Privacy Policy

Information We Collect

We collect information you provide directly, such as your name, email address, organization details, and account credentials when you register, request a demo, or contact us. We also collect data you upload or generate while using the platform, including deal records, portfolio data, documents, and investor information.

We automatically collect technical information such as your IP address, device and browser type, usage patterns, and log data through cookies and similar technologies to operate and improve the service.

How We Use Information

We use the information we collect to provide, maintain, and improve our services; authenticate users and secure accounts; respond to support requests; send service-related and, where permitted, marketing communications; analyze usage to enhance functionality; and comply with legal obligations.

We do not sell your personal information, and we do not use customer data uploaded to the platform to train third-party AI models without your explicit consent.

Data Storage & Security

Your data is protected through strict tenant isolation, ensuring that each customer's data is logically separated and accessible only to authorized users within that organization. All data is encrypted at rest using 256-bit AES encryption and in transit using TLS 1.3.

We maintain role-based access controls, multi-factor authentication, continuous monitoring, and regular security audits to safeguard your information against unauthorized access, loss, or misuse.

Data Sharing

We share information only as necessary to operate the service. This includes trusted subprocessors and service providers (such as cloud hosting and analytics vendors) that are contractually bound to protect your data, and disclosures required by law or to protect our legal rights. We never sell your personal data to third parties.

Your Rights

Depending on your location, you may have rights under the GDPR and similar laws, including the right to access the personal data we hold about you, request correction or erasure, restrict or object to processing, and request portability of your data in a structured, machine-readable format.

To exercise these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the platform is used. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

Data Retention

We retain personal data for as long as your account is active or as needed to provide the service. Upon contract termination, customer data is deleted or anonymized in accordance with our data processing agreements, except where retention is required to meet legal, accounting, or regulatory obligations.

International Transfers

Your information may be processed and stored in countries other than your own. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses and offer data residency options (US, EU, APAC) to support your compliance requirements.

Contact

If you have questions about this Privacy Policy or how we handle your data, please contact our privacy team at privacy@supranova.io.