Privacy Policy

1. Introduction

Investor Match by Incisive Ventures ("we," "us," or "our"), operates Investor Match (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations worldwide.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials when you create an account
• Campaign and Source Deck Data: Pitch deck files, slides, images, deck text, company information, funding stage, business model, target check size, geography, and ideal customer profile
• Derived Information: Structured facts, classifications, scores, evaluations, inferences, matches, outcomes, and research concerning companies, founders, teams, products, markets, competitors, financing, investors, and deck quality
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
• Communications: Any messages or inquiries you send to us

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide and improve our investor matching service
• Analyze your pitch deck and company information using AI to generate investor recommendations
• Create deck evaluations, diligence products, benchmarks, trend reports, research, and analytics
• Use, combine, sell, and license Derived Information as authorized by the Terms you accepted
• Process payments and maintain transaction records
• Send service-related communications (e.g., campaign status updates)
• Respond to your inquiries and provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Improving our Service, fraud prevention, and security
• Legal Compliance: Meeting regulatory and legal requirements
• Consent and Contract: Uses covered by the versioned submission terms you affirmatively accept
• Consent: Marketing communications (where applicable)

4. AI Processing

Our Service uses artificial intelligence providers to analyze your pitch deck and company information. This AI processing:

• Extracts company details and generates investor recommendations
• Creates personalized outreach email templates
• May create structured facts, classifications, evaluations, and inferences
• Is performed under contractual and security controls applicable to our providers
• Is not authorized by us for training a provider's generalized AI models

5. Data Sharing and Third Parties

We disclose information to:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• AI Providers: Pitch deck analysis and content generation
• Email Providers: Service and account communications
• Infrastructure Providers: Hosting, object storage, databases, authentication, security, and analytics
• Data Customers and Licensees: Derived Information for diligence, research, benchmarking, analytics, and other lawful commercial data products

We do not sell or externally license the submitted deck file, slide images, deck text, or deck excerpts. If you accepted the applicable submission terms, we may sell or license Derived Information, including identifiable company or founder information. We may also disclose information when required by law, court order, or to protect rights and safety.

These Derived Information permissions apply prospectively to submissions for which we record affirmative acceptance. We do not apply them to an earlier submission under older terms unless an authorized person later opts that submission in.

6. Data Retention

We retain Source Deck Materials and identifiable personal data while needed to provide the Service, maintain an account, meet contractual obligations, or serve the purposes described in this Policy. Upon receiving a valid deletion or objection request, we will act within the period required by applicable law, subject to exceptions including:

• Payment records required for tax and accounting purposes (retained for 7 years)
• Data necessary to prevent fraud or enforce our Terms of Service
• Information required by law to be retained

Derived Information and non-personal aggregate information may be retained after Source Deck Materials are deleted. Where Derived Information remains personal information, applicable access, deletion, objection, and sale or sharing opt-out rights continue to apply.

7. Your Rights

7.1 Rights for All Users

• Access your personal data
• Correct inaccurate information
• Request deletion of your data (subject to retention requirements)
• Opt out of marketing communications
• Object to or opt out of eligible commercial data uses where required by applicable law

To request removal or correction of an investor profile (yours or one you represent), use our data removal request form. We process verified requests within 30 days.

7.2 Additional Rights (GDPR - EU/UK Users)

• Data portability (receive your data in a structured format)
• Restrict processing
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with your supervisory authority

7.3 California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold, shared, or disclosed
• Opt out of the sale or sharing of personal information
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

Submit a Do Not Sell or Share request. We will not discriminate against you for exercising applicable privacy rights.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication mechanisms
• Access controls and role-based permissions
• Regular security reviews

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers are located. For transfers from the EU/UK, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• The EU-U.S. Data Privacy Framework (where applicable)

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy prospectively. We will provide prominent notice of material changes and seek affirmative permission when required. Posting an update or continued use alone will not authorize a materially different use of information collected under an earlier policy.

12. Contact Us

For privacy-related inquiries, data access requests, or to exercise your rights, please use our data removal request form or contact us at:

Investor Match by Incisive Ventures
2212 Queen Anne Ave N, Ste 827
Seattle, WA 98109
Email: hello@incisive.vc

We will respond to verified requests within 30 days (or sooner as required by applicable law).