Privacy Policy

RoundReady (“RoundReady,” “we,” “us,” or “our”) provides a fundraising preparation platform at roundready.site (the “Service”) that helps startups organize data rooms, score investor readiness, and share information with investors. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

1. Information we collect

We collect information in the following ways:

• Account information — name, email address, and password (hashed) when you sign up, provided via our authentication provider (Supabase Auth).
• Organization and room data — company name, funding stage, and data room content you create in the app.
• Uploaded documents and financial data — files you upload to a data room (e.g. cap tables, financial statements, pitch decks) and any metrics extracted from them (ARR, MRR, burn, runway, and similar figures). This may include sensitive business and financial information about your company.
• Pitch deck and narrative inputs — structured fields you fill in (e.g. problem, solution, market, traction, team, ask).
• Share link activity — when you create investor share links, we record view counts, download activity, and last-accessed timestamps for that link.
• Usage and device data — pages visited, actions taken in the app, browser type, IP address, and similar technical information collected automatically for analytics and security.
• Payment information — if you subscribe to a paid plan, billing details are processed by our payment provider (Stripe); we do not store full payment card numbers on our servers.

2. How we use your information

• To provide, operate, and maintain the Service, including data rooms, readiness scoring, document classification, and sharing features.
• To process files you upload, including using AI-assisted classification or extraction (e.g. Anthropic’s Claude) where that feature is enabled for your account.
• To generate and manage tokenized investor share links you create.
• To communicate with you about your account, updates, and support requests.
• To process payments and manage subscriptions.
• To monitor, secure, and improve the Service, including detecting fraud or abuse.
• To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only:

• With service providers who process data on our behalf, such as Supabase (authentication, database, and file storage), Railway (backend hosting), Vercel (frontend hosting), Anthropic (optional AI-assisted classification and extraction), Resend (email delivery), and Stripe (payments). These providers are bound by confidentiality and data-processing obligations.
• With recipients you choose— content in a room is shared with investors only when you create a share link and only to the extent permitted by that link’s settings (e.g. score visibility, document list, download permission).
• For legal reasons — if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of RoundReady, our users, or others.
• In a business transfer — if RoundReady is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

4. Data retention

We retain account information and data room content for as long as your account is active or as needed to provide the Service. You may delete rooms, documents, or share links at any time within the app. If you delete your account, we will delete or anonymize your personal data within a commercially reasonable period, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

5. Data security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS), access controls, and hosting infrastructure with its own security practices (Supabase, Railway, Vercel). Uploaded documents and financial data are stored using access-controlled storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights and choices

• You can access and update your profile information from Settings.
• You can delete individual documents, rooms, or share links at any time.
• You can request a copy of your personal data or its deletion by contacting us at the email below, subject to applicable law.
• Depending on your location (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have additional rights, including the right to object to or restrict certain processing, and the right to lodge a complaint with a supervisory authority.

7. Children’s privacy

The Service is intended for business use by founders, startup teams, and investors, and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

8. International data transfers

Our infrastructure providers may process and store data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers of personal data.

9. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or through the Service.

10. Contact us

Questions about this Privacy Policy or your data can be sent to privacy@roundready.site.