Privacy Policy.

Last updated: [EFFECTIVE DATE]

This policy explains how Safqos Corp., a Delaware corporation ("Safqos", "we", "us"), handles personal information when you use the Safqos mobile application, the safqos.com website, and related services (together, the "Service").

1. What other members can see

Safqos is a marketplace. Your profile is shown to other members so they can decide whether to approach you. That includes your business name and description, industry, stage or operating age, the capital you are seeking, the terms you are offering, and the criteria you declare.

Your profile is not on the public internet. It is not indexed by search engines and it is not visible to anyone outside the admitted membership. Inside the platform, admitted members can see it. That is the limit of what we promise about profile visibility.

Sensitive material behaves differently. Financial statements, pitch decks, data room files, and the contents of your conversations sit behind NDA gating and stay locked until both sides accept a mutual NDA. You choose what to put behind that gate and when to open it.

2. NDA gating and what it legally does

When you and another member both accept a mutual non-disclosure agreement through the Service, you form a binding contract with each other. Courts generally enforce NDAs formed this way. Electronic acceptance is valid under the federal E-SIGN Act and state equivalents such as UETA, provided the person accepting had notice of the terms and took a clear affirmative step to agree.

Four consequences follow.

• The agreement is between the two of you. Safqos is not a party to it. We provide the mechanism, record that both sides accepted, and timestamp it.
• We do not enforce it for you. If a member breaches an NDA, your remedy is against that member. You would pursue it yourself, in the forum the NDA specifies. We can provide records of who accepted what and when, and we will do so where we are legally required or properly asked.
• Gating controls who can open a document. It does not control what they do next. Once a counterparty has legitimately opened a document, they have seen it. Watermarking ties a copy to the viewer and discourages onward sharing, but nothing makes a document unreadable afterwards.
• Scope and duration come from the NDA itself. What counts as confidential, how long the duty lasts, and which exceptions apply are set by the agreement you accepted. Read it before you accept it.

An NDA also does not override the law. A member who receives a lawful subpoena or court order may be compelled to disclose, and most NDAs carve out material that was already public, already known to the recipient, or independently developed.

3. Information we collect

Information you give us

• Account details. Name, email address, phone number.
• Profile and deal information. Business name and description, industry, stage or operating age, revenue and other financial figures, profitability, valuation, capital sought, equity offered, use of funds, timeline, and the investment criteria you declare.
• Documents you upload. Pitch decks, financial statements, and data room files.
• Messages and pitch room activity. The content of your conversations and pitch rooms with other members, and the actions you take in a pitch room, such as marking interest, requesting information, suggesting a follow-up or downloading a file the other person shared.
• Pitch room calls. When both people on a call agree before joining, the call's audio, and video from any camera that is on, is recorded. Nothing is recorded if either person declines.
• Deal outcomes. If you record where a deal with a connection stands, the status and any details you add: the type of deal, the amount, the date it closed and your notes. Only you and that connection can see them. We use them only in aggregate, such as counting how many deals members report closing, and never show an individual deal to anyone else.
• Applications. The details you submit through the access request form on this website.

Information collected automatically

• Device and usage data. Device model, operating system, app version, and how you move through the Service, including which profiles you view and the decisions you record on them.
• Location. With your permission, device location is used to set your region for currency and location fields. Decline it and you can enter your location by hand.
• Camera, microphone, photos, and files. The camera and microphone are used during a pitch room call only while you have them turned on, and the camera for the preview shown before you join. Otherwise the camera is used only at the moment you take a photo or scan a code, and photos and files only when you attach them. Nothing is accessed in the background.
• Calendar. If you add a scheduled call to your calendar, your device (or Google Calendar, if you choose it) creates the event. We do not read your calendar.

4. Sensitive personal information

Safqos does not collect government-issued identification, biometric data such as a selfie used for identity matching, or financial account credentials. Identity, revenue, and investor verification are not available during the TestFlight beta; phone verification is the only check currently in the product.

Some categories we do collect may still be treated as sensitive under laws including the California Consumer Privacy Act, such as the contents of messages you send through the Service. We do not use any such information to build profiles, we do not use it for advertising, and we do not use it to infer characteristics about you. You can ask us to limit our use of it under section 12.

Call recordings capture your voice and, if your camera is on, your image. We do not use recordings to create voiceprints or face geometry, or to identify you.

5. How we use information

• Creating and running your account, and verifying your identity and eligibility.
• Matching you with counterparties and calculating the Fit and Risk scores shown in the app.
• Operating messaging, pitch rooms, NDA gating, and document sharing.
• Recording pitch room calls when both participants agree, transcribing recorded calls, and producing AI call notes for members whose plan includes them.
• Producing AI summaries of financial material and data rooms, once those features are switched on and where you use them.
• Reviewing applications and deciding who is admitted.
• Sending service messages, including verification codes and any notifications you enable.
• Counting, in aggregate, how many conversations lead to closed deals, so we know whether the Service is working.
• Detecting fraud and misuse, keeping the Service secure, and meeting legal obligations.

6. Automated scoring

Fit Score, Risk Signals, the itemized findings behind them, and profile completeness are produced automatically from information members submit. Feed order is computed separately, from those scores together with a profile quality measure, how recently a member was active, their stated timeline, and any paid visibility boost in effect.

These scores do not decide anything on their own. They do not approve or reject applications, they do not block anyone from contacting you, and they do not produce legal effects. Every score in the app is explained, and you can see the factors behind it. If you believe a score rests on information about you that is wrong, correct the underlying field in your profile or contact us and we will look at it.

7. Service providers

We share personal information with the providers that run parts of the Service. Each is bound to use it only for the purpose we engaged them for.

