Privacy Policy

GoPresent Ltd ("GoPresent", "we", "us", "our") is a company incorporated in England and Wales (Company Number: 16957741), with its registered office at Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ.

GoPresent operates an AI-powered capital intelligence platform that helps founders and startups prepare institutional-grade pitch decks, gap analyses, and investor narratives through our website at https://gopresent.ai, and provides venture scouts with AI-generated investment analysis and deal intelligence through the Scout Portal.

We are the Data Controller for the personal data we collect through our website and Services, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. In certain circumstances described in Section 13B, we act as a Data Processor on behalf of scouts who upload founder data.

For data protection queries, contact us at: privacy@gopresent.ai or GoPresent Ltd, Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ.

This Privacy Policy explains what personal data we collect and why; how we use, store, and protect your data; who we share your data with; your rights under UK GDPR; how long we keep your data; and how to contact us or make a complaint.

This Policy applies to all users of the GoPresent Platform, including STARTER (Free Review), GROWTH (Seed), SCALE (Series A+), SCOUT (Venture Scout Portal), and Consulting Services clients.

This Policy should be read alongside our Data Processing Agreement (DPA), which governs how we handle Submitted Materials and AI model training, and our Terms and Conditions of Service.

Account and Identity Data: full name, email address, company name and role/title, account login credentials (password stored in hashed form only), and billing name and address.

Payment Data: payment card details processed and stored by Stripe, Inc. (GoPresent does not store card numbers), billing history and transaction records, and VAT number where applicable.

Usage and Technical Data: IP address and device identifiers, browser type and version, operating system, pages visited, features used, session duration, referral source, log data and error reports, and cookies and similar tracking technologies (see Section 10).

Submitted Materials: pitch decks, business plans, financial projections, and other documents you upload; company information and market data you provide; and any personal data of third parties contained within your Submitted Materials (you are responsible for ensuring you have the right to share this data).

Communications Data: emails and messages you send to us, support tickets and enquiry records, and feedback, survey responses, and testimonials.

Scout Profile and Deal Brief Data: for Scout Portal users, we collect scout profile information (full name, bio, investment thesis, sectors, geographies, stage preferences), deal brief content (AI-generated analysis, scoring, and recommendations stored as structured data), scout subscription and billing data, pitch deck uploads submitted by scouts on behalf of third-party founders (see Section 13B), and deal brief sharing and recipient view tracking data.

View Tracking Data (Shared Deal Briefs): when a third party views a shared Deal Brief via a public link, we collect server-side the timestamp of the view, the IP address hashed using SHA-256 (one-way cryptographic hash, not reversible), and the user-agent string. Hashed IP addresses constitute pseudonymised personal data under UK GDPR and remain within the scope of data protection law.

We do not intentionally collect special category data (health, biometric, genetic, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or criminal records). Please do not include such data in your Submitted Materials.

Direct collection: when you register an account, subscribe to a plan, submit materials, contact us, or complete forms on our Platform.

Automated collection: through cookies, analytics tools, and server logs when you use our Platform.

Server-side collection: when third parties view a shared Deal Brief via a public link, we collect view tracking data (timestamp, hashed IP, user-agent) server-side without placing cookies on the recipient's device.

Third parties: from payment processors (Stripe), analytics providers, and where you connect third-party integrations.

Publicly available sources: company information from Companies House, LinkedIn, or other public databases where relevant to our Services.

We use your personal data under the following lawful bases under UK GDPR Article 6: providing and managing your account (performance of contract); delivering the AI Services (performance of contract); processing payments (performance of contract); sending service communications (performance of contract); AI model training for STARTER and Scout Free users (consent); AI model training for opted-in paid users (consent); security, fraud prevention, and abuse detection (legitimate interests); improving our Services (legitimate interests); legal compliance and record-keeping (legal obligation).

For Scout Portal services: providing AI-generated analysis (performance of contract); processing founder data on behalf of scouts (legitimate interests of the scout, see Section 5A); view tracking on shared deal briefs (legitimate interests, see Section 5A).

Where we rely on legitimate interests, we have balanced our interests against your rights and concluded that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time.

View Tracking on Shared Deal Briefs: GoPresent has conducted a legitimate interest assessment for view tracking. Our legitimate interest is providing scouts with attribution and analytics about who has viewed their shared briefs. The tracking is limited to pseudonymised data (hashed IP address) and technical identifiers (user-agent); no cookies are placed on the recipient's device; data is used solely for view counting and aggregate geographic attribution, not individual profiling or marketing; recipients are informed via a clear disclosure statement on each shared brief.

