Legal
Privacy Policy
Last updated: May 2025
1. Information We Collect
We collect information you provide directly, such as your name, email address, company details, and any content you upload to the platform. We also collect usage data automatically, including IP addresses, browser type, pages visited, and feature interactions. This data helps us operate, improve, and secure the platform.
2. How We Use Information
We use your information to provide and improve the Hockystick platform, send transactional and product emails, and respond to support requests. We may use aggregated, anonymised data for analytics and product development. We do not sell your personal information to third parties.
3. Data Sharing
We share data only with service providers necessary to operate the platform, including Supabase for database and authentication infrastructure, and OpenAI for AI-powered features such as email generation and analysis. All processors are contractually bound to protect your data. We may disclose data when required by law or to protect our legal rights.
4. Data Security
We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest (via Supabase), and role-based access controls. Sensitive deal room documents are watermarked and access-logged. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, data is retained for 30 days before permanent deletion. Audit logs may be retained for up to 12 months for compliance purposes.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time from your account settings. You may also request a copy of your data or object to certain processing activities. To exercise these rights, contact us at [email protected].
7. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact our privacy team at [email protected]. For data deletion requests or GDPR inquiries, we aim to respond within 30 days. Hockystick operates from Dubai, UAE, under the intended entity name Venture Tech LLC (DIFC, Dubai) — formal registration is in progress and this page will be updated once complete.