Privacy Policy
How we collect, use, and protect your data with enterprise-grade security.
Last Updated: September 16, 2026
1. Information We Collect
NUVC collects information you provide directly, information we obtain automatically when you use our services, and information from third-party sources. The types of information we may collect include:
• Personal identifiers such as your name and email address
• Business information including pitch decks, supporting documents (financial models, cap tables, customer contracts, term sheets), company details, and funding information
• Usage data including how you interact with our platform and services
• Technical information such as IP addresses, browser types, and device identifiers
2. How We Use Your Information
We use the information we collect for various purposes, including:
• Providing and maintaining our pitch deck analysis services
• Matching you with relevant investors based on your business profile
• Processing payments and managing your account
• Sending you analysis results, updates, and important service notifications
• Improving our AI models and platform functionality
• Producing aggregated, de-identified research and benchmark insights about fundraising and pitch-deck quality. We only publish figures computed across a group of distinct submissions large enough that no individual founder or company can be identified; we never publish your raw deck, your individual score, or your company name.
• Detecting fraud, abuse, and security threats
3. Data Security & Protection
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Access controls and authentication protocols
• Secure data centers and cloud infrastructure
4. Information Sharing
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information in the following circumstances:
• With your explicit consent
• To comply with legal obligations or law enforcement requests
• With service providers who assist in our operations under strict confidentiality
• In connection with a merger, acquisition, or sale of assets
5. Your Rights & Choices
Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the following rights regarding your personal information:
• Right to access your personal information
• Right to rectify or update inaccurate information
• Right to delete your personal information
• Right to restrict or object to processing
• Right to data portability
To exercise any of these rights, please contact us at hello@nuvc.ai
6. Data Retention
We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, we retain account information for up to 7 years after account closure, and pitch deck content for up to 2 years unless you request earlier deletion.
7. International Data Transfers & Cross-Border Disclosure
Your information may be transferred to and processed in countries other than your own. In accordance with the Australian Privacy Act 1988 (APP 8) and GDPR Article 46, we disclose the following overseas recipients of personal information:
• Supabase (United States) — User accounts, authentication, pitch deck metadata
• OpenAI (United States) — Pitch deck and document content for AI extraction and embeddings (may include founder names, financials, team bios)
• Anthropic (United States) — Pitch deck and document content for AI scoring, chat, and memo generation (may include founder names, financials, team bios)
• Stripe (United States) — Payment processing, billing email, subscription status
• Cloudflare R2 (Global CDN, S3-compatible) — Uploaded file storage: founder pitch decks (converted to PDF) and, on investor accounts, GP and fund documents
• Loop.so (United States) — Transactional emails and magic link authentication
• Fly.io (United States / Australia) — Application hosting and runtime logs
• Vercel (United States) — Frontend hosting, analytics, authentication callbacks
We take reasonable steps to ensure each overseas recipient handles your personal information in accordance with the Australian Privacy Principles. We are accountable for any breach by an overseas recipient. If you have concerns about cross-border transfers, contact us at hello@nuvc.ai
9. AI Analysis & Automated Decision-Making
NUVC uses artificial intelligence to analyze pitch decks and generate scores, insights, and investor matches. When you upload a pitch deck — or, on an investor account, a GP or fund document — the content is sent to OpenAI and Anthropic (both based in the United States) for AI-powered analysis. Which provider handles a given request depends on the task and on automatic failover between the two. This may include founder names, company details, financial projections, unit economics, cap table data, and team information contained in your uploaded files.
Our NuScore™ algorithm produces automated assessments that influence which investors you are matched with and whether you receive access to investor contact details. These scores are generated by AI and are not reviewed by a human before being presented to you.
If you provide feedback or corrections to your analysis, this data may be used to improve our scoring models. This constitutes a secondary use of your personal information for machine learning purposes.
You may request a human review of any automated decision by contacting us at hello@nuvc.ai. We are committed to transparency in how AI affects your experience on our platform.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated policy.
12. How to Make a Complaint
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us:
• Email: privacy@nuvc.ai
• We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@nuvc.ai or hello@nuvc.ai. NUAI Pty Ltd (ABN 80 652 527 663), trading as NUVC.
Privacy questions? Contact us at hello@nuvc.ai
Encrypted
Data at rest & in transit
Secure
Hosted on SOC 2 certified infrastructure
No Selling
We never sell your data
