Privacy Policy

This Privacy Policy explains how PitchInfra ("PitchInfra", "we", "us", "our"), operated by Paras Labs, collects, uses, and protects personal data when a fund house uses the platform to receive and review applications, and when a founder submits one.

PitchInfra is deal-intake infrastructure: a fund publishes an application form, a founder submits through it (or through an AI agent acting on their behalf), and the platform researches and scores the submission against the fund's own criteria. That shapes what data we handle and why — mostly business information a founder chooses to share about their company, plus the account details of the people reviewing it.

Who this policy covers

Two kinds of people use this platform, and this policy covers both:

• Fund users — people at a fund, incubator, accelerator, or scout agency with a console account, who review and decide on applications.
• Founders — people who submit an application to a fund through the fund's public application page, whether by filling in a form themselves or through an AI assistant acting on their instructions.

What we collect

Account data. When a fund user signs up or is invited, we collect their name, work email, and password (or, if they use Google sign-in, their Google account identifier and avatar). We record when they last used the console so we know whether a reminder email is useful.

Application data. When a founder submits, we collect what the fund's form asks for — typically company name, a one-line description, funding stage, sector, contact email, and free-text answers to whatever questions the fund has configured. A fund may also collect a pitch deck or other file upload; we store that file and reference it from the application record.

Research data. For each submitted application, the platform runs an AI research pass that reads the founder's answers and looks for corroborating public information — funding announcements, company registries, press coverage, and similar public sources — to help the fund verify claims and score the application against their thesis. The output of that research (a memo, a score, cited sources) is stored against the application.

Technical data. Standard web request data — IP address, browser type, and similar — logged for security and to keep the service running, not used to build advertising profiles.

How we use it

• To operate the console: let a fund user sign in, see their applications, and record decisions.
• To research an application: give the fund's chosen AI provider the application content so it can produce a memo and a score.
• To send the emails a user has not opted out of: a welcome email, a weekly summary of what's waiting, or an occasional nudge — never sold or used for advertising.
• To bill a fund for its subscription, based on usage of the platform.
• To keep the platform secure, investigate abuse, and meet our legal obligations.

Who we share it with

We do not sell personal data. We share it only with the service providers that make the platform work, and only for that purpose:

• AI providers (such as Anthropic), to research and score an application. A fund may also connect its own API key, in which case that provider processes the data under the fund's own account, not ours.
• Email delivery (Google Workspace), to send account and application emails.
• Cloud hosting, to run the application and store uploaded files.
• Payment processing, once a fund is on a paid plan, to handle billing.
• Authorities, where disclosure is required by law.

How long we keep it

We keep application and account data for as long as the fund's workspace is active, so decisions stay auditable and research is not repeated needlessly. A fund can request deletion of a specific application or its entire workspace; we delete the underlying records and any uploaded files within a reasonable period after a verified request, except where we are required to retain something for tax, accounting, or legal reasons.

Security

Each customer's data is logically isolated from every other customer's within the platform, access to production systems is restricted to the people who operate them, and data in transit is encrypted. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security, but we treat a breach seriously and will notify affected fund houses without undue delay if one occurs.

Your rights

Depending on where you are, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. A founder can ask the fund they applied to, or write to us directly, to exercise these rights over an application; a fund user can update their own account from their profile settings or contact us for anything the console does not expose directly.

Write to hello@pitchinfra.com to make a request. We will verify who you are before acting on it.

International transfers

PitchInfra and the service providers listed above may process data outside the country a fund or founder is located in. Where that involves transferring personal data out of the European Economic Area, the United Kingdom, or other jurisdictions with similar requirements, we rely on appropriate safeguards such as standard contractual clauses.

Children's privacy

This platform is built for people running or applying to investment funds and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy as the platform changes. We will post the revised version here with a new "last updated" date, and where a change is material, we will tell fund users by email.