Privacy Policy
Last updated: April 3, 2025
1. Introduction
This Privacy Policy explains how SendVC ("we", "us", or "our") collects, uses, and shares your personal information when you use our services. We respect your privacy and are committed to protecting your personal data.
Data Controller
The controller responsible for processing your personal data within the meaning of the GDPR is:
Future Webservice
Owner: Farshad Shadjari
c/o Autorenglück #78416
Albert-Einstein-Straße 47
02977 Hoyerswerda, Germany
Email: info@sendvc.app
We have not appointed a Data Protection Officer because we are not legally required to do so under Art. 37 GDPR. For all data protection inquiries, please contact us at the email above.
2. Information We Collect
We collect information that you provide directly to us, including your name, email address, company information, and any information contained in your pitch deck. We also collect certain information automatically when you use our Service, including your IP address and browser information.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis under Art. 6 GDPR:
• Consent (Art. 6(1)(a)) — when you upload your pitch deck for distribution to investors and when you opt in to receive emails.
• Contract performance (Art. 6(1)(b)) — to provide the SendVC service to subscribers and process payments.
• Legal obligation (Art. 6(1)(c)) — to retain billing records as required by §147 AO (German Fiscal Code).
• Legitimate interest (Art. 6(1)(f)) — for fraud prevention, security monitoring, and aggregate analytics to improve the service.
You may withdraw consent at any time with effect for the future.
3. How We Use Your Information
We use your information to provide and improve our Service, process your pitch deck submissions, communicate with you, and comply with legal obligations. Your pitch deck will be shared only with verified investors in our network.
Data Retention
We retain personal data only as long as necessary for the purposes described:
• Pitch decks and outreach metadata: 24 months after the last investor interaction, then deleted.
• User accounts: until you request deletion. After deletion, identifiable data is removed within 30 days, except where retention is legally required.
• Payment and invoicing records: 10 years per §147 AO.
• Analytics data: 14 months (Google Analytics default) before automatic deletion.
• Email logs and bounce data: 12 months.
• Backup copies: rotated out within 90 days of original deletion.
Sub-processors and Third-Party Services
To deliver SendVC, we work with carefully selected processors who handle data on our behalf under Art. 28 GDPR data-processing agreements:
• Vercel Inc. (United States, EU regions) — hosting and edge delivery.
• Stripe Payments Europe Ltd. (Ireland) — payment processing.
• Supabase Inc. (United States, EU regions) — database and authentication.
• Resend / Mailgun — transactional email delivery.
• Anthropic / OpenAI — AI-powered investor matching (pitch deck contents are processed transiently for matching; no training on user data).
• Google LLC (Ireland / United States) — Google Analytics (loaded only after cookie consent).
Transfers to non-EEA recipients (notably United States) are covered by EU Standard Contractual Clauses (SCCs) and supplementary safeguards in line with the Schrems II ruling.
International Data Transfers
SendVC distributes your pitch deck to investors worldwide. By using the service you explicitly consent under Art. 49(1)(a) GDPR to the transfer of your pitch deck and related information to investors located in non-EEA countries that may not provide the same level of data protection as the EU.
For transfers to our sub-processors, we rely on:
• Adequacy decisions of the European Commission where they exist,
• EU Standard Contractual Clauses (SCCs) in all other cases.
You have the right to obtain information about the safeguards in place. Please contact info@sendvc.app.
4. Data Security
We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights as a Data Subject
Under the GDPR you have the following rights regarding your personal data:
• Right of access (Art. 15) — to know what data we hold about you.
• Right to rectification (Art. 16) — to correct inaccurate data.
• Right to erasure / right to be forgotten (Art. 17) — to have your data deleted.
• Right to restriction of processing (Art. 18) — to limit how we process your data.
• Right to data portability (Art. 20) — to receive your data in a portable format.
• Right to object (Art. 21) — to object to processing based on legitimate interest or for direct marketing.
• Right to withdraw consent (Art. 7(3)) — at any time with effect for the future, without affecting the lawfulness of processing before withdrawal.
• Right not to be subject to automated decision-making (Art. 22) — including profiling that produces legal effects.
• Right to lodge a complaint (Art. 77) — with a supervisory authority, in particular the Sächsischer Datenschutz- und Transparenzbeauftragter (Saxon Data Protection Authority), Devrientstraße 5, 01067 Dresden, Germany — https://www.saechsdsb.de.
To exercise any of these rights, contact us at info@sendvc.app. We respond within 30 days.
6. Cookies and Tracking
We use cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and understand where our visitors are coming from. You can control cookies through your browser settings.
7. Contact Us
If you have any questions about this Privacy Policy, please contact us at info@sendvc.app.