Privacy Policy

When you apply as a startup, we collect the information you provide in the application form — including company details, team information, financial figures, traction metrics, and any documents you upload (pitch decks, financial statements).

We also collect standard account information (name, email address) and usage data (pages visited, features used) to improve the platform.

As part of AI-assisted scoring, vcLayer may cross-reference publicly available information about your startup from sources such as LinkedIn, GitHub, Crunchbase, and web searches. This is used exclusively to verify traction claims and improve scoring accuracy.

We do not collect or store any information from external sources beyond what is directly relevant to evaluating your application.

Your data is used to generate your AI curation scorecard, match you with relevant investors, and provide the platform services described at sign-up. We also use aggregated, anonymised data to improve our scoring models over time.

Your application data is never shared with investors without your explicit consent — either through entering the investor pipeline (startup-side) or through deal flow access controls (investor-side).

All data is encrypted in transit (TLS) and at rest (AES-256). Access to production data is restricted to authorised personnel only, protected by multi-factor authentication and audit logging. We use Supabase as our database and authentication provider, and all file uploads are stored in Supabase Storage with private access controls.

Your application data is retained for as long as your account is active. If you delete your account, your personal data and application content will be removed within 30 days, except where we are required to retain records for legal or financial compliance purposes.

You have the right to access, correct, or delete your personal data at any time. You may also request a copy of the data we hold about you or ask us to restrict processing. To exercise any of these rights, contact us at privacy@vclayer.com.

A comprehensive legal privacy policy covering GDPR, CCPA, and other applicable regulations is currently being prepared and will be published here. If you have specific questions about data handling before then, please contact us directly.