Privacy Policy

We collect only what Pouncd needs to work. We don't sell or share your personal information for cross-context behavioral advertising.

What we collect

• Account: name, email, role, a hashed password (never stored in plain text), and your application answers.
• Profile and content: bio, links, pitches, decks, messages, interest requests.
• Instagram (optional): your public handle and the result of our bio-code check.
• Payments: processed by Stripe. We never see or store your full card number.
• Usage: cookie-free page analytics (Vercel Web Analytics) and server logs for security.
• Cookies: one essential session cookie. See the Cookie Policy.

How we use it, and our legal bases

• To provide the service you signed up for (contract).
• To review applications, prevent fraud and abuse, and secure the site (legitimate interests).
• To send account and billing emails (contract). Marketing emails only with your consent, and you can unsubscribe anytime.
• To meet legal obligations (legal obligation).

Who sees it

Approved members see profiles and community posts. Verified investors see pitches. A founder's deck and contact details unlock only after the founder accepts an investor's interest. Service providers process data for us: Vercel (hosting), Supabase (database), Stripe (payments), and our email provider. We disclose data to authorities only when the law requires it.

Retention and security

Data is encrypted in transit, passwords are hashed, and sessions expire after 30 days. We keep data while your account is active and delete it within 30 days of a deletion request, except records we must keep by law (such as billing records).

Your rights

Wherever you live, you can ask to access, correct, download, or delete your data. Email hello@pouncd.co with the subject “Privacy request”. We'll verify it's you and reply within 30 days (45 days for California requests, extendable as the law allows).

California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale or sharing (we do neither), to limit use of sensitive information (we use it only to provide the service), and not to be discriminated against for using these rights. You can use an authorized agent.

EU/UK (GDPR): you also have the right to object, to restrict processing, to data portability, to withdraw consent, and to complain to your local data protection authority. Data is processed in the United States, using standard contractual clauses where required.

Children

Pouncd is for people 18 and older. We don't knowingly collect children's data.

Changes

We'll post updates here and email you about material changes.

Contact

Privacy questions and deletion requests: hello@pouncd.co