Privacy Policy
Last updated: March 2026
Who we are
AI VC Reviewer is operated by Tito Engineering Ltd, registered in Israel (ח.פ 514205004). We help startup founders prepare for investor meetings by simulating an AI-powered investment committee review. We take the confidentiality of your business information seriously and are committed to being transparent about how we handle your data.
What data we collect
Account data: Your email address, used for authentication and service communications.
Startup profile data: Company name, stage, country, sector, funding details, traction metrics, and financial data you enter into the platform.
Pitch deck: The PDF file you upload. Stored securely and used solely to generate your review.
Review conversations: The transcript of your AI review session, stored to generate your IC Report.
Payment data: Payment is processed by Paddle. We do not store your card details. We retain transaction IDs and plan status to manage your account entitlements.
Usage data: Plan type, number of reviews, feedback ratings, and session metadata used to improve the service.
Waiting list data: If you join our waiting list, we collect your email address solely to notify you when access is available. This data is not used for marketing and is deleted once you register or request removal.
Shared reports: If you choose to share an IC Report, a read-only version becomes accessible to anyone with the link. You control this and can revoke access at any time.
Third-party services we use
Supabase
Secure data storage and user authentication. Data encrypted at rest (AES-256) and in transit (TLS). SOC 2 Type 2 compliant.
supabase.com/privacyAnthropic (Claude API)
Your pitch deck content and review conversations are processed by Anthropic's Claude API to generate questions, analysis, and reports. Anthropic does not use API data to train its models and does not retain your data beyond the API request.
anthropic.com/privacyLlamaParse (LlamaIndex)
Your PDF pitch deck is sent to LlamaParse for text extraction. The file is processed and returned as structured text. Please review their privacy policy for details.
llamaindex.ai/privacySerper (Web Search)
We use Serper to perform web research about your company, team, market, and competitors as part of the due diligence process. Your company name and technology description are sent as search queries returning publicly available information. Serper does not retain your data beyond the request.
serper.dev/privacyPaddle
Payment processing for paid plans. Paddle acts as the merchant of record and handles all payment data, invoicing, and tax compliance. We do not store your card details. Paddle is PCI DSS compliant.
paddle.com/legal/privacyResend
We use Resend to send transactional emails such as research completion notifications. Your email address is passed to Resend solely for the purpose of delivering these notifications.
resend.com/privacyPostHog
We use PostHog for product analytics. PostHog collects anonymised usage events (e.g. page views, feature usage) to help us understand how founders use the platform and improve the experience. No personally identifiable business data (pitch decks, conversations, reports) is sent to PostHog.
posthog.com/privacyVercel
Our application is hosted on Vercel. Vercel processes requests to serve the application but does not store your business data.
vercel.com/legal/privacy-policyHow we protect your data
- All data is encrypted at rest (AES-256) and in transit (TLS)
- Access controls ensure only you can access your own startup data
- Pitch deck files are stored in private, non-public storage buckets
- Shared report links expose only the report content you have explicitly chosen to share
- We do not sell, rent, or share your data with any third parties beyond the services listed above
- We do not use your pitch deck or business data for any purpose other than generating your review
Your rights
You have the right to:
- Access all data we hold about you
- Delete your account and all associated data at any time - available directly from your dashboard
- Export your data upon request
- Correct any inaccurate data
- Revoke any shared report links at any time from your report page
- Opt out of transactional email notifications by contacting us
Data retention
We retain your data for as long as your account is active. When you delete a startup profile, all associated data including the pitch deck, parsed content, conversation history, and report is permanently deleted. When you delete your account, all data is permanently and immediately removed.
Contact
If you have any questions about this privacy policy or how we handle your data, contact us at our contact form. We take privacy concerns seriously and typically respond within 1-2 business days.