Provider	What it handles
Supabase	Database, authentication, file storage, backend functions
Google	Sign in with Google, where you choose it
Apple	Sign in with Apple, and App Store or TestFlight distribution
Twilio	SMS delivery for phone verification
RevenueCat	Subscription and membership status
Daily	Video and audio calls, call recording and storage, and transcription of recorded calls (transcription performed by Deepgram)
Anthropic, OpenAI, xAI	AI processing for financial review, data room summaries and pitch room call notes (call notes use Anthropic only)
Formspree	Delivery of access requests submitted on this website
Expo	Application builds, updates, push notification delivery

We may also disclose information where the law requires it, in response to valid legal process, or to protect the rights, safety, and property of Safqos, our members, or the public. Where a business transfer such as a merger or acquisition occurs, information may pass to the acquirer under this policy.

8. AI processing, call recordings and call notes

Your documents

These features are not switched on for member documents during the TestFlight beta. When they are, the financial review and data room summary send the relevant documents to a third-party AI provider so a summary can be produced. Those documents can contain your financial statements and other confidential material.

If you would rather no document of yours be processed this way, do not use those features. The rest of the Service works without them.

Pitch room recordings and AI call notes

Consent, every call. Before joining a call that can be recorded, each person is asked. The call is recorded only if both agree, and once both have agreed the recording runs for the rest of that call. A red REC indicator shows while recording is on.

Who can access a recording. Access depends on each participant's plan. Some plans include recordings, some can unlock a recording within 24 hours of the call, and some do not include recordings. Only the two people on the call can ever have access.

Transcripts and AI call notes. After a recorded call ends, the recording is transcribed by our calling provider, Daily, which uses its transcription provider, Deepgram. Anthropic's AI model then writes short notes of what was discussed: an overview, topics, commitments, open questions and next steps. The notes only record what was said. They do not evaluate the company, the deal or either person, and they are not investment advice. They are produced automatically and can contain mistakes.

If you close your account. A recording or call notes that the other participant kept remain available to them until they are deleted on the normal schedule in section 10, because the call is their record too.

9. We do not sell or share your personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by California law. We have not done so in the preceding twelve months. We do not run advertising on the Service.

Disclosure to other members happens because you chose to participate in a marketplace, and disclosure to the providers in section 7 happens so the Service can function. Neither is a sale.

10. How long we keep information

Category	Retention
Account and profile	While your account is active, then deleted or de-identified on closure
Uploaded documents and data rooms	[RETENTION: DOCUMENTS] after you delete them or close your account
Messages and pitch room records	[RETENTION: MESSAGES]
Pitch room call recordings	Deleted 24 hours after the call, unless a participant whose plan includes recordings keeps it; kept recordings are deleted 180 days after the call
Call transcripts	Deleted when the call's last recording is deleted
AI call notes	Deleted 180 days after the call
Recording consent answers	Kept with the pitch room record, as evidence that both people agreed
NDA acceptance records	Kept for the life of the NDA plus any limitation period, since they evidence a contract
Access requests from this website	Until the application is decided, then up to 24 months

We keep information longer where we need it to meet legal, accounting, tax, or dispute-resolution obligations, and only for as long as that reason applies.

11. Your rights

• Access and correction. Most of your profile is editable in the app. Ask us for anything you cannot reach.
• Deletion. Ask us to delete your account and associated data.
• Portability. Ask for a copy of the information you gave us, in a portable format.
• Visibility. Control your SafPass visibility and what you place behind NDA gating.
• Permissions. Withdraw location, camera, photo, or notification access in your device settings at any time.
• Communications. Opt out of non-essential messages.

Email [email protected] to exercise any of these. We will verify who you are before we act, which usually means confirming control of the email address on the account. We do not charge for this and we do not treat you differently for asking.

12. California residents

If you live in California you may request the categories and specific pieces of personal information we hold about you, the categories of sources, our purposes, and the categories of third parties we disclose to. You may request deletion or correction. You may limit our use of sensitive personal information. You may not be discriminated against for exercising any of these rights.

An authorised agent may act for you with written permission and proof of identity. We honour the Global Privacy Control signal on this website.

13. UK and EEA residents

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases. Contract, for creating your account and providing the Service you asked for. Legitimate interests, for security, fraud prevention, and improving the Service, balanced against your rights. Legal obligation, where a law requires us to keep or produce information. Consent, for device permissions such as location and for optional features, which you can withdraw at any time.

You have the right to object to processing based on legitimate interests, to restrict processing, and to complain to your supervisory authority. In the UK that is the Information Commissioner's Office.

14. Security

Traffic between the app and our servers is encrypted in transit, and data held by our hosting provider is encrypted at rest. Conversations stay inside the platform and sensitive files sit behind NDA gating. Access to member data inside Safqos is limited to people who need it to do their jobs. We do not currently offer end-to-end encrypted messaging, and you should not treat a thread as inaccessible to us.

No system is perfectly secure and we do not claim otherwise. If a breach affects your personal information, we will notify you and any regulator where the law requires it.

15. International transfers

Our providers may process information outside the country you live in, including in the United States. Where transfers out of the UK or EEA occur, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission's standard contractual clauses.

16. Cookies and the website

The safqos.com website uses only what it needs to function. It loads a web font from Google Fonts, which means Google receives the request. The access request form posts to Formspree, which receives what you type into it. We do not run advertising cookies or cross-site tracking on this website.

17. Age

The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. Tell us if you believe a minor has given us information and we will delete it.

18. Changes

We may update this policy. Where a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect, and we will update the date at the top of this page.

19. Contact

Safqos Corp., [REGISTERED ADDRESS].

Questions about this policy, or about your data: [email protected].

Terms of Service · FAQ