SendVC Privacy Policy
Last updated: April 3, 2025
1. Introduction
This Privacy Policy explains how SendVC ("we", "us", or "our") collects, uses, and shares your personal information when you use our services. We respect your privacy and are committed to protecting your personal data.
Data Controller
The controller responsible for processing your personal data within the meaning of the GDPR is:
Future Webservice
Owner: Farshad Shadjari
c/o Autorenglück #78416
Albert-Einstein-Straße 47
02977 Hoyerswerda, Germany
Email: info@sendvc.app
We have not appointed a Data Protection Officer because we are not legally required to do so under Art. 37 GDPR. For all data protection inquiries, please contact us at the email above.
2. Information We Collect
We collect information that you provide directly to us, including your name, email address, company information, and any information contained in your pitch deck. When you download a free resource (lead magnet), we collect your email address, first name, your current fundraising stage, and the marketing attribution (UTM) parameters and IP address associated with your request. We also collect certain information automatically when you use our Service, including your IP address and browser information.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis under Art. 6 GDPR:
• Consent (Art. 6(1)(a)) — when you upload your pitch deck for distribution to investors, when you request a free resource or opt in to receive emails, and when you accept analytics or advertising cookies via our cookie banner.
• Contract performance (Art. 6(1)(b)) — to provide the SendVC service to subscribers and process payments.
• Legal obligation (Art. 6(1)(c)) — to retain billing records as required by §147 AO (German Fiscal Code).
• Legitimate interest (Art. 6(1)(f)) — for fraud prevention, security monitoring, and aggregate analytics to improve the service.
You may withdraw consent at any time with effect for the future.
3. How We Use Your Information
We use your information to provide and improve our Service, process your pitch deck submissions, communicate with you, and comply with legal obligations. Your pitch deck will be shared only with verified investors in our network. When you request a free resource, we use your details to deliver that resource and to send you related product emails; you can withdraw this consent and unsubscribe at any time via the unsubscribe link included in every email.
Information for investors whose data we hold (GDPR Art. 14)
This section is addressed to venture capital firms, angel investors and their representatives, rather than to users of SendVC.
What we hold: business contact details and investment-profile information — firm, role, business email address, stated focus areas, investment stage, location, and publicly reported portfolio companies.
Where it comes from: we did not collect this data from you directly. It is compiled from publicly accessible sources, including firms' own websites and public funding announcements, and is validated and enriched using automated tools.
Why we process it: to match founders to investors whose stated focus and investment history are relevant to them, and to enable those founders to make contact. The lawful basis is our legitimate interest, and the legitimate interests of founders seeking funding, in connecting capital with companies (Art. 6(1)(f) GDPR).
Who sends the outreach: outreach emails are sent by the founder from the founder's own email account. SendVC provides the research, the matching and the tooling; the founder is the sender of the message and decides whether to send it.
Your rights: you may request access to the data we hold about you, ask us to correct or erase it, restrict or object to its processing, and request a copy in portable form. You have an unconditional right to object to processing for direct-marketing purposes, and we will stop and remove you on request. You may also complain to a supervisory authority — for us that is the Saxon Data Protection Commissioner.
How to exercise them: email info@sendvc.app from the address concerned, or naming it. We remove investors on request without asking for a reason, and removal is permanent.
Data Retention
We retain personal data only as long as necessary for the purposes described:
• Pitch decks and outreach metadata: 24 months after the last investor interaction, then deleted.
• User accounts: until you request deletion. After deletion, identifiable data is removed within 30 days, except where retention is legally required.
• Payment and invoicing records: 10 years per §147 AO.
• Analytics data: 14 months (Google Analytics default) before automatic deletion.
• Email logs and bounce data: 12 months.
• Lead-magnet contacts (email, first name, fundraising stage, UTM parameters, IP): retained until you unsubscribe or object, then removed within 30 days.
• Backup copies: rotated out within 90 days of original deletion.
Sub-processors and Third-Party Services
To deliver SendVC, we work with carefully selected processors who handle data on our behalf under Art. 28 GDPR data-processing agreements:
• Vercel Inc. (United States, EU regions) — hosting and edge delivery.
• Stripe Payments Europe Ltd. (Ireland) — payment processing.
• Supabase Inc. (United States, EU regions) — database and authentication.
• Resend / Mailgun — transactional email delivery.
• Brevo (Sendinblue GmbH, Germany) — processing of transactional and marketing email on our behalf, including lead-magnet delivery and related product emails.
• Anthropic / OpenAI — AI-powered investor matching (pitch deck contents are processed transiently for matching; no training on user data).
• Google LLC / Google Ireland Ltd. (Ireland / United States) — Google Analytics 4 (usage analytics) and Google Ads conversion tracking and remarketing, loaded only after cookie consent and governed by Google Consent Mode v2.
Transfers to non-EEA recipients (notably United States) are covered by EU Standard Contractual Clauses (SCCs) and supplementary safeguards in line with the Schrems II ruling.
International Data Transfers
SendVC distributes your pitch deck to investors worldwide. By using the service you explicitly consent under Art. 49(1)(a) GDPR to the transfer of your pitch deck and related information to investors located in non-EEA countries that may not provide the same level of data protection as the EU.
For transfers to our sub-processors, we rely on:
• Adequacy decisions of the European Commission where they exist,
• EU Standard Contractual Clauses (SCCs) in all other cases.
You have the right to obtain information about the safeguards in place. Please contact info@sendvc.app.
4. Data Security
We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights as a Data Subject
Under the GDPR you have the following rights regarding your personal data:
• Right of access (Art. 15) — to know what data we hold about you.
• Right to rectification (Art. 16) — to correct inaccurate data.
• Right to erasure / right to be forgotten (Art. 17) — to have your data deleted.
• Right to restriction of processing (Art. 18) — to limit how we process your data.
• Right to data portability (Art. 20) — to receive your data in a portable format.
• Right to object (Art. 21) — to object to processing based on legitimate interest or for direct marketing.
• Right to withdraw consent (Art. 7(3)) — at any time with effect for the future, without affecting the lawfulness of processing before withdrawal.
• Right not to be subject to automated decision-making (Art. 22) — including profiling that produces legal effects.
• Right to lodge a complaint (Art. 77) — with a supervisory authority, in particular the Sächsischer Datenschutz- und Transparenzbeauftragter (Saxon Data Protection Authority), Devrientstraße 5, 01067 Dresden, Germany — https://www.saechsdsb.de.
To exercise any of these rights, contact us at info@sendvc.app. We respond within 30 days.
6. Cookies and Tracking
We use cookies and similar tracking technologies — including Google Analytics 4 for usage analytics and Google Ads for conversion tracking and remarketing — to improve your browsing experience, analyze site traffic, and understand where our visitors are coming from. These analytics and advertising cookies are governed by Google Consent Mode v2: they are set only after you accept them through our cookie banner, and if you decline they remain denied. You can control cookies through your browser settings and through our Cookie Policy linked below.
7. Contact Us
If you have any questions about this Privacy Policy, please contact us at info@sendvc.app.