Privacy Policy

When you create an account on VCPeer, we collect the following information:

• Account Information: Your email address and name, provided through Google OAuth authentication. We use your email domain to verify your founder status.
• Profile Information: Company name, sector, and other optional profile details you choose to provide.
• User-Generated Content: Reviews, term sheet data, interaction reports, and other content you submit to the platform.
• Usage Data: Pages visited, features used, and interactions with the platform, collected through standard web analytics.
• Cookies: Session cookies for authentication and preference cookies for your settings.

We use the information we collect to:

• Provide, maintain, and improve the VCPeer platform
• Verify your identity as a founder (using your email domain)
• Display anonymous reviews and data to other users
• Send you notifications about activity related to your account (e.g., replies to your reviews)
• Send optional email digests and product updates (which you can opt out of)
• Generate aggregate statistics and peer scores for VC firms
• Prevent fraud, abuse, and violations of our Terms of Service

We do not sell your personal information. We share data only in the following circumstances:

• Anonymous Reviews: Reviews, term sheet data, and interaction reports are displayed publicly but without any identifying information about the reviewer.
• Aggregate Data: We may share aggregate, non-identifying statistics about platform usage and VC performance.
• Service Providers: We use third-party services for hosting, email delivery, and analytics. These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

Protecting reviewer anonymity is fundamental to VCPeer. We implement the following safeguards:

• Reviews are never displayed with any identifying information (name, email, company)
• We do not provide VCs or any third parties with information about who submitted a specific review
• Our database architecture separates user identity from review content through design patterns that minimize traceability
• We will resist any legal request to unmask a reviewer to the fullest extent permitted by law
• Employees and contractors are bound by strict confidentiality agreements regarding user data

We retain your personal information for as long as your account is active. If you delete your account:

• Your personal information (name, email, company) is permanently deleted within 30 days
• Your reviews are anonymized and retained to preserve the integrity of VC peer scores and aggregate data
• API keys are immediately revoked
• Bookmarks, raise tracker data, and other personal workspace data are permanently deleted

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data (subject to our retention policy for anonymized reviews)
• Portability: Export your data in a machine-readable format (available in Settings > Data)
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your personal data for certain purposes

To exercise any of these rights, use the data export and deletion tools in your Settings page, or contact us at [email protected].

VCPeer uses the following types of cookies:

• Essential Cookies: Required for authentication and core platform functionality. These cannot be disabled.
• Preference Cookies: Store your settings and display preferences.
• Analytics Cookies: Help us understand how users interact with the platform. These can be disabled in your browser settings.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest
• Regular security audits and penetration testing
• Access controls and audit logging for internal systems
• API key hashing (we never store your full API key)

If you have questions about this Privacy Policy or our data practices, contact us at:

[email protected]