Privacy Policy

This Privacy Policy explains how Seedscope, Inc. ("SeedScope", "we", "us") collects, uses, shares and protects personal data when you use our website at www.seedscope.ai, the SeedScope web application at app.seedscope.ai, which you reach from it through "Log in" or "Get started", and the emails and services connected to them (together, the "Services"). The website and the application handle data differently; where that matters, this policy says which one it means.

SeedScope is a platform where startup founders assess their companies and investors discover startups. Founders and investors share information with each other through the platform, so this policy also explains who else can see what you share (Section 5).

Who we are. Seedscope, Inc., a Delaware corporation, 1111B S Governors Ave #44871, Dover, DE 19904, United States, is the controller of your personal data. Contact: info@seedscope.ai.

1. Summary

• We collect what you give us (your account, your startup or investment focus, your documents and videos, your messages), what we need to run the Services (sign-in records, how you use the app), and limited data about investors from public and third-party sources.

• We use it to provide the Services: assessments, valuations, reports, matching between founders and investors, and the emails you ask for.

• Founders’ startup information is shown to investors on the platform according to fixed visibility rules and the founder’s own settings. Investors’ names are shown to founders in limited cases.

• AI models process your content to produce assessments, reports and answers. We send it to model providers under contract; we do not sell personal data.

• The web application uses no advertising or analytics cookies. Our website (www.seedscope.ai) uses analytics and advertising tools from Google, Contentsquare, Meta and LinkedIn (Section 7).

• You can access, correct, export and delete your data, and opt out of non-essential emails.

2. Information we collect

2.1 Information you give us

Account information (everyone). Name, email address, your role (founder or investor), the version and time of the Terms and Privacy Policy you accepted, and your email preferences. There is no password: when you sign in with your email address we send a one-time code to it and keep only a one-way hash of the code until it is used or expires (ten minutes); expired codes are deleted. If you sign in with Google or LinkedIn, we receive your name, email address and profile picture from that provider, and the sign-in tokens it issues. If you start with Google or LinkedIn but do not finish creating your account (choosing your role and accepting our Terms), we delete what we received within 24 hours. Administrators also register an authenticator app; its secret and backup codes are stored encrypted.

Founders.

• Startup details: company name, website, description, logo, time zone, and an optional note about the team.

• Optional contact details: mobile number and links to your X, LinkedIn and Instagram profiles.

• Your personal LinkedIn profile address, which the assessment asks for; you can answer that you are not on LinkedIn.

• Assessment answers: answers about your company, market, traction, finances, team (including the founders’ education and experience and whether at least one founder is a woman), and funding, including how you plan to use the money you raise.

• Documents you upload for an assessment (for example a pitch deck or business plan). We extract their text to use in your assessment.

• Pitch decks you create with our deck generator.

• Materials you share with investors: documents, links to videos on YouTube, Vimeo or Loom, and videos you upload or record in your browser. A recorded video contains your image and voice, and may contain your screen if you share it.

• Investor updates and news you post.

• Messages you write in the assessment chat and in update chats.

• Co-investment rounds you set up, and the commitments you record (investor name, company, location, investor type and amount).

• Fundraising contacts you add yourself in Boost, and your notes, meetings and offers with them.

Investors.

• Firm details: firm name, investor type (angel, venture capital or family business), website, LinkedIn page, and whether founders may see your firm’s name.

• Investment focus: sectors, markets, stages, notes, and websites you give us, and what we derive from them (Section 3.2).

• Your activity on startups: watchlist and notes, saved searches, feedback on matches (including any reasons you write), portfolio entries (share and entry valuation), startups you unlock, and interest in co-investment rounds.

• Deal flow: information and documents you upload about companies you are evaluating. You are responsible for having the right to share it (see our Terms of Service).

Invitations. When a founder invites a co-founder, or an investor invites a colleague, we store the invitee’s email address and role so the invitation can be accepted.

Payments. When you buy a plan or a report, our payment processors collect your payment details (Section 6). We do not receive or store full card numbers. We keep the record of each payment and subscription, including the identifiers and details the processor returns to us, such as your billing name, billing address and, if you give one, tax ID.

