Question 1

What is shared with third parties?

Accepted Answer

Y Combinator shares Personal Information with third parties in the following ways:

Vendors and Service Providers
- Hosting services, cloud services, and IT services providers
- Event management services
- Email communication and newsletter services
- Web analytics services
- These parties process data under Y Combinator's instructions

Business Transfers
- If Y Combinator is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your Personal Information may be shared with counterparties and transferred as part of that transaction

Legal Requirements
- When required by law, to comply with legal obligations, meet national security or law enforcement requirements, protect rights or property, prevent fraud, protect user safety, or protect against legal liability

Affiliates
- Y Combinator shares Personal Information with affiliated entities

With Your Consent
- Y Combinator may disclose information when you request, direct, or consent to it

Other Users
- Certain actions you take may be visible to other users of the Services

Specific Sharing by Program Type
- Event Information: shared with event companies and participating vendors
- WaaS Information: shared with Y Combinator-funded companies
- Application Information: shared with Affiliates (with disclaimers about protecting against misuse)
- SUS Information: shared with Affiliates (with limited responsibility for preventing misuse)

Analytics Providers
- Google Analytics, New Relic, Amplitude, and PostHog receive Technical Information

Important Note
Y Combinator does not sell or share your Personal Information as defined under the California Consumer Privacy Act (CCPA).

Question 2

If I am a California resident, what is the process and timeline for Y Combinator to respond to my request to know, correct, or delete my personal information?

Accepted Answer

Based on the privacy policy provided, the document does not specify a detailed process or timeline for Y Combinator to respond to California consumer rights requests (Request to Know, Request to Correct, or Request to Delete).

Here's what the policy does say about the process:

- You can submit a Consumer Rights Request by calling +1 (415) 874-1528 (toll-free) or emailing privacy@ycombinator.com

- Y Combinator may require you to verify your identity and login credentials before processing your request

- You may need to provide your name, email address, and proof of residency for verification purposes

- Information gathered during verification is used only for verification purposes

- You can submit requests through an authorized agent if you provide signed written permission, though you may still need to independently verify your identity

- Y Combinator reserves the right to retain some personal information after a deletion request if permitted by the CCPA or other laws

However, the policy does not include:
- A specific response timeline (such as 30 or 45 days)
- Details about how long verification will take
- An estimated timeframe for processing completed requests

For specific timing information, you would need to contact Y Combinator directly at the contact information provided.

Question 3

If someone misuses information from my application, can I hold Y Combinator legally responsible?

Accepted Answer

Y Combinator explicitly states it cannot protect against misuse of application materials due to volume, leaving your sensitive startup and founder information at risk of unauthorized disclosure.

Question 4

If Y Combinator violates my privacy rights along with thousands of others, can we sue together?

Accepted Answer

You waive your right to sue Y Combinator in court or join a class action, meaning you must resolve disputes individually through arbitration, limiting your legal leverage.

Question 5

What specific data from my screen is being recorded, and how long is it stored?

Accepted Answer

Y Combinator uses PostHog to record what you type, click, and view on Startup School—potentially including sensitive startup ideas, passwords, or personal information visible on your screen.