Privacy Policy

Scope

This Privacy Policy explains how Deal Box, Inc. ("Deal Box," "we," "us") handles personal information collected through issuer‑direct portals we host and public pages we operate (the "Platform"). This Policy applies to U.S. users and U.S. investors.

What we collect

• Identifiers & contact: name, email, phone, address.
• Investor qualification & compliance: accreditation attestations/certificates, KYC/AML data (e.g., ID document metadata as processed by third‑party providers), signatures, timestamps.
• Portal activity & device data: login events, page views, IP address, user agent, cookie IDs.
• Documents you upload: NDA acknowledgments, subscription packet metadata (not countersigning on your behalf).

Why we collect it (uses)

• Provide and secure your account (authentication, session management, fraud prevention).
• Operate issuer‑direct workflows (accreditation/KYC/AML via third‑party providers selected by the issuer).
• Compliance logging, audit trails, and error/abuse detection.
• Site performance, analytics, and service improvement (de‑identified/aggregated where possible).
• We do not sell personal information.

How we share

• Subprocessors/vendors that help us run the Platform (e.g., hosting, email, identity/KYC/AML, accreditation verification, e‑signature, workflow).
• The issuing company whose portal you access (issuer‑direct model).
• Legal/compliance recipients if required by law, to protect rights, or to investigate abuse.
• We do not share for third‑party advertising.

Children

The Platform is intended for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided data, contact us to delete it.

Security

We use commercially reasonable administrative, technical, and physical safeguards (encryption in transit, restricted access, audit logging). No method is 100% secure.

Retention & deletion

Portal content and compliance logs are retained for the duration of the raise and for up to 12 months after close, unless a longer period is required by law or the issuer's policies. You may request deletion or export (subject to issuer and legal requirements).

Your choices

• Account settings and support requests for corrections/deletion.
• Email preferences for non‑transactional messages (unsubscribe where offered).

Third‑party services

Accreditation, KYC/AML, e‑signature, data storage, and similar services are provided by third parties under their own terms and privacy policies.

Updates

We may update this Policy; the "Last updated" date reflects the latest change.

Contact

privacy@dealbox.vc | Deal Box, Inc., 2173 Salk Ave, Suite 250, Carlsbad, CA 92008