Y Combinator

Disclaims liability for leaked applicant information

Y Combinator explicitly states it cannot protect applicant data from misuse or unauthorized disclosure, yet collects sensitive founder information (names, emails, employment history, home locations) that could enable targeted harassment or fraud.

Binding arbitration prevents class action lawsuits

Users waive the right to sue Y Combinator as part of a group, even if the company harms thousands of people identically—meaning individual users bear all legal costs to challenge systematic wrongdoing.

Session replay captures everything on your screen

Y Combinator uses PostHog to record your entire screen activity on Startup School, including passwords you might type, private messages, or sensitive information you paste—even before it's submitted.