Legal

Privacy policy

This Privacy Policy explains how PocketFund Technologies, Inc. ("PocketFund", "we", "us") collects, uses, shares, and protects information in connection with our website and services. We've tried to write it in plain English. Where defined terms appear, they refer to our Terms of Service.

1. Information we collect

You give us

• Account & profile data — name, email, password (hashed), role (founder/investor), firm, designation, links.
• Project & round data — ideas, decks, financials, NDAs, term sheets, bid history.
• Payment data — billing email and address. We do not store card numbers; payments are processed by Stripe.

Collected automatically

• Device, browser, IP, approximate location.
• Usage telemetry — clicks, page views, feature interactions.
• Cookies and local storage — strictly necessary, functional, and analytics (you control these in cookie settings).

2. How we use it

• To run the matching engine and surface relevant founders / investors to you.
• To operate the platform — login, sessions, audit logs, security.
• To improve the product through aggregated, anonymised analytics.
• To communicate — product updates, security alerts, billing, replies to your support requests.
• To comply with law and enforce our terms.

3. Who we share it with

• Other PocketFund users — only the data you've explicitly chosen to share (NDA-gated rooms, sub-profile views, public profile fields).
• Service providers — Stripe (payments), Postmark (transactional email), Cloudflare (CDN/security), Sentry (error monitoring), Mixpanel (product analytics).
• Legal & safety — when required by law, subpoena, or to protect our users.

We never sell personal data to third-party advertisers. Period.

4. Your rights

You can access, correct, export, or delete your personal data at any time from your account settings, or by emailing privacy@pocketfund.in. EU/UK and California residents — see our GDPR notice for additional rights including portability and objection.

5. Data retention

We keep your account data for as long as your account is active. After deletion, identifiable data is removed within 30 days; aggregated, non-identifiable analytics may be retained indefinitely. Tax and legal records may be retained as required by law (typically 7 years).

6. Security

We use TLS in transit, AES-256 at rest, role-based access controls, MFA on all internal access, and continuous security monitoring. Our full controls are described on our Security page.

7. International transfers

PocketFund is headquartered in Bengaluru with infrastructure in AWS Mumbai (ap-south-1) and AWS Oregon (us-west-2). Cross-border transfers rely on Standard Contractual Clauses where applicable.

8. Children

PocketFund is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes

We'll notify you via email and an in-app banner before any material change. The "last updated" date at the top of this policy reflects the latest revision.

10. Contact

Privacy questions: privacy@pocketfund.in · Data Protection Officer: dpo@pocketfund.in · Postal: PocketFund Technologies, Inc., 4th Floor, Indiqube Eta, Bengaluru 560071, India.