Messages to us. If you write to us, or use the contact form on our website (name, email, company and message), we keep your message and our reply.

2.2 Information collected automatically

• Sign-in and security records: the IP address and browser type of each signed-in session, and security events such as failed sign-ins or locked accounts.

• Usage records in the app: which pages and sections you open, how long an investor keeps a startup’s page open (measured in 5-second steps, at most 30 minutes per visit), which startups and matches were shown to you, the actions you take (for example adding to a watchlist, unlocking a startup, starting a checkout), and which links in our emails you click. These records do not include your IP address, what you type, or the search terms you use.

• How you found us: the referring website and campaign tags of your first visit.

• Email records: which emails we sent you, when, and whether they were delivered, bounced or reported as spam (Section 8).

• Technical logs: our servers record requests (including IP addresses) for security and troubleshooting. Secrets in web addresses, such as invitation links, are removed before they are written.

• On our website: the analytics and advertising tools described in Section 7 collect information about your visit, such as pages viewed, clicks, scrolling, device and approximate location, and Contentsquare records how you move through our pages (mouse movements, clicks and scrolling).

2.3 Information about investors we did not collect from them

To help founders find suitable investors, SeedScope maintains a directory of investors and investment firms. It contains firm names, websites, stated investment focus, and for some firms the names, job titles and work email addresses of people who work there. We obtained this information from public sources (for example firm websites and public investor directories) and from third-party data providers, and we enrich firm profiles by reading the firm’s public website. We process this information on the basis of our legitimate interest in helping founders reach professional investors: it is business contact information, it is used only for professional contact between founders and investors, and it is never sold. This section is our notice to the people in the directory; we publish it here because informing each person individually would involve disproportionate effort. If you are in this directory and want to be removed or corrected, write to info@seedscope.ai; we remove you and keep only what we need to make sure you are not added again.

2.4 If you used SeedScope before 3 November 2026

On 3 November 2026 SeedScope moved to a new platform. If you had an account on the previous platform, we moved your account and the data you had given us (for example your startup’s profile, assessments, reports, decks, investment focus, portfolio and co-investment records) to the new platform so that you can keep using them; this policy applies to that data. We did not move passwords. The previous platform, which ran on Bubble and PythonAnywhere and used Amplitude for usage analytics, stays available read-only until 3 December 2026; it is then shut down, and the data on it, including its usage data in Amplitude, is deleted.

3. How we use your information

3.1 Purposes and legal bases

3.2 AI processing

SeedScope uses AI models to:

• run the assessment chat and read the documents you upload;

• score your answers, estimate valuation and exit likelihood, and write analyses, reports and decks;

• read an investor’s notes and website to understand their investment focus;

• draft first emails to investors for founders (the draft uses the contact’s name, title and firm, never their email address);

• read your investor updates to suggest news worth sharing;

• search the public web for recent news about your startup’s market and competitors (the search uses your startup’s name, sector, location and description, not personal details);

• help our team investigate outages and errors: a model reads extracts of our server logs, from which email addresses and secrets are removed (they may still contain IP addresses).

To do this, the relevant content is sent to AI model providers (Section 6). We do not use your content to train our own models. We use the Anthropic Claude API under Anthropic’s business terms, under which Anthropic does not use our requests to train its models. Requests we send through OpenRouter are handled under the data policies of OpenRouter and of the model provider that serves them.

3.3 Automated assessments and matching

Your assessment scores, valuation estimates, match lists and “Fit” percentages are produced automatically. They are informational: they do not decide whether you can use the Services and they have no legal effect on you. Investors may use them when deciding which startups to look at. You can ask us how a result was produced, contest it, or ask for a person to review it by writing to info@seedscope.ai. We consider that these results do not have legal or similarly significant effects on you within the meaning of GDPR Article 22 and KVKK Article 11; if you disagree, you have the rights described above and in Section 13.

4. Information we do not want

Please do not upload special categories of personal data (for example health data) or personal data of other people that you have no right to share. Do not use SeedScope if you are under 18.

5. Who can see what you share on the platform

Founders → investors.

• Investors who have not unlocked your startup see its basic profile, overall score and trend.

• An investor who unlocks your startup (using a credit) sees your assessment report and scored answers, the materials and updates you shared, your note about the team, the founders’ LinkedIn profiles, how you plan to use the money you raise, and the deck you chose to show. Investors on the free plan do not see SeedScope’s valuation or exit figures.

• You can hide your startup from search and matching at any time. Investor firms that already unlocked it keep access to what they unlocked.

Investors → founders.

• Founders on a paid plan see the names of investor firms that viewed, unlocked or watch-listed their startup. An angel investor is shown by their own name. Paid investor plans can hide their firm’s name, in which case founders see “An investor”.

• Founders on the free plan see no investor names.

Weekly match emails. Each week we may suggest one startup to an investor firm by email. If that startup is on a paid founder plan and the firm does not hide its name from founders, the email to the firm’s owner (or its first member) is also sent to the startup’s founders in copy, so the investor and the founders see each other’s email addresses and can reply to each other directly. Founders can stop these copies by turning off notification emails in their settings; investors by turning off match emails.

Within a team. Co-founders of the same startup (up to five) see everything about that startup. Colleagues in the same investor firm share the firm’s preferences, unlocked startups, deal flow and portfolio; each person’s watchlist stays personal.

Deal flow. Companies an investor uploads as deal flow are visible only to that investor’s firm and to SeedScope administrators. They are not matched or shown to anyone else, and we never email those companies.

SeedScope staff. Authorized administrators can view accounts, including conversations and the email log, to provide support, investigate problems and prevent abuse. Administrators sign in with an authenticator app, can only view (not change) an account while viewing it as the user, and every such view is logged.

6. Service providers and other recipients

We share personal data with service providers who process it for us under contract. We do not sell personal data and we do not share it for cross-context behavioural advertising.

We may also disclose information: to comply with law, a court order or a lawful request by public authorities; to protect the rights, property or safety of SeedScope, our users or others; or to a buyer or successor if SeedScope is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply.

When SeedScope reads public websites (to find a startup’s logo, or to understand an investor’s focus), our requests identify themselves as “SeedScopeAIBot”.

7. Cookies and similar technologies

Web application (app.seedscope.ai). We use only what is needed to run it:

• a session cookie that keeps you signed in;

• browser storage for your interface choices, for invitation links you open, and for how you first found us;

• security cookies that Cloudflare may set to tell people from automated traffic.

We do not use analytics, advertising or social media cookies in the application.

Website (www.seedscope.ai). Our website uses:

• Google Analytics (through Google Tag Manager) to count and understand visits;

• Google Ads to measure our advertising and to show our ads to people who visited our website;

• Contentsquare to see how visitors use our pages, through heatmaps and recordings of mouse movements, clicks and scrolling (not what you type in forms);

• the Meta Pixel and the LinkedIn Insight Tag to measure our advertising on those networks and to show our ads to people who visited our website;

• Google Fonts, which shares your IP address with Google when the fonts load.

Our website shows a cookie banner on your first visit, where you can accept or decline these cookies. You can also refuse or delete these cookies in your browser, use Google’s opt-out add-on, and manage ad preferences in your Meta and LinkedIn settings.

We do not respond to Do-Not-Track signals.

8. Emails and your choices

• Emails you need (sign-in codes, invitations, receipts, security and account notices) are part of the Services and cannot be turned off.

• Emails about your account that you can turn off (the weekly digest, weekly match emails, Boost reminders) start when you create your account; turn them off in your settings or with the unsubscribe link in each email.

• Product and plan news is sent only if you tick that box at sign-up or turn it on in your settings; turn it off the same way.

• We record which emails we send you and their content, so we can show what we sent and handle complaints. Secret codes and links are not stored. We keep these records for 24 months.

• If an email bounces or you mark it as spam, we stop sending optional emails to that address.

9. How long we keep information

10. Deleting your account

You can delete your account in your settings. When you do:

• you are signed out everywhere, your startup is hidden from investors, and any paid plan you hold ends;

• for 90 days you can restore the account by signing in again;

• after 90 days the account is closed for good and can no longer be signed into. We then delete your personal data (for example your name, email address, contact details, messages and recorded videos). Your startup’s business data (for example assessment answers, scores and financial figures) is kept only in anonymised form, so that it can no longer be linked to you or your startup, and is used for statistics and benchmarks.

We keep records the law requires us to keep (for example invoices) for the period the law requires, and information other users still legitimately hold (for example a startup you built with co-founders who keep their accounts stays with them).

If you are the last member of an investor firm, the firm leaves founders’ lists and matching when you delete your account, and its data (investment focus, unlocked startups, deal flow, portfolio) is kept for the 90 days in which you can restore the account. After those 90 days the firm’s data is deleted; we keep only aggregated statistics that do not identify the firm or anyone in it. If the firm has other members, its data stays with them.

If we close your account or remove your startup or firm (Terms of Service, Section 12), we tell you by email at that time and you have 30 days to contest it; within those 30 days we can undo it. After the 30 days:

• if we closed it for spam, fake profiles or abuse, we erase its data entirely, business data included, so that it does not distort our statistics. We keep only a one-way code made from the email address (the address cannot be read back from it), to refuse new sign-ups and invitations with the same address;

• for any other reason, the same rules apply as when you delete your account yourself.

In both cases we keep the payment, invoice and tax records the law requires, including for payments made outside the app, without personal details where the law allows.

You can also ask us to delete your personal data sooner, whether or not you have deleted your account, by writing to info@seedscope.ai (Section 13). When we anonymise your startup’s business data, we delete the startup’s name, website, logo, free-text answers, documents, videos and messages, and keep only numerical and multiple-choice answers, scores and valuation figures, without any identifier that links them to you or your startup.

11. How we protect information

• All traffic is encrypted (HTTPS with TLS 1.2 or 1.3).

• Our database runs on a separate server that is closed to the internet and accepts only encrypted connections from our application server.

• Sign-in codes are stored hashed and expire after ten minutes; administrator accounts need a password and an authenticator app; sign-in attempts are rate limited.

• Access between accounts is checked on every request and tested automatically.

• Uploaded files are type-checked and served in a way that prevents them from running code in your browser.

• Secrets in addresses are removed from our logs.

• Our application server accepts web traffic only through Cloudflare.

No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify the competent authority within 72 hours where feasible, and notify you without undue delay if the risk is high.

12. International transfers

Our application, database and monitoring servers are in the European Union. Seedscope, Inc. is based in the United States and several of our providers operate in the United States or other countries (Section 6). When we transfer personal data from the European Economic Area, the United Kingdom, Switzerland or Turkey to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the EU–U.S. Data Privacy Framework where a provider is certified, and, for Turkey, the mechanisms permitted by KVKK Article 9, including the standard contracts published by the Personal Data Protection Board, which we notify to the Board where the law requires.

13. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, KVKK or the California Consumer Privacy Act), you may have the right to:

• access the personal data we hold about you and receive a copy;

• correct it;

• delete it;

• receive it in a portable format;

• object to or restrict our use of it, including for direct marketing;

• withdraw consent at any time where we rely on consent;

• not be subject to a decision based solely on automated processing with legal or similarly significant effects (Section 3.3);

• complain to your data protection authority (in Turkey, the Personal Data Protection Authority).

Most of your data can be viewed and corrected in the app. To exercise any right, write to info@seedscope.ai. We may need to confirm your identity. We respond within the time the law requires (usually one month; 30 days under KVKK). We will not discriminate against you for exercising your rights. California: we do not sell or share personal information as those terms are defined under California law.

14. Children

The Services are for people aged 18 or over. We do not knowingly collect data from children; if we learn that we have, we delete it.

15. Changes to this policy

We will post any changes here with a new version number and date. If a change is material, we will tell you by email or in the app before it takes effect and, where required, ask you to accept the new version when you next sign in.

16. Contact

Seedscope, Inc., 1111B S Governors Ave #44871, Dover, DE 19904, United States — info@seedscope.ai