Processing Founder Data on Behalf of Scouts: when a scout uploads a founder's pitch deck, the scout is the Data Controller for founder personal data, having determined the purpose of processing (investment evaluation). GoPresent is the Data Processor, processing only on the scout's documented instructions to deliver the AI analysis service (Article 28, UK GDPR). The scout is responsible for ensuring they have lawful authority to share the founder's data with GoPresent.

STARTER (Free Review) users: by using STARTER, you consent to GoPresent using your Submitted Materials to train and improve our proprietary AI models. This consent is a condition of free access. We will anonymise personal data before use in training where reasonably practicable. Consent may be withdrawn at any time by closing your account.

Paid users (GROWTH and SCALE): the default is that your Submitted Materials are not used for AI model training. You may voluntarily opt in via your account dashboard and withdraw your opt-in at any time.

Consulting clients: Submitted Materials provided under Consulting Services will never be used for model training without your explicit written consent in the Statement of Work.

Scout Free users: by using Scout Free, you consent to GoPresent using your Submitted Materials (including founder pitch decks and resulting Deal Briefs) for model training. This consent is a condition of free access. You may withdraw by closing your Scout Free account.

Scout Premium and Enterprise users: the default is that Submitted Materials are not used for model training. You may opt in via your account dashboard. Founder personal data will only be used for model training if the scout has opted in and the founder data has been anonymised.

Anonymised data incorporated into AI model weights cannot be retroactively removed even if you later withdraw consent or request deletion — anonymisation is a permanent transformation and the data is no longer personal data under UK GDPR Article 4(1). We will always honour deletion requests for identifiable personal data not yet incorporated into model weights.

We do not sell your personal data.

Third-Party AI Providers (Sub-Processors): we share Submitted Materials via secure API connections with Google LLC (Vertex AI / Gemini, USA), Anthropic PBC (Claude API, USA), Microsoft Corporation (Azure OpenAI, Ireland/USA), OpenAI L.L.C. (USA), Adobe Inc. (Firefly Enterprise, Ireland/USA), Perplexity AI Inc. (USA), Amazon Web Services (infrastructure, Ireland/USA), Firecrawl / Mendable Inc. (website analysis, website content only, USA), Slack Technologies / Salesforce Inc. (internal operational notifications, USA), and PostHog Inc. (product analytics, EU Frankfurt). These providers process data solely to deliver AI functionality and may not use your data for their own training purposes.

Payment Processor: Stripe, Inc. processes all payments. GoPresent does not store your full card details. Stripe is PCI-DSS compliant.

Shared Deal Brief Recipients: when a scout shares a Deal Brief via a public link, the AI-generated analysis and scoring are displayed to anyone with the link. This does not include the original pitch deck or raw founder data. View tracking data (view count, timestamps, anonymised geographic data) is shared with the scout who created the brief.

Professional Advisors: we may share data with legal, accounting, or insurance advisors under obligations of confidentiality.

Legal Disclosure: we may disclose data to law enforcement, regulators, or courts where required by law.

Business Transfer: if GoPresent is acquired or merges, your personal data may transfer to the successor entity. We will notify you in advance.

Some of our Third-Party AI Providers are based in or process data in the United States, outside the UK. We ensure all international transfers comply with UK GDPR Chapter V using UK International Data Transfer Agreements (IDTAs), UK Adequacy Regulations where applicable, or Binding Corporate Rules where applicable.

You can obtain copies of the relevant transfer mechanisms by contacting privacy@gopresent.ai.

You have the following rights regarding your personal data. To exercise any right, contact privacy@gopresent.ai. We will respond within one month (extendable by two further months for complex requests, with notice).

Right of Access (Art. 15): request a copy of the personal data we hold about you.

Right of Rectification (Art. 16): request correction of inaccurate or incomplete personal data.

Right of Erasure (Art. 17): request deletion of your personal data, subject to legal retention obligations and anonymised data in model weights.

Right of Restriction (Art. 18): request that we limit how we use your data while a dispute is resolved.

Right of Data Portability (Art. 20): request your personal data in a structured, machine-readable format.

Right to Object (Art. 21): object to processing based on legitimate interests, including for model training or direct marketing at any time.

Right to Withdraw Consent (Art. 7(3)): withdraw consent at any time where processing is based on consent. For STARTER, withdrawal results in termination of service.

Right to complain: you may lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk, 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would always prefer to resolve concerns directly — please contact us first at privacy@gopresent.ai.

Cookies are small text files stored on your device when you visit our Platform. We use cookies and similar technologies to make our Platform work, improve your experience, and understand how users engage with our Services.

We use four types of cookies: Essential / Strictly Necessary (required for the Platform to function; cannot be opted out of without opting out of the service); Performance / Analytics (understand user interaction; can be declined via cookie settings); Functional (remember your preferences; can be declined); and Marketing / Targeting (deliver relevant communications; can be declined).

