Who is responsible
For the information described below, VentureFract Inc. is the controller of account, billing, website and usage information. For the deal, portfolio, fund and LP information a firm puts into VentureFract ("Customer Data"), the firm decides what to store and why, and VentureFract processes it on the firm's behalf. If you applied to a programme, or you are a startup enrolled in one, the programme decides what it asks you and how long it keeps your answers, and VentureFract processes them on its behalf, as described under "Applications and programme check-ins" below. If you are a founder or LP and want to see or correct information held about you in a firm's workspace, contact that firm first; we will help them respond.
What we collect
Account information
Name, email address, firm name, role, and a password (stored only as a one-way hash, never in readable form). If you turn on two-step verification we store the factor needed to verify it.
Customer Data
Whatever your firm and its invited founders and LPs enter or upload: companies, contacts, deals, memos, votes, documents, cap tables, fund and capital-account figures, and messages. This can include personal information about founders, co-investors and LPs.
Applications and programme check-ins
Accelerators and startup programmes that use VentureFract can open a public application page. If you apply, we store what you type (the company, your name and email address, and your answers) and a one-way fingerprint of your network address, used only to limit abuse. We send you one email to confirm your address; until you confirm it, the programme cannot email you about your application. We send further emails only when the programme asks us to, for example a decision or its standard terms. If you are accepted and enrolled in a programme, we also send you a weekly check-in email from the programme, with a link that is only yours, and store your answers. A programme can share those answers with mentors it chooses: a mentor gets a link that is only theirs to a read-only page of the startups assigned to them, and may leave a short note for the programme; the programme can remove a mentor, which ends the link at once. We do not use this information for our own marketing, and we do not sell it. For this information the programme is the controller and VentureFract processes it on the programme's behalf: to see, correct or delete it, contact the programme first (reply to its email). A programme can delete your application data, including your check-in answers and your links, from the application; if you cannot reach the programme, use our contact page and choose "Privacy".
How we measure product use
We measure how far a firm gets through the product, not what is in it. The measures are the dates a firm first created a deal, an investment memo, a committee decision, an investment and an accepted company update, read from records that already exist, plus counts of those records. We do not read names, documents, messages or amounts for this, we do not track individual people or pages, and we store no extra data for it beyond one log entry each time an admin changes the switch. A firm admin can turn this off for the firm at any time in Settings; the firm is then left out of the funnel steps and medians we compute, and only the number of firms that switched it off is kept. We use a firm's own figures to show that firm its adoption summary on plans that include it.
Billing information
Plan, usage and invoice history. Card details are collected and held by our payment processor, Stripe; we never see or store full card numbers.
Usage and security information
Sign-in events, IP address, device and browser type, and records of actions in the product (for example the audit trail and document access log), used to secure accounts, prevent abuse and provide features you use. We also receive error reports so we can fix faults.
Messages to us
When you use our contact form we store your name, email address, topic and message so we can reply, and a one-way fingerprint of your network address to limit abuse.
How we use it
- To provide, secure and support the service you or your firm signed up for.
- To take payment and manage your plan and limits.
- To send service emails: confirmations, invitations, reminders and notices about your account. We do not send marketing email without your consent.
- To detect, investigate and prevent fraud, abuse and security incidents.
- To comply with legal obligations and to establish or defend legal claims.
We do not sell personal information, we do not use Customer Data for advertising, and we do not use it to train models offered to others.
Who we share it with
Only people your firm chooses (teammates, and the founders and LPs it invites, each limited by role), and service providers that help us run VentureFract, under contracts that limit them to doing so. The categories are:
- Cloud hosting and database infrastructure
- Payment processing (Stripe)
- Transactional email delivery
- Error monitoring
- AI model provider, used only if a firm turns on AI assist, and then only for the update a reviewer chooses to summarise
We may disclose information where required by law or to protect rights and safety, and to a successor in a merger or sale of the business, who will be bound by this policy. We will give you the current list of providers on request through our contact page.
Where it is processed
VentureFract is operated from the United States and your information may be processed there and in other countries where our providers operate. Where the law requires a transfer mechanism, we rely on appropriate safeguards such as standard contractual clauses.
Cookies and tracking
This website does not use advertising or analytics cookies or trackers. The applications use only strictly necessary cookies and local storage to keep you signed in and remember basic preferences. Because they are necessary for the service, they are not optional.
How long we keep it
We keep account and Customer Data while your account is active. After a subscription ends the workspace is read-only for 90 days and then closed, as described in the Terms of Service; after closure we delete or anonymise Customer Data on request, and otherwise keep it no longer than needed for legal obligations and backups, which age out on their normal cycle. Contact messages are kept as long as needed to deal with your enquiry and for our records. Records we must keep by law, such as invoices, are kept for the required period.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. You can update account details in the app. To exercise a right, use our contact page and choose "Privacy". We will verify your identity and reply within the time the law requires. If you are not satisfied you can complain to your local data protection authority.
Security
We use measures designed to protect personal information, including firm-level data isolation, role-based access, expiring invitation links, encrypted connections and an audit trail. No system is perfectly secure; see our security page and tell us at once if you think something is wrong.
Children
VentureFract is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
Changes
We will update this policy when our practices change and show the date above. For material changes we will notify account owners before they take effect.
Contact
VentureFract Inc. — use our contact page and choose "Privacy".