Privacy Policy

Noise & Signal ("we", "our", or "the Platform") is a technology platform operated by Noise & Signal, Inc. in Panama that connects early-stage and growth-stage companies with institutional investors through AI-assisted vetting, mandate matching, and structured deal flow distribution.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Noise & Signal platform at noiseandsignal.io, including all associated pages, features, and services.

By creating an account or using the platform, you agree to the practices described in this Privacy Policy.

• Account registration: full name, email address, password, and role (founder or investor).
• Company profile: company name, description, sector, stage, geography, financial metrics (ARR, MRR, raise target), team biography, and uploaded documents such as pitch decks, financial models, and cap tables.
• Investor profile: firm name, title, AUM, investment mandate (stage, sector, geography, check size), and professional background.
• LinkedIn data: when you authenticate via LinkedIn, we receive your public profile data including name, headline, current and past positions, education, profile photo, and LinkedIn URL, as authorised by LinkedIn's API.
• Document uploads: pitch decks, financial models, cap tables, executive summaries, and term sheets uploaded to the data room.
• Communications: messages sent through the platform, term sheet responses, and NDA records including typed electronic signatures.
• Payment information: subscription billing is processed by PayPal. We do not store payment card numbers.

• Log data: IP address, browser type, device type, operating system, pages visited, and timestamps.
• Usage data: features accessed, documents viewed, investor signals sent, and vetting requests triggered.
• Cookies: session cookies for authentication and preference cookies for user experience.

• LinkedIn OAuth: profile data as described above, with your explicit consent during the authentication flow.
• PayPal: transaction confirmation data (not payment card details).

We use the information we collect to:

• Create and maintain your account and platform profile.
• Power the AI vetting engine, which analyses your company profile across seven institutional dimensions and generates a vetting score and report visible to investors on the platform.
• Match companies with investors based on registered investment mandates, sector, stage, geography, and check size.
• Enable data room access and NDA execution between founders and investors.
• Process and display term sheets submitted by investors and generate AI-assisted analysis of those terms.
• Send transactional emails including account verification, access requests, NDA execution confirmation, term sheet notifications, and investor match alerts.
• Process subscription payments through PayPal.
• Improve platform features, detect fraud, and ensure security.
• Comply with legal obligations.

Founder profiles and company information are visible to registered investors on the platform, subject to the founder's subscription tier. On the free Raise tier, investor identities are not revealed to founders. On paid tiers (Raise, Close), investor names and firm details are disclosed only in respect of investors who have actively signalled interest.

Documents in the data room are shared with investors only after both parties have executed the mutual NDA through the platform's electronic signing process.

• Anthropic — AI analysis and vetting engine
• DigitalOcean — cloud hosting and storage
• Mailgun — transactional email delivery
• PayPal — payment processing
• LinkedIn — OAuth authentication

These providers are contractually bound to use your information only for the purposes of providing services to us.

We may disclose information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Noise & Signal, our users, or the public.

When you connect your LinkedIn account, we receive and store the following data with your explicit consent: your full name, professional headline, profile photo URL, current and past employment history (company, title, dates), educational background, and LinkedIn profile URL.

This data is used to pre-populate your Noise & Signal profile and to display your professional background to investors where permitted by your subscription tier. You may disconnect LinkedIn at any time from your account settings, which will remove the LinkedIn-sourced data from your profile.

Noise & Signal's use of LinkedIn data is subject to LinkedIn's terms of service and the permissions granted through the OAuth flow. We do not post on your behalf, and we request read-only access only.

When you execute a Mutual Non-Disclosure Agreement on the platform, we record your typed full legal name, organisation name, title, email address, the timestamp of signature in UTC, and the IP address from which the signature was submitted.

This record constitutes your legally binding electronic signature under applicable law, including Panama's Ley 43 de 2001, the US Electronic Signatures in Global and National Commerce Act (ESIGN), and the EU eIDAS Regulation.

NDA signature records are retained for the duration of the NDA term plus seven years for legal compliance purposes.

• Account data: retained for the duration of your account plus two years after closure.
• Company and investor profiles: retained while the account is active. Deleted profiles are removed within 30 days of account deletion, subject to legal hold obligations.
• NDA and signature records: retained for the NDA term plus seven years.
• Financial and transaction records: retained for seven years as required by Panamanian commercial law.
• Log data: retained for 12 months.

We implement industry-standard security measures including TLS encryption for all data in transit, encrypted storage for sensitive credentials, JWT-based authentication with short-lived tokens, rate limiting and access controls on all API endpoints, and regular security audits.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to using commercially reasonable means to protect your information.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to certain processing activities, including profiling.
• Withdrawal of consent: where processing is based on consent (e.g. LinkedIn connection), withdraw consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

• Strictly necessary cookies: required for authentication and session management. These cannot be disabled.
• Preference cookies: store your notification and display preferences.
• Analytics cookies: help us understand how the platform is used in aggregate. No third-party advertising cookies are used.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.

Noise & Signal is operated from Panama. If you access the platform from outside Panama, your information may be transferred to and processed in Panama and the United States, where our cloud infrastructure is hosted. By using the platform, you consent to this transfer.

We ensure that cross-border transfers are subject to appropriate safeguards consistent with applicable data protection law.

The platform is intended for professional use by adults. We do not knowingly collect personal information from persons under the age of 18. If you believe a minor has provided us with personal information, contact us at [email protected] and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

The current version of this policy is always available at noiseandsignal.io/privacy.

For questions about this Privacy Policy or to exercise your data rights:

• Email: [email protected]
• Website: https://noiseandsignal.io
• Operator: Noise & Signal, Inc., Republic of Panama