Privacy policy

1. Data we collect

• Account data: name, email, language and account type (investor, developer, partner or team).
• Investor profile: ticket range, whether you state you are an accredited investor, experience, interests, country of residence and the services you ask about.
• Developer data: company, project information, stated figures, track record, photos and documents you upload.
• Platform activity: deal room requests, acceptance of the NDA and of these documents (with version and date), questions to sponsors, call requests with developers (with your country of residence, availability and message), ticket reservations you made before and who invited you.
• Payments: if you pay for a membership or an application, Stripe processes your card. We keep only the customer ID, subscription status, amounts, dates and the receipt link; never your card details.
• Data developers upload about their investors: in their CRM, each developer can record or import contacts (name, email, phone, country, stage, tags and notes), each person's investments (project, amount, date and type) and private documents (subscription agreements, K-1s, statements), and publish reports on their projects.
• Security: the data needed for two-step verification, if you turn it on.
• Technical data: session cookies, IP address and technical logs generated by our providers when serving the site, and anonymous visit statistics (pages viewed, country and device type) that use no cookies and do not identify you.

2. Why we use it

• To create and protect your account and let you sign in.
• To review applications and access requests, and verify investor requirements.
• To show you projects, construction updates and your portfolio.
• To send you service emails (sign-in links, approvals and updates).
• To comply with legal obligations, prevent fraud and resolve disputes.
• To improve the platform using aggregated information.

We use your data because it is necessary to provide the service you asked for, for our legitimate interest in running a secure platform, to comply with the law or, where applicable, with your consent.

3. Who we share it with

• Sponsors: if you request access to a deal room or ask a question, that project's sponsor can see your name and your question. If you request a call, with your consent we share your name, your email and the details in the form (phone, country, availability and message) so they can schedule it.
• Developers you connect with: if you accept a developer's invitation, you see the investments, documents and reports they recorded for you, and they see that you accepted. If you request a call or deal room access, you are added to their CRM. Either side can disconnect at any time.
• Our team: Tierval's super administrator can view developers' CRMs in read-only mode, for support, security and compliance. The rest of the team and other developers cannot see them.
• Providers that help us operate: Supabase (database, files and authentication), Vercel (site hosting and anonymous visit statistics), Stripe (payments), our email provider and Anthropic (artificial intelligence tools that help the team review applications and documents; we use them with settings that do not allow that data to be used to train models). They use the data only to provide their service to us.
• Authorities, when required by law, or lawyers and advisers in a dispute.

We do not sell your personal data or use it for third-party advertising.

4. Where it is stored

Our database is hosted in Canada and the site is served from servers in the United States and other countries. If you live elsewhere, your data is transferred to those places with the safeguards our providers offer.

5. How long we keep it

While your account is active and then for as long as needed to meet legal obligations, resolve disputes or keep the record of acceptances (such as the NDA). After that we delete or anonymize it.

6. Security

Each user can only see the data that belongs to them; private documents are delivered through temporary links and the team uses two-step verification. No system is 100% secure; if an incident affects you, we will notify you as required by law.

7. Your rights

Depending on where you live, you can ask to access, correct or delete your data, object to certain uses, restrict its use or receive a copy. Write to privacidad@tierval.com and we will respond within the time required by law. You can also complain to the data protection authority in your country.

8. Cookies

We only use what is essential for the site to work: cookies to keep you signed in, a "lang" cookie that remembers the language you chose for one year, and browser storage to remember the invitation code you arrived with. If you have not chosen a language, we pick it from your browser language and, failing that, from the country your IP address indicates; we do not store that country. We do not use advertising or third-party tracking cookies. If we ever do, we will ask for your permission first.

9. Children

Tierval is not directed to anyone under 18 and we do not knowingly collect their data.

10. Changes and contact

If we change this policy we will publish the new version with its date and, if the change is material, notify you. Questions: privacidad@tierval.com.