Draft placeholder — not reviewed by counsel

Privacy Policy

This is a placeholder page, not a real Privacy Policy. It describes what the app actually collects and does today, honestly, so there is a working link with real information behind it — it is not a substitute for a real, counsel-reviewed policy, which must exist before real user data is collected at scale.

What is collected today

• Account info: email address, hashed password (never stored in plain text)
• Organization/profile info you enter: company or fund name, industry, geography, stage, financials, mandate criteria, pitch text
• Activity: matches computed, connection requests, messages between connected users, saved items
• Basic technical metadata on signup/login: IP address and user agent, used for security (e.g. login abuse detection) and audit logging

What is not collected

No payment card data is collected by this app directly (a future real Stripe integration would route card details straight to Stripe, never through this server). No data is sold to third parties. No advertising trackers are used.

How to exercise privacy rights

You can change your password or delete your account at any time from Account settings. Deleting your account anonymizes your login credentials immediately; it does not erase other users' historical records of interactions with you (their message history, audit trail), the same way deleting your own copy of an email doesn't delete the copy in the other person's inbox. There is no automated data-export tool yet — contact support to request one.

A real Privacy Policy, reviewed by counsel and naming a real data controller, is required before this platform launches publicly. See BETA_READINESS.md for the full list of what remains.