Privacy Policy

1. Personal data we collect

• Account data: your name and email address (from Google sign-in or email OTP), and a unique account identifier.
• Usage data: your credit balance and history, which contacts you unlock, purchases, support and contact-sourcing requests you submit, and basic technical logs (IP address, device/browser type, timestamps) needed to operate and secure the Service.
• Payment data: processed directly by Razorpay. We receive confirmation of payment (order/payment IDs, status, amount) but do not collect or store your full card, UPI, or bank details.
• Cookies: strictly necessary cookies for authentication and session security (see Section 9).

2. Investor contact information

The Service contains business contact details (name, firm, investment stage/sector, and a professional email) of angel investors and VCs, compiled for founders’ legitimate fundraising outreach. We process this on the basis of legitimate use for the stated purpose and, where required, consent. Listed investors may request correction or removal at any time (see Section 7).

3. How we use data

• To provide the Service — authenticate you, run the credit system, and deliver unlocked contacts.
• To process payments and maintain your purchase and credit history.
• To respond to your support messages and contact-sourcing requests.
• To secure the Service, prevent fraud/abuse, and enforce our Terms.
• To comply with legal obligations.

We do not sell your personal account data, and we do not use it for advertising profiling.

4. Legal basis & consent

Under the DPDP Act we process your personal data on the basis of the consent you provide when creating an account and using the Service, and for certain legitimate uses permitted by law (such as security and fraud prevention). You may withdraw consent at any time (see Section 6); withdrawing consent may prevent us from providing the Service.

5. Sharing & data processors

We share personal data only with processors who help us run the Service, under confidentiality obligations:

• Supabase — database, authentication, and hosting infrastructure.
• Razorpay — payment processing.
• Google — sign-in (OAuth) when you choose it.
• Calendly — scheduling the optional pitch-deck review.
• Vercel — application hosting and delivery.

We may also disclose data where required by law or to protect our rights. We do not otherwise sell or rent your personal data.

6. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we process about you.
• Correction & erasure — correct inaccurate data or request deletion of your data.
• Withdraw consent — as easily as you gave it.
• Grievance redressal — raise a complaint with our Grievance Officer (Section 10).
• Nomination — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, email hello@raiselist.in. We will respond within the timelines required by law.

7. Rights of listed investors

If you are an investor listed in our database and wish to access, correct, or be removed from it, email hello@raiselist.in and we will action your request promptly and, where applicable, cease displaying your contact information.

8. Data retention & security

We retain your personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements; thereafter we delete or anonymise it. We use industry-standard safeguards — encryption in transit, row-level access controls, and restricted administrative access — to protect personal data, though no method of transmission or storage is completely secure.

9. Cookies

We use strictly necessary cookies to keep you signed in and to protect your session. We do not use third-party advertising or cross-site tracking cookies. You can clear cookies in your browser, but doing so will sign you out.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly process the personal data of children. If you believe a minor has provided us data, contact us and we will delete it.

11. International transfers

Our processors may store or process data on servers located outside India. Where they do, we rely on those providers’ safeguards and process such transfers in accordance with applicable law.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via the Service or email, and the “Last updated” date above will change.

13. Grievance Officer & contact

In accordance with the DPDP Act and the Information Technology Act, 2000, you may contact our Grievance Officer for any data-protection concern:

Grievance Officer: [Grievance Officer Name]
Email: hello@raiselist.in
Entity: [Legal Entity Name], [Registered Address]