Privacy notice

The controller of the personal data described here is TESSELLATE MINDS LLC, a limited liability company registered in the Republic of Armenia (Tax ID 02340483), legal address Garegin Nzhdeh St. 23/3, apt. 53, Shengavit district, Yerevan, Republic of Armenia. It operates Pitch2Fund, and every request on this page goes to it at hello@pitch2.fund.

• We do not sell personal data and run no advertising trackers.
• Analytics cookies are set only if you allow them in the cookie banner.
• Nothing is ever sent from your mailbox without your click, one email at a time, and we can send but never read your mail.
• Investor email addresses are masked on public pages, there are no bulk exports, and anyone listed can have their record removed.

Where the EU or UK GDPR applies to you, each use of personal data below rests on the legal basis named beside it. Where we rely on legitimate interests, we have weighed them against your rights and expectations, and you can object at any time (see “Your rights”).

We do not sell personal data, rent it, or share it for advertising, and we do not use it to train AI models.

We hold what the product needs to work, and nothing beyond it:

• Account: your email address and a password hashed with Argon2, or the fact that you signed in with Google and the verified address it returned.
• Your startup:the profile you enter and the pitch deck you upload. The deck is read by an AI vision model so the platform understands your company. Your deck and the AI's critique of it are never shown to investors on this platform. Investment firms see only the profile fields you choose to list, and you can unlist in one click.
• What you do here: drafts, pipeline cards, notes, copilot conversations, decks you build.
• Fund accounts: your work email, name, firm and role, and the messages you send to founders through the product.
• Mailbox, only if you connect one: we ask Google or Microsoft for permission to send and for the address that will be sending — nothing that can open a message. With the permissions we hold (gmail.send at Google; Mail.Send and User.Read, which reads only your profile, at Microsoft) neither would return your mail to us if we asked. We keep the recipient, subject and body of each email you approved and sent, so your pipeline knows who has been contacted. Access tokens are encrypted at rest, and disconnecting deletes them along with those records.

Connecting a mailbox grants exactly two things: gmail.send, which can create and send a message and cannot read one, and openid email, which tells us which address is sending. We do not request any scope that can read, list, label or delete your mail, and signing in with Google grants no mailbox access at all.

Pitch2Fund's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through those scopes is used only to send the emails you accept and to show you what you sent; it is never sold or transferred to anyone else, never used for advertising, never used to develop or train generalised AI models, and never read by a person here — except with your explicit permission, to investigate abuse, or where the law requires it.

The directory describes investment firms — venture funds, family offices, angel investors — and the people who work at them in an investing role. For a person we hold a name, job title, the firm, a workemail address, sometimes a LinkedIn URL, and the firm's public investments. We do not hold home addresses, personal phone numbers, private social accounts or anything about your life outside your professional role.

Where it comes from:the firm's own website and portfolio pages, the firm's published team pages, press coverage of its investments, public registers and public business directories. We do not buy contact lists. Most addresses are read directly off the firm's own site; some are derived from the address format the firm itself uses for the colleagues it publishes.

Why, and our balancing test: investors publish how to reach them because receiving relevant proposals is part of their job. We rely on legitimate interests, and limit what we do with the data so that it stays within what a listed investor would reasonably expect: on public pages email addresses are shown masked (for example t•••••@fund.vc); full addresses are shown only to signed-in users, under daily viewing limits; there are no bulk exports; and our terms forbid using the directory for bulk or unsolicited mass email. Each founder writes one email at a time, from their own mailbox, after reading it.

To be removed or corrected: email hello@pitch2.fund from the address in question or from your work domain, with a link to the page. We delete the record, and keep only the minimum needed to stop it being re-imported (the address or domain on a suppression list), within 30 days and normally much sooner. You do not have to give a reason.

The startup index holds facts about companies: name, website, sector, location, founding year, funding rounds and who backed them. It is read from public funding registers (such as SEC Form D filings and Companies House), the company's own website, investors' portfolio pages and the press. Where a company publishes a general contact address on its site, we may hold that too. A founder's name appears only where the company or a register published it.

Company pages are shown to founders and to reviewed investment firms. To correct or remove your company's record, email hello@pitch2.fundfrom the company's domain.

Our team may send a short introduction to Pitch2Fund, written for the recipient, to a business address in the directory or the startup index. It comes from a named person's @pitch2.fund mailbox, carries our company name and postal address, and has a one-click unsubscribe link. We write to any address at most once — there are no follow-up sequences — and an unsubscribe, a reply asking us to stop, or a removal request means we never write to that address again. We never send on behalf of our users from our own mailboxes, and we never give the directory to anyone to send from theirs.

When you share a built deck as a link, we record how many times it was opened, how long it was on screen, the time spent on each slide, and which slide each reading stopped at. We deliberately record nothing that identifies the reader: no IP address, no user-agent string, no analytics, and no cookie that outlives the tab. The one thing stored about a reader is whether they were on a phone, a tablet or a desktop.

We use a small number of service providers, each only for the job named here and only with the data that job needs:

What goes to an AI provider is the content needed for the output you asked for — your startup profile, your deck, the public facts about an investor — never your password, your mailbox access or other users' data. We may also disclose data where the law requires it, to protect the service or its users from fraud or abuse, or to a successor if the business is ever sold, under this same notice.

We are based in Armenia and our servers are in Germany. Some of the providers above process data in the United States and China. Where the GDPR applies, we rely on the European Commission's standard contractual clauses where the provider offers them, and otherwise on the transfer being necessary to provide the service you asked for (GDPR Art. 49(1)(b)). If you would rather your deck and profile were not sent to a particular provider, tell us and we will explain what that leaves available.

One essential cookie keeps you signed in. Analytics cookies are set only with your consent, and you can change your answer at any time under “Cookie settings” in the footer. The full list is in our cookie policy.

Traffic is encrypted in transit (TLS). Passwords are stored only as Argon2 hashes, and mailbox tokens are encrypted at rest. Access to production systems is limited to the people who run the service. List endpoints are rate-limited and investor contact details are released per profile, under daily limits, so the dataset cannot be copied out in bulk. If a breach affects your data, we will tell you and the relevant authority as the law requires.

Fit scores and rankings are research aids that help a person decide whom to read first. They are not decisions with legal or similarly significant effects on anyone, and nothing is sent, published or refused on the strength of a score alone.

Pitch2Fund is a business tool for adults. Accounts are for people aged 18 or over, and we do not knowingly hold data about children.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing (including any processing based on legitimate interests), receive it in a portable format, and withdraw a consent you gave. Ask at hello@pitch2.fund; we may ask you to confirm the request comes from you, and we answer within one month.

You also have the right to complain to a data protection authority — in the EU or UK, the one where you live or work; in Armenia, the Personal Data Protection Agency. We would be glad of the chance to put things right first.

Residents of California: we do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information.

When this notice changes, we update the date at the top. If a change materially affects how we use your data, we tell account holders by email before it applies.

hello@pitch2.fund, or by post to TESSELLATE MINDS LLC, Garegin Nzhdeh St. 23/3, apt. 53, Shengavit district, Yerevan, Republic of Armenia. See also our terms of service, cookie policy, acceptable use policy, refund policy and company details.