Privacy Policy

Effective as of: April 17, 2025

Introduction

DeckNode respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website or use our services. Any attempt to replicate, redistribute, or reverse-engineer the structure, scoring logic, submission system, or routing mechanisms developed by DeckNode constitutes IP infringement.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. By accessing DeckNode’s services, you consent to the practices described below.

Data Controller: DeckNode is a company registered in the European Union. For the purposes of EU data protection law, DeckNode is the “data controller” of personal data collected through our platform. You can find our contact details at the bottom of this Policy.

What Data We Collect

1. Information You Provide to Us

• Contact Information: Name, email, Telegram, job title, company name

• Project or Investor Info: Project descriptions, decks, funding needs, investment preferences, etc.

• Compliance Data: Identification documents, company registration details (only where legally required)

• Communications: Messages, emails, survey feedback, or interactions via forms

2. Information We Collect Automatically

• Usage Data: IP address, browser type, device info, referral source, pages viewed, time spent

• Cookies: Used for performance, security, and analytics (see “Cookies and Tracking”)

3. Information from Third Parties

• Referrals from partners

• LinkedIn/social media profile data

• Publicly available due diligence checks

• Metadata from submission platforms (e.g., timestamps, IP address)

How We Use Your Data

• Matchmaking: To introduce vetted founders and investors

• Communication: To respond to inquiries, schedule meetings, and share updates

• Analytics: To improve performance and user experience using anonymized data

• Compliance: To meet GDPR, KYC/AML, or other regulatory obligations

• Security: To detect abuse, spam, or fraud

• Legal Rights: To protect our operations and fulfill lawful requests

• Optional Marketing: To share updates or event info (opt-out always available)

Legal Grounds for Processing (GDPR)

We rely on the following legal bases:

• Consent: When you voluntarily submit forms or request updates

• Contract: To deliver requested services or fulfill agreements

• Legitimate Interests: To run and improve our platform in a privacy-respecting way

• Legal Obligation: When processing is required to comply with law

Cookies and Tracking

DeckNode uses:

• Essential cookies: For core site functionality

• Analytics cookies: To understand usage patterns and improve design

We do not use advertising or profiling cookies.

Users may accept or reject non-essential cookies via browser or cookie banner controls. We respect “Do Not Track” settings to the extent technically feasible.

Who We Share Data With

We may share personal data with:

• Counterparties: For the purpose of matchmaking (e.g., founders and investors)

• Trusted service providers: For form submissions, cloud storage, analytics, and communication

• Professional advisors: Lawyers, accountants, or consultants (under confidentiality)

• Authorities: If required by law or court order

• Successor entities: In case of acquisition, restructuring, or business transition

All third-party data processors act only under our instruction, are bound by contracts, and are required to provide GDPR-compliant data protection standards.

DeckNode does not sell personal data or share it with third parties for their own marketing.

International Data Transfers

Although DeckNode is EU-based, some services or introductions may involve non-EU data flows.

Where personal data is transferred outside the EEA:

• We use Standard Contractual Clauses (SCCs) or equivalent legal safeguards

• We assess security, privacy risk, and compliance for each provider or transfer

• You consent to international transfers when voluntarily engaging with global parties

Data Retention

We retain personal data only as long as necessary:

• During the active engagement period

• For up to 2 years of inactivity (or as required by law)

• For up to 10 years when required for tax, legal, or AML compliance

Inactive or stale data is securely deleted or anonymized in accordance with best practices.

Your Rights Under GDPR

You have the right to:

• Access the data we hold about you

• Correct inaccurate or outdated information

• Request deletion of data no longer needed

• Restrict or object to certain uses of your data

• Withdraw consent at any time

• Receive a copy of your data (portability)

• Lodge a complaint with your supervisory authority

To exercise these rights, email: info@decknode.com
We may request identity verification before fulfilling your request.

Our lead data protection authority is:
Comissão Nacional de Proteção de Dados (CNPD), Portugal

Security Measures

DeckNode implements robust security protocols, including:

• HTTPS/TLS encryption for data in transit

• Encrypted cloud storage for sensitive information

• Access control and team-based permissioning

• Vendor due diligence and contractual data safeguards

• Anonymization or minimization wherever possible

We will notify users and authorities in accordance with GDPR if a data breach occurs.

Privacy Disclaimer

DeckNode’s platform is not intended for individuals under 18.

Policy Updates

We may revise this Privacy Policy to reflect changes in law, technology, or operations. Significant changes will be communicated via banner or direct message when appropriate.

The most current version will always be posted on this page.

Contact

For any privacy-related questions, rights requests, or data concerns, contact:
📩 info@decknode.com
Subject line: Privacy Inquiry