Privacy Policy
Last updated: 2026-09-05. This policy explains what information we collect, why we collect it, and how you can control it. Tell Sell Excel operates from within the EU and is committed to protecting your data under the General Data Protection Regulation (GDPR).
1. Who we are
Tell Sell Excel is a consultancy run by Denis Iliev, an EU-based interim growth operator. He is the data controller for the personal data described below. The easiest way to reach us is by email at[email protected].
2. What we collect
Our AI Startup Validation tool asks you for the following information before it produces a report:
- Your email address
- Your startup name
- A one-line pitch and a short description of the problem it solves
- The industry, target customer, current alternative, and stage you select
We also store anonymised technical details to keep the service working and secure: your IP address (to stop abuse and rate-limit requests), a timestamp, and which page you submitted from. Where a Cloudflare Turnstile challenge runs, Cloudflare processes a minimal amount of data to confirm you are not a bot; their own privacy policy governs that processing.
3. Why we collect it (legal basis)
We process this data for two reasons under the GDPR:
- To provide the service you asked for (Article 6(1)(b), performance of a contract / steps prior to entering a contract). The AI verdict and the follow-up email you requested are delivered to the email you provide.
- Legitimate interests (Article 6(1)(f)). We may follow up with you about similar validation work, which is the natural purpose of Tell Sell Excel's services. You can opt out of any such messages at any time.
4. How we use it
- Generate the AI validation report you requested
- Email you the report and an offer for a free follow-up call
- Improve our validation service and tell Sell Excel's overall performance
5. Retained and shared data
Your email and startup details are stored privately to allow us to follow up and improve our service. We do not sell your data, and we do not share it with third parties for advertising. We use the following processors:
- OpenRouter - processing your submission to generate the AI report
- Cloudflare - bot detection (Turnstile) and, where applicable, site delivery
We keep submissions only as long as they are useful for the purpose above, and no longer than needed. We review retained data regularly and delete it when it has served its purpose, unless required otherwise by law.
6. Your rights
Under the GDPR you have the right to:
- Request a copy of the personal data we hold about you
- Ask us to correct any inaccurate data
- Ask us to delete your data (the "right to be forgotten")
- Object to the processing described above
- Lodge a complaint with your local Data Protection Authority
To exercise any of these rights, email[email protected] with the email address you used and what you would like us to do. We will respond within one month. For data about you that is stored with a third-party processor (such as OpenRouter or Cloudflare), we will help you get in touch with them too.
7. Children
This service is intended for adults (18+) working on startups and businesses. We do not knowingly collect data from children and will delete it when we become aware.
8. Security
We use reasonable technical and organisational measures - secure connections, limited access to stored data, and bot detection on data-collection forms - to protect your information from unauthorised access, loss or misuse.
9. International transfers
We are based in the EU and store data within these controls. Where data is processed by third-party tools that may transfer data outside the EU, we rely on tools that provide appropriate safeguards (such as EU-US Privacy Framework or equivalent adequacy arrangements).
10. Contact and complaints
For any question about this policy or your data, email[email protected]. As the site is based in the EU, your local Data Protection Authority has jurisdiction. If you are based in Bulgaria (where Tell Sell Excel operates from), you can reach the Bulgarian DSA honouring authority (the Personal Data Protection Authority) for more formal information.