Privacy Policy

Account information: name, email address, and optionally phone and company, provided when you register.

Project content: meeting details and minutes, comments, tasks, expenditures, investor and cap table entries, funding stage, and files you upload (such as pitch decks) within a project workspace.

Activity data: an audit log records account and project actions (who did what, and when) for accountability within your organization's workspace, visible to superadmins.

Technical data: standard server logs (timestamps, IP address, basic request metadata) generated by normal web server operation, and a session cookie used to keep you signed in.

To operate the Service: authenticate you, enforce project-level access control, display your projects' content back to you and your teammates, send account-related email (such as a temporary password when an admin adds you, or notifications you're @mentioned in), and maintain the audit log.

We do not sell your personal information, and we do not use your project content for advertising.

Project content is visible only to members of that project and to superadmins of your workspace, unless a project admin explicitly makes a project's Resources tab public via a shareable link (optionally password-protected) — in which case whatever is shared there is visible to anyone with that link.

We don't share your data with third parties except service providers necessary to run the Service (for example, an email provider used solely to deliver account-related emails on our behalf).

Data is stored in a Postgres database operated by your organization's deployment of this Service. Passwords are hashed (never stored in plain text) and sessions are secured with a signed cookie. Uploaded files are stored on the server and served only to authorized users or, for public resources, per the sharing settings a project admin configures.

Reasonable technical measures are used to protect your data, but no system is perfectly secure — we can't guarantee absolute security of information transmitted to or stored by the Service.

We retain account and project data for as long as your account or project is active. Deleted resources (files, entries) are removed from active storage. Backups are retained separately for a limited rotation window for disaster recovery. To request deletion of your account or data, contact the superadmin of your workspace.

We use a single essential session cookie to keep you signed in, and — only on public, password-protected share pages — a cookie that remembers you've entered the correct share password. We don't use advertising or third-party tracking cookies.

We may update this Privacy Policy from time to time. Continued use of the Service after an update constitutes acceptance of the revised policy.

Questions about this policy, or requests regarding your personal data, can be directed to the superadmin of your organization's workspace.