Privacy Policy

1. Introduction

Investta ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform at investta.org and our mobile applications (collectively, the "Platform").

2. Information We Collect

Account Information: When you register, we collect your name, email address, password (hashed), and role selection (Host or Investor).

Profile Information: You may provide additional details such as phone number, organization name, and profile preferences.

Event & Investment Data: Information related to events you create or investments you make, including amounts, dates, statuses, and notes.

Payment Information: Payment details are processed and stored by Stripe. We do not store your full credit card number on our servers.

Usage Data: We collect information about how you interact with the Platform, including pages visited, features used, and device information.

Communications: If you contact us, we retain correspondence for support purposes.

3. How We Use Your Information

• To provide, maintain, and improve the Platform
• To process subscriptions and payments through Stripe
• To send transactional emails (verification, password reset, investment notifications)
• To facilitate communication between hosts and investors
• To enforce our Terms of Service and prevent fraud
• To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share information only in these circumstances:

• With other users: Hosts can see investor names and investment details for their events. Investors can see event and host information.
• Service providers: We use third-party services including Stripe (payments), Resend (email), and Jitsi (video meetings) to operate the Platform.
• Legal requirements: We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on secure infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL)
• Hashed passwords using bcrypt
• JWT-based authentication with short-lived access tokens
• Role-based access controls

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing activities

To exercise any of these rights, contact us at privacy@investta.org.

8. Cookies

We use essential cookies and local storage to maintain your session and preferences (such as theme selection). We do not use tracking cookies or third-party advertising cookies. See our Cookie Policy for details.

9. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected personal information from a child under 18, we will delete it promptly.

10. International Data Transfers

Your data may be processed in countries other than your country of residence. We take steps to ensure your data receives adequate protection regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For privacy-related inquiries, contact us at privacy@investta.org.