Legal · Privacy

Privacy Policy.

Last updated · October 23, 2026

This policy explains what personal data Early Capital Group Limited (operating Early Capital AI) collects when you use the Service, how we use it, who we share it with, and the choices you have.

It complements the security page, which describes the technical controls protecting your data.

01Who we are

Early Capital Group Limited, a company incorporated in Hong Kong, is the data controller for personal data processed through Early Capital AI. For any privacy question or request, contact assistant@earlycapitalgroup.com.

02What we collect

  • Account data — your email address, name, and authentication details. When you first sign in we also ask what best describes you (for example angel, fund or founder) and, optionally, your organisation, deal volume, cheque size, sector and stage focus, and how you heard about us. We use these answers to tailor the Service and to contact you about plans that fit; you can change them at any time in Settings. Workspace sign-in uses a password and requires email confirmation. Passwords are stored as hashes; confirmation and password-reset emails are delivered through Resend.
  • Payment data — handled by Stripe. We receive transaction and subscription status, but never your full card number.
  • Uploaded content — the pitch decks and materials you submit for analysis, and the dossiers we generate from them.
  • Usage and metadata — analysis records (target name, sector, status, timestamps); in the workspace, when you sign in and how long you stay (noted about once a minute while a workspace page is open), your approximate location (country, region and city, from our host's geolocation; we don't store your IP address) and your device type, browser and operating system; errors you meet in the workspace; the messages you send us with “Message the team”; and basic technical logs needed to operate and secure the Service. Our team uses these to support you and to improve the Service.
  • Mailing-list data — if you subscribe to our research updates, the email address you provide.
  • Valuation tool data — if you use our free startup valuation calculator or SAFE cap checker: the answers you give (the round's stage, region, sector, size and instrument, the company's traction and team and, for angels, the terms you were offered and the size of your check); your email address, if you ask for your full results or to hear when your region is covered (with the region you asked about); whether you ticked the newsletter box, with the wording you saw; and where your visit came from (the campaign tags in the page's address, the referring website and the page you arrived on). We don't ask for company names. To limit abuse, we keep a salted, one-way hash of your network address for at most 25 hours; we don't store IP addresses.
  • Runway tool data — if you use our free runway calculator or round runway check: the figures you enter (the company's stage and region; its cash, monthly revenue, growth, costs and churn, and any hires, churn change or price change you plan; for angels, the round size, the cash before it, the burn now and once the team is hired, how long the hiring takes, and the runway the deck claims) and the results; and, as for the valuation tools, your email address if you ask for your full results, whether you ticked the newsletter box, and where your visit came from. Hire roles come from a fixed list, and we don't ask for company names.
  • Cap table tool data — if you use our free cap table calculator: the terms you enter (the company's region and sector; how many founders there are and how they split the company, numbered, never named; the option pool today; for each round, whether it's raised or planned and its SAFEs, with their amounts, caps and discounts, or its amount, pre-money valuation and pool target; and, if you add your own check, where it went, its size and whether you'll take your pro-rata) and the results; and, as for the valuation tools, your email address if you ask for your full results, whether you ticked the newsletter box, and where your visit came from. We don't ask for company or founder names. If you change an answer after getting your results, we work it out again without storing it, unless you ask us to email that version.
  • Free red-flag checks — if you ask for a free red-flag check on a deck: the deck, which is saved in your account like any upload, whether you chose investor or founder wording, and the check's result (its verdict, reason and red flags, with the slide numbers and quotes they rest on). To keep to one free check per inbox and per deck file every 30 days, we keep a normalised form of your email address and the deck file's fingerprint (a one-way hash of the file) with each check.
  • Term sheet readings — if you use the term sheet decoder in the workspace: the SAFE, convertible or term sheet you upload or paste, and the label you give it; the terms we read from it, with the sentences and page numbers they came from; the corrections you make, the document type you choose and your answers to the cap check; and, for each reading, its status, the model used, how much model capacity it used and an estimate of what that cost. These documents can name other people, such as founders, investors and signatories: before a reading starts, you confirm that you're allowed to share the document for this review.

03How we use your data

  • to provide the Service — analyzing your decks and delivering dossiers;
  • to read the term sheets you upload, grade their terms against published market data, and give you the result and its PDF;
  • to operate your account, process payments, and enforce plan quotas;
  • to communicate with you about your analyses, account, and support requests;
  • to send research updates if you opted in (you can unsubscribe anytime);
  • to send the valuation, runway or cap table results and PDF you ask for, straight away;
  • to tell you when the valuation tools cover the region you asked about;
  • if you ticked the newsletter box in a valuation, runway or cap table tool: two follow-up emails about your check, two and five days later (at most one pair a month, whichever tool you used), then our newsletter and occasional product emails (every one has an unsubscribe link);
  • when an angel uses the SAFE cap checker or the round runway check, or adds their own check to the cap table calculator, to notify our team with the email address, answers, results and where the visit came from, so we can offer to help with the deal;
  • to publish anonymous, aggregated statistics from the valuation tools, such as the caps angels are offered, where every published figure combines at least 20 entries and none identifies a person or a company;
  • to secure, debug, and improve the Service, and to comply with law.

04AI processing and training

Dossiers are produced by language-model agents. We send your uploaded content to our model and pipeline providers solely to generate your dossier, on an inference-only basis. Neither we nor our providers use your uploaded content to train models.

Term sheets are read by an OpenAI model. To read one, we send the document's text (and, for a PDF, images of its pages) from our processing server in New York (US) to OpenAI, once, through an OpenAI account on which model training is switched off. Our own code then checks the result against the document and grades the terms; no model grades them.

05Who we share it with

We do not sell your personal data. We share it only with the sub-processors needed to run the Service, under contractual confidentiality and data-protection obligations:

  • Stripe — payment processing;
  • Convex — workspace database, uploaded files and the valuation, runway and cap table tools' data, in the Ireland deployment;
  • Convex Auth — password authentication, sessions and email-confirmation management within our Convex backend;
  • Resend — confirmation, password-reset, valuation, runway and cap table results, follow-up and newsletter email delivery, and the lead alerts our team receives;
  • Umami — cookie-free statistics about visits to our public pages, which don't identify you;
  • Supabase — legacy site features;
  • Model and pipeline providers (such as OpenAI, Anthropic, and LlamaIndex) — to generate dossiers, and OpenAI to read term sheets;
  • professional advisers or authorities where required by law, or to protect our rights, users, or the Service.

We also count how many times each research note is opened and read to the end, without cookies. To limit abuse, we keep a salted, one-way hash of your network address for at most 25 hours; we do not store IP addresses, and the counts themselves hold nothing that identifies you.

We do not introduce founders to investors or share your uploaded decks for any purpose other than producing your dossier, or your term sheets for any purpose other than reading them for you.

06How long we keep it

  • Uploaded decks saved to your account are kept for your workspace. Unclaimed uploads expire after 24 hours and are removed by the next hourly cleanup.
  • Analysis metadata and dossiers are retained so your history remains available in your workspace. Contact support to request content deletion or account closure.
  • Workspace visit and error records — sign-ins, visit times, approximate location and device are deleted after 13 months, and records of errors you met after 6 months. Messages you send us are deleted 24 months after you send them.
  • Account and billing records are retained as long as your account is active and as required for legal, tax, and accounting purposes.
  • Valuation tool data — your answers, results, email address and consent are deleted 24 months after your last check, and a request to hear when a new region is covered is deleted 24 months after you make it. Unsubscribing takes effect immediately. We keep anonymous counts, and a rounded copy of the terms angels enter (the round's stage, region, sector, instrument and size, the price offered and the check), stored without the email address.
  • Runway tool data — the figures you enter, your results, email address and consent are deleted with your valuation tool data, 24 months after your last check with any of the tools. A shared link to a runway result holds the verdict only, never your figures or your email.
  • Cap table tool data — the terms you enter, your results, email address and consent are deleted with your other tool data, 24 months after your last check with any of the tools. A shared link to a cap table result holds the headline only, never your terms or your email.
  • Term sheet files — the document you upload or paste is deleted 30 days after you upload it, or sooner when you click “Delete the file now” or “Delete this reading”. If a reading fails, the file is deleted at once; if we need a detail from you to read it, such as the document’s type or its pages, it’s kept 24 hours for your answer, then deleted. An upload that never starts a reading is removed after 1 hour. The copy on our processing server in New York is held in memory only and deleted as soon as the reading ends; the result waits there at most 24 hours, until our database collects it.
  • Free red-flag checks — the deck and the check's result are kept in your workspace like your other decks, until you delete them or close your account. The normalised email address and file fingerprint are kept with the check and used only for the 30-day limits.
  • Term sheet readings — the terms, quotes, corrections and grades are kept so the reading stays in your workspace, until you delete it or close your account.

07Where your data is stored and how it's protected

Your data is hosted with our infrastructure providers and protected with the technical and organisational controls described on the security page, including encryption in transit and at rest and strict access controls. Because our providers operate globally, your data may be processed in countries outside your own; where it is, we rely on appropriate safeguards. Term sheets you upload are stored in Ireland, and each reading sends the document to our processing server in New York and to OpenAI in the United States.

08Your rights

Subject to applicable law (including the Hong Kong Personal Data (Privacy) Ordinance and, where it applies, the GDPR), you may request to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email assistant@earlycapitalgroup.com. You may also request deletion through support.

09Cookies

We use only the cookies essential to operate the Service — primarily to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. Our visit statistics are cookie-free.

10Children

The Service is intended for professional investors and is not directed to anyone under 18. We do not knowingly collect personal data from children.

11Changes

We may update this policy from time to time. We'll revise the “last updated” date above and, for material changes, take reasonable steps to notify you.

12Contact

Questions or requests about your data? Email assistant@earlycapitalgroup.com.