Privacy Policy

Last updated: April 1, 2026

1. Information We Collect

When you sign in via Google or LinkedIn OAuth, we receive your name, email address, and profile information from the identity provider. We do not access your contacts, calendar, or any other data beyond basic profile information.

We also collect:

  • IP address and browser information (for security and audit purposes)
  • Questions asked to Q, our AI assistant (to improve response quality)
  • Content access logs (which materials you viewed and when)

2. How We Use Your Information

Your information is used to:

  • Verify your identity and manage access to investor materials
  • Maintain audit trails for NDA compliance
  • Improve the Q AI assistant's response accuracy
  • Communicate with you about your access status

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored on Google Cloud Platform (GCP) infrastructure with encryption at rest and in transit. Session data is stored server-side with opaque tokens — we do not use JWT or store session data in your browser.

NDA acceptance records are stored as immutable, append-only records and retained for the duration required by applicable law.

4. Watermarking

All investor materials are digitally watermarked with your name, email, and access timestamp. This is for document security and NDA enforcement. Watermarks are embedded in content at the server level and cannot be removed.

5. Third-Party Services

We use the following third-party services:

  • Google OAuth — for identity verification
  • LinkedIn OAuth — for identity verification
  • Google Gemini API — for AI-powered Q&A responses
  • MongoDB Atlas — for data storage

Each service has its own privacy policy. We only share the minimum data required for each service to function.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. Note that NDA acceptance records cannot be deleted as they constitute legal evidence.

7. Contact

For privacy-related inquiries, contact the founder directly through the investor portal or via the email address provided during your access approval.

← Back to home