Entrevest, LLC dba Diligence Ready ("Diligence Ready," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of our website visitors, platform users, and corporate stakeholders. This Privacy Policy ("Policy") explains how we collect, use, disclose, and secure personal information when you visit diligenceready.com (the "Site") or use our equity tracking, cap table management, and data room services (the "Services").
1. Important Notice: Our Role as Controller vs. Processor
To understand your privacy rights, it is critical to note how Diligence Ready handles data across two distinct roles:
- Diligence Ready as a Data Processor: When a company utilizes our platform to manage its cap table, issue equity, or store documents in a due diligence data room, that corporate entity (our Customer) determines the purpose and means of processing. In these instances, Diligence Ready acts strictly as a Data Processor (or "Service Provider") operating under the instructions of the Customer. If you are an employee, investor, or stakeholder of a company using Diligence Ready, that company's privacy policy governs your information.
- Diligence Ready as a Data Controller: When you visit our website, register a corporate account as an administrator, contact sales, or subscribe to our newsletters, we act as the Data Controller for that account and operational data.
2. Information We Collect
Depending on how you interact with our platform, we may collect various categories of information.
Summary of Data Collection
| Category of Personal Information | Specific Examples Collected | Source of Collection |
|---|---|---|
| Identifiers & Contact Info | Full name, business email address, physical address, phone number, and unique account usernames. | Directly from you (account creation) or from your employer/issuer. |
| Corporate & Financial Data | Tax Identification Numbers (SSN/EIN), equity holdings, stock option grant details, transaction history, and linked bank account information (via secure third-party processors like Plaid). | Provided by the Customer Administrator or entered directly by the stakeholder. |
| Verification & Compliance Data | Government-issued IDs, passports, or company entity documentation required for institutional onboarding or anti-money laundering (AML) checks. | Directly from you or third-party verification partners. |
| Technical & Usage Details | IP address, browser type, operating system, access timestamps, and interactions with specific platform pages. | Automatically via tracking technologies, cookies, and server logs. |
3. How We Use Your Information
We use the personal information we collect for the following operational and commercial purposes:
- To Provide the Services: Setting up user profiles, computing cap table metrics, hosting secure data rooms, and facilitating stakeholder access.
- To Ensure Security & Auditability: Maintaining exact internal logs of system access to track which users view or modify sensitive legal and financial data rooms.
- Billing & Payments: Processing subscription fees and managing financial transfers.
- Customer Support: Responding to help inquiries, diagnosing technical bugs, and optimizing platform performance.
- Compliance & Legal Obligations: Verifying identities for regulatory compliance (e.g., KYC/AML requirements) and enforcing our Terms of Service.
4. How We Share and Disclose Information
We do not sell your personal information or corporate financial data to data brokers or third parties for monetary consideration.
We only share information in the limited scenarios outlined below:
- With the Authorizing Customer: Stakeholder data (such as option grants or equity metrics) is shared directly with the corporate employer or issuing company that established the account workspace.
- To Third-Party Service Providers: We share data with verified vendors who perform specialized operational services on our behalf (e.g., cloud hosting via Vercel, Supabase, and services such as Amazon Web Services, identity verification, payment processing, and customer support CRM software). These providers are contractually bound to process data only under our strict instructions.
- Corporate Transactions: If Diligence Ready undergoes a merger, acquisition, restructuring, or asset sale, user data may be transferred to the acquiring entity as part of standard business assets.
- Legal Compliance and Protection: We may disclose information if required to do so by law, court order, subpoena, or to protect the safety, rights, and security of Diligence Ready, our users, or the public.
5. Cookies and Online Tracking Technologies
We and our third-party analytics vendors use cookies, web beacons, and tracking pixels to analyze traffic patterns on our public Site and to remember your login preferences inside the secure platform.
Managing Tracking Choices
- Browser Settings: You can configure your browser to reject cookies, though doing so may disable vital security features and break basic platform functionality.
- Do Not Track: Our public Site is not currently configured to respond to browser-initiated "Do Not Track" signals.
6. Data Security and Retention
6.1 Security Measures
Because we manage critical corporate infrastructure, security is embedded in our architectural design. We implement industry-standard administrative, physical, and logical security controls, including:
- Encryption of data both at rest (AES-256) and in transit (TLS 1.2+).
- Strict adherence to the principle of least privilege, restricting internal employee data access to authorized roles.
- Comprehensive, immutable access logging to ensure all modifications to corporate cap tables and data rooms are fully auditable.
6.2 Data Retention
We retain personal information for as long as your account is active or as necessary to fulfill the operational purposes for which it was collected. Please note that legal, financial, and tax obligations (such as tracking corporate stock issuances) frequently require us to retain historical records even after a specific user deactivates their individual login.
7. Your Regional Privacy Rights (CCPA/CPRA & GDPR)
Depending on your jurisdiction (such as California or the European Economic Area), you may possess specific rights regarding your personal data.
Summary of Rights
- Right to Know/Access: The right to request a breakdown of what personal data we have collected, used, and disclosed about you.
- Right to Rectification: The right to correct inaccurate or incomplete data in our records.
- Right to Erasure (Deletion): The right to request deletion of your information, subject to statutory exemptions (e.g., maintaining corporate equity ledgers required by law).
- Right to Portability: The right to obtain a digital copy of your personal data in a structured, machine-readable format.
Exercising Your Rights: To submit a data request, please contact us at privacy@diligenceready.com. If your request relates to data managed by Diligence Ready in our capacity as a Data Processor for your employer or an issuing company, we will redirect your inquiry to that Customer for handling.
8. International Data Transfers
Diligence Ready is headquartered in the United States. Information collected via the Site and platform will be transferred to and processed within servers located in the US. By using our platform, you acknowledge that US data protection frameworks may differ from those of your home country. For transfers involving EEA or UK residents, we utilize standard contractual clauses (SCCs) to ensure equivalent data protection assurances.
9. Changes to this Privacy Policy
We may periodically update this Policy to reflect adjustments to our technical workflows, product features, or global regulatory updates. If we make material modifications, we will update the "Last Updated" date at the top of this page and notify primary corporate administrators via platform notification or email.
10. Contact Us
For privacy questions, data access requests, or inquiries regarding our data handling procedures, please contact us at:
Entrevest, LLC dba Diligence Ready
Attn: Privacy & Compliance Officer
Email: privacy@diligenceready.com