe account, and every figure we read from it. Deleting a startup does the same and removes its page. Deleting your account removes your profile and avatar, disconnects and deletes every startup you own, and removes your credit from any startup you co-founded. Server logs are kept for up to 30 days and monitoring data for up to 90 days, then discarded.

Your rights

You can see, correct, or delete your data at any time from your settings — deleting your account is how you withdraw it entirely. We do not offer a data export. Depending on where you live you may have additional rights under local law, and we will honour them.

Changes

If this policy changes in a way that matters, we update the date above and say so on the site.