Privacy Policy

Enlighten Capital ("Enlighten", "we") decides how and why your data is used on One Pitch, so we are the data fiduciary under India's Digital Personal Data Protection Act, 2023. Contact us at goutham.s@enlightencapital.in.

Everyone: name, email address, organisation name, role (startup, VC, investor or admin), and your password (stored only as a secure hash by our sign-in provider).

Startups: the application you submit, including company and founder details, contact email and number, website, stage, sector, funding ask, previous funding, valuation, revenue, and the documents you upload: pitch deck, due diligence report, valuation report, audited financial statements and MIS data.

VCs and investors: your fund profile (about, location, sectors, stages, cheque size, website), your interest, scores and notes on startups, and the amounts you indicate or commit to deals.

Pitch days: your pitch slot, time and meeting link, and the reminders and invitations we send.

Syndication: terms, commitments and fee records for deals Enlighten invests in and shares with co-investors.

Technical data: a sign-in cookie that keeps you logged in, and basic server logs (such as time, address and errors) kept by our hosting provider for security and troubleshooting. We do not use advertising or tracking cookies.

• To run your account and the platform: review applications, shortlist and match startups to VCs, schedule pitch days, and record feedback and interest.
• To send emails about your account and activity: application receipts, approvals, status changes, new matches, replaced decks, calendar invitations and pitch-day reminders.
• To manage Enlighten's own investments and co-investment (syndication), including fee records.
• To keep the platform secure, prevent misuse and meet legal duties.

We do not sell personal data and we do not use it for advertising.

One Pitch can create Google Meet links for pitch slots. To do this, a super admin connects one shared Enlighten Google account once, and One Pitch asks for the Google Calendar scope calendar.events (view and edit events on that account's calendar). Nobody else is asked to sign in with Google, and startups, VCs and investors are never asked for access to their own Google accounts.

What we do with it:

• Create a calendar event with a Google Meet room for each pitch slot, and later update its time and guest list. The guest list is the founder and the matched VCs for that slot, using the email addresses they gave us.
• Store the Meet link on the pitch slot so it can appear in invitations, reminders and the portals.
• Store a Google refresh token for the connected account in a protected database table that only our server can read. A super admin can disconnect the account at any time, which deletes the token. You can also remove One Pitch's access from the Google account's security settings.

We use this data only to provide and improve this scheduling feature. We do not use Google user data for advertising, we do not sell or share it with third parties or data brokers, and we do not use it to train artificial intelligence or machine learning models. No person reads your Google data except as needed to operate the feature, for security, or to meet the law.

One Pitch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Enlighten admins can see all records on the platform.
• Matched VCs see a startup's summary, key numbers and pitch deck. They see the other four documents (the data room) only after Enlighten opens it for that startup.
• Approved investors see startups Enlighten has invested in or is syndicating, under the same data room rule.
• Startups see their own application and pitch slot. They do not see VC feedback.
• Public directory: a startup appears on the public pages only if its founder requests it and an admin approves it. Only name, sector, stage, description, website and an "Enlighten backed" badge are shown. A VC appears only if it ticks the box on its profile and shows only the profile fields it entered. You can turn a listing off at any time.

Access rules are enforced in the database, not only in the screens you see. Documents sit in private storage and are opened with short-lived links.

We use these providers to run One Pitch. They process data for us and may not use it for their own purposes:

• Supabase for sign-in, database and file storage.
• Vercel for hosting.
• Resend for sending email.
• Google for calendar events and Meet (section 4).

Some of these providers store or process data outside India. We also share data where the law requires it, or in a sale or restructuring of the business with the same protections.

We keep your account and records while your account is active and for as long as needed for the purposes above, for Enlