This Privacy Policy explains how Investor Insight ("Investor Insight," "we," "us," or "our") collects, uses, and discloses information in connection with the Investor Insight web application at https://investorinsight.app (the "Service"). It is written in plain English wherever possible. It should be read alongside the agreement your fund has with us, since that agreement may contain additional or more specific terms that govern in the event of any conflict.
Investor Insight is operated by IA Global Ventures, based in Austin, Texas [bracketed note: confirm exact registered entity name and entity type (e.g., LLC, Inc., etc.) for use here and throughout this Policy].
Investor Insight is a business-to-business (B2B) product built for venture capital funds. There is no general public sign-up — every user is invited and provisioned by a customer fund, which controls who gets access. Three types of individuals use the Service:
Because all access is invitation-based and controlled by the customer fund, this Policy should be read together with Section 2 below, which explains the different roles we play depending on the type of data involved.
Investor Insight sits between funds, their investors, and their portfolio companies, so we play two different roles depending on the type of information involved. We think this is important enough to explain plainly, rather than leave it buried in definitions.
(a) Account, registration, and usage data. For information about your Investor Insight account — such as your name, email address, role, login credentials, and how you use the Service — Investor Insight decides how that information is handled. This is similar to what privacy laws call a "controller" role, and this Policy describes our practices for that data directly.
(b) Fund portfolio data. For the data that funds and founders put into the Service to run the fund's business — company financials, founder updates, cap-table and ownership information, investment terms, and data pulled in from connected integrations — the customer fund is in control of that data. That is similar to what privacy laws call a "controller" role for the fund, and Investor Insight processes that data only on the fund's behalf, to provide the Service, similar to what privacy laws call a "processor" role. We handle this data under our contract with the fund and according to the fund's instructions, not on our own initiative, and we do not use it for our own independent purposes.
What this means in practice. If you are a founder, LP, or other individual whose personal information appears within a fund's portfolio data — for example, information about you or your company that was submitted to a fund through the Service — the fund is the right party to contact about that data, including for requests to access, correct, or delete it. Investor Insight will assist the fund in responding to such requests, but because the fund controls that data, we will generally direct individual requests to the relevant fund rather than act on them ourselves.
If your question instead concerns your own Investor Insight account, login, or how we (rather than a fund) handle your information, you are welcome to contact us directly using Section 14.
We collect the following categories of information:
We do not use third-party advertising trackers on the Service, we do not sell personal information, and we do not use customer or portfolio data for advertising purposes. See Section 7 for more detail.
We use the information described in Section 3 to:
We do not use account data or portfolio data to build advertising profiles, and we do not repurpose one fund's data for the benefit of another fund or for our own unrelated commercial purposes.
Certain Investor Insight features use artificial intelligence to help generate report narratives and summaries. To provide these features, fund-authorized content is sent to Anthropic for processing. A fund may supply its own Anthropic API key for this purpose. All use of AI features is logged for audit purposes, so a fund can review what content was sent and when.
Customer data is not used by IA Global Ventures to train AI models. [Bracketed note: confirm the provider-side data-retention and model-training terms that actually apply under our specific Anthropic agreement tier, and align this section with those confirmed terms before publication.]
We share information with the service providers ("subprocessors") listed in the table below, each of which helps us operate part of the Service. These providers are contractually authorized to use information only as needed to provide their services to us — not for their own independent purposes.
| Service Provider | Purpose | Notes |
|---|---|---|
| Supabase | Database hosting, authentication, and file storage | Hosted in the United States |
| Vercel | Application hosting for the Investor Insight web app | |
| Resend | Transactional email delivery (notifications, invitations, requests) | |
| Anthropic | AI processing to generate report narratives/summaries | Used only when AI-assisted features are used; a fund may supply its own API key |
| Intuit QuickBooks | Accounting-data integration | Only active when a fund connects its QuickBooks account via OAuth |
| Carta, HubSpot, Xero, Plaid (future) | Potential future integrations (cap table, CRM, accounting, banking data) | Not yet active as of this draft; each would only be activated by a fund's explicit OAuth authorization |
This list reflects our subprocessors as of the date of this Policy and will be updated as we add or change integrations and service providers. [Attorney note: consider whether we should commit to advance notice to customer funds before adding a new subprocessor — see Open Items.]
We may also disclose information: (a) where required by law, regulation, or legal process; (b) to protect the rights, safety, or property of Investor Insight, our users, or others; or (c) in connection with a merger, financing, acquisition, or sale of company assets, in which case we would expect any successor to remain bound by commitments consistent with this Policy.
To state this plainly: we do not sell personal information, we do not use third-party advertising trackers on the Service, and we do not use customer or portfolio data for advertising purposes. Information submitted to Investor Insight is used to provide the Service to the fund that submitted it — not to build advertising profiles, not to market to third parties, and not to be sold or rented to data brokers.
We maintain the following technical and organizational measures:
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. This section describes the technical and organizational measures we currently have in place; it is not a certification of compliance with any particular third-party framework or standard, and no such certification (for example, SOC 2 or ISO 27001) or formal third-party penetration test is claimed by this Policy.
We retain information as follows:
Investor Insight is a B2B product. Most of the personal information we hold directly (as distinct from portfolio data controlled by a fund — see Section 2) relates to individuals using the Service on behalf of a business, such as a fund, an LP entity, or a portfolio company. The jurisdiction-specific summaries below are included for completeness. [Attorney note: please evaluate the extent to which CCPA/CPRA and TDPSA actually apply to this B2B data set, including any available business-to-business or employee/representative-type exemptions, and revise this section accordingly.]
California residents have the right to: know what personal information we collect about them; access and obtain a copy of that information; request deletion; request correction of inaccurate information; opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under the CCPA); limit the use of sensitive personal information; and not be discriminated against for exercising these rights. Requests may be submitted using the contact information in Section 14.
Texas residents have the right to: confirm whether we are processing their personal data; access, correct, and delete their personal data; obtain a portable copy of their data; and opt out of processing for purposes of targeted advertising, sale, or certain profiling (Investor Insight does not engage in these practices). Requests may be submitted using the contact information in Section 14.
Investor Insight does not have an establishment in the European Union or United Kingdom. To the extent Investor Insight processes personal data of individuals located in the EEA or UK, we intend to honor rights similar to those under the GDPR / UK GDPR, including rights of access, rectification, erasure, restriction of processing, data portability, and objection, as applicable. [Bracketed note: confirm the cross-border transfer mechanism (for example, Standard Contractual Clauses) to be used if and when EU or UK-based customers sign, and add the specific mechanism here.]
For all of the above, remember Section 2: if your request concerns portfolio data submitted to a fund, we will generally direct you to that fund and will assist the fund in responding, rather than act on the request ourselves.
The Service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child in a manner inconsistent with this Policy, we will take steps to delete it.
The Service uses session cookies that are strictly necessary to authenticate you and keep you logged in while you use the Service. We do not use third-party advertising or tracking cookies. [Attorney note: confirm this disclosure is complete given the actual cookies set by our platform and infrastructure providers (e.g., Supabase, Vercel), and confirm whether a cookie banner or additional consent mechanism is required — see Open Items.]
We may update this Policy from time to time to reflect changes in our practices, our Service, or applicable law. If we make a material change, we will provide notice before it takes effect — for example, by emailing account holders or posting a notice within the Service. The "Effective Date" at the top of this Policy reflects when it was last revised.
If you have questions about this Policy, or wish to exercise a privacy right described above with respect to your own account or usage data, contact us at ben@iaglobal.vc.
If your question concerns portfolio data submitted to a specific fund — such as company financials or founder updates controlled by that fund — please contact that fund directly. We are available to assist the fund in responding to your request.
Questions? Contact ben@iaglobal.vc