Privacy

We collect your application, profile, and asks. Your verification artifact is visible to moderators only, is never public, and is deleted 30 days after a decision; rejected applications' personal fields are cleared after 90 days. Admins read a conversation only when it is reported, and every such read is audited. Request deletion any time by email.

What we collect

Your application (including the verification file), your member profile, your asks, offers, and responses, and sign-in records needed to keep you logged in.

Who sees your verification file

Moderators only, through an admin screen that logs every view. It is never public and no AI reads it in the MVP.

How long we keep things

Verification files are deleted 30 days after a decision. Rejected applications' personal fields are cleared after 90 days. Sign-in tokens and sessions are purged when used or expired.

Messages

Messages are visible to conversation participants only. Moderators may open a reported thread read-only while that report is open, and only up to the message snapshot captured when the report was filed; every such view is logged. This is enforced policy with auditing — not a claim that unreported messages can never be read under any circumstance.

Investor access

Investors approved through the investor application never see the member directory. They may see asks you explicitly flag as open to investor intros (your first name, one-liner, and ask text only) and conversations they are part of.

Withdrawal

Unlisting your investor profile or unflagging an ask stops future exposure immediately. It cannot recall what someone already saw or messages already sent.

Deleting your data

Members can remove membership (messages are hard-deleted except a bounded hold on reported threads: until 30 days after a report resolves or 90 days from the report, whichever comes first, then purged to a minimal non-content audit record) from account deletion after signing in. Dual-role accounts can keep investor access when removing membership.