You can manage or disable cookies through your browser settings or our cookie consent manager on the Platform. Disabling essential cookies may impair your ability to use the Services. See our Cookie Policy for full details.

View Tracking on Shared Deal Briefs (PECR): view tracking on shared Deal Brief pages operates server-side and does not place cookies on the recipient's device. This tracking does not engage PECR consent requirements (Regulations 6 and 7) because no cookies are placed. Following amendments to PECR by the Data (Use and Access) Act 2025 (effective February 2026), analytics tracking collecting only aggregate statistics is exempt from prior consent requirements. GoPresent's view tracking qualifies for this exemption.

We retain personal data only for as long as necessary for the purposes set out in this Policy, unless a longer retention period is required by law.

Account and identity data: duration of account plus 6 years after closure (legal and tax purposes). Payment and billing records: 7 years (HMRC requirements). Submitted Materials (paid services, not opted in): 30 days after service completion, then deleted. Submitted Materials (STARTER or opted-in paid): anonymised and retained indefinitely in model weights; identifiable data deleted within 30 days of service completion. Submitted Materials (Consulting): 30 days after SOW completion, then deleted.

Founder data uploaded via scouts (not opted in): 30 days after brief generation, then deleted. Founder data (scout opted in for model training): anonymised and retained indefinitely in model weights; identifiable data deleted within 30 days after scout closes account or opts out. Scout deal brief data: duration of scout account plus 6 years. View tracking data on shared briefs: 12 months. Communications and support records: 3 years from last interaction. Usage and technical data (logs): 12 months. Marketing preferences: until consent is withdrawn plus 1 year.

We implement appropriate technical and organisational measures to protect your personal data, including: TLS 1.3+ encryption in transit; AES-256 encryption at rest; role-based access control (RBAC) and multi-factor authentication (MFA) for all administrative access; authenticated, rate-limited API connections to all Third-Party AI Providers; data minimisation; regular staff data protection and security awareness training; and documented breach response procedures.

We will notify affected users and the ICO within 72 hours of becoming aware of a breach where required by UK GDPR Article 33. No method of transmission over the internet is 100% secure; while we take robust measures, we cannot guarantee absolute security.

Our Services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact privacy@gopresent.ai and we will delete it promptly.

GoPresent uses artificial intelligence (including large language models provided by Anthropic PBC and other Third-Party AI Providers) to generate investment analysis, scores, recommendations, and related content across all service tiers and products.

AI-generated content is used across: STARTER (Free Review) — pitch deck analysis, gap analysis, and founder narrative recommendations; GROWTH and SCALE — all analytical outputs, scoring, and recommendations; Scout Portal (all tiers) — all Deal Brief content, investment analysis, and recommendations; Consulting Services — supporting analysis and research materials where clearly identified in the Statement of Work.

AI-generated content may contain errors, inaccuracies, omissions, or hallucinations. GoPresent does not warrant the accuracy, completeness, or suitability of any AI-generated output for any particular purpose. Independent human review is always recommended. Recipients of shared Deal Briefs and other shared outputs are informed that content is AI-generated via a clear disclosure statement. This reflects alignment with EU AI Act Article 50 transparency requirements (applicable from August 2026).

Scout as Data Controller: when a scout uploads a founder's pitch deck or investment opportunity to GoPresent, the scout determines the purpose of processing (investment evaluation) and is the Data Controller for founder personal data contained in uploaded materials.

GoPresent as Data Processor (for Founder Data): GoPresent processes founder personal data on the scout's behalf to provide the AI analysis service, only on documented instructions, implementing appropriate security measures, ensuring sub-processors comply with data protection obligations, and not using founder data for purposes beyond providing the AI analysis service (except where the scout has consented to model training opt-in).

GoPresent as Independent Controller (for Scout Data): GoPresent is an independent Data Controller for scout account and profile data, view tracking data on shared deal briefs, aggregate analytics using anonymised data, and AI model training where the scout has opted in.

Founder Rights: founders whose data is in pitch decks uploaded by scouts retain all rights under UK GDPR Articles 15–22. Founder data subject rights requests should be directed to privacy@gopresent.ai. GoPresent will coordinate with the relevant scout and respond within one month.

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy with a new effective date and sending an email notification to registered users at least 14 days before material changes take effect. Continued use of the Services after the effective date constitutes acceptance. If you do not agree, you must stop using the Services and may request account deletion.

For any privacy-related queries, rights requests, or concerns: privacy@gopresent.ai | GoPresent Ltd, Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ. We aim to respond to all queries within 5 business days and to all formal rights requests within one month as required by UK GDPR.