Privacy Policy
Effective Date: January 1, 2025
Overview
Welcome to VCOS AI. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our venture capital operating system platform and related services.
By accessing or using VCOS, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.
Information We Collect
We collect several types of information to provide and improve our services:
Information You Provide
- Account Information: Name, email address, company name, job title, and password when you create an account
- Profile Information: Professional details, investment focus, and other information you choose to add to your profile
- Deal Flow Data: Information about startups, investments, term sheets, MOUs, due diligence documents, and related communications
- Communications: Messages, feedback, and correspondence you send to us
- Payment Information: Billing details and payment method information (processed securely through third-party payment processors)
Information We Collect Automatically
- Usage Data: Information about how you interact with our platform, including pages visited, features used, and actions taken
- Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
- Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities
- Log Data: Server logs including IP address, access times, and pages viewed
How We Use Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve our platform and features, including deal flow management and automated diligence tools
- Account Management: To create and manage your account, authenticate your identity, and provide customer support
- Communications: To send you service updates, security alerts, administrative messages, and respond to your inquiries
- Analytics and Improvement: To analyze usage patterns, improve our services, develop new features, and enhance user experience
- Security: To detect, prevent, and address technical issues, fraud, security threats, and violations of our Terms of Service
- Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements
- Marketing: With your consent, to send you promotional materials and information about new features (you can opt out at any time)
Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We work with third-party service providers who perform services on our behalf, including:
- Cloud hosting services (Vercel)
- Email delivery services (Resend API)
- Analytics providers
- Payment processors
- Customer support tools
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (subpoenas, court orders)
- Government or regulatory requests
- Suspected fraud or security threats
- Protection of our rights, property, or safety, or that of others
With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
Data Security
We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and security
- Secure development practices and code reviews
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:
- The nature and sensitivity of the information
- The purposes for which we process the information
- Legal, regulatory, tax, accounting, or reporting requirements
- Whether we can achieve our purposes through anonymization
When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
Access and Portability
You have the right to request access to the personal information we hold about you and receive a copy of it in a structured, commonly used, and machine-readable format.
Correction
You have the right to request correction of inaccurate or incomplete personal information.
Deletion
You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, legitimate business purposes).
Restriction and Objection
You have the right to restrict or object to certain processing of your personal information.
Withdraw Consent
If we process your information based on consent, you have the right to withdraw that consent at any time.
Opt-Out of Marketing
You can opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email or contacting us directly.
To exercise any of these rights, please contact us at aakash@vcosai.com. We will respond to your request within the timeframe required by applicable law.
Third-Party Services
Our platform integrates with and relies on third-party services to deliver our features. These services have their own privacy policies:
- Vercel: Provides our hosting infrastructure and global CDN
- Resend API: Handles transactional email delivery and notifications
- Analytics Providers: Help us understand platform usage and performance
We encourage you to review the privacy policies of these third-party services. We are not responsible for the privacy practices of third parties.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
If you believe we have collected information from a child under 18, please contact us immediately at aakash@vcosai.com.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal information internationally, we implement appropriate safeguards to protect your information, including:
- Standard contractual clauses approved by regulatory authorities
- Adequacy decisions regarding the recipient country
- Privacy Shield or similar certification frameworks (where applicable)
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Effective Date" at the top of this policy
- Notify you via email or a prominent notice on our platform
- Obtain your consent if required by applicable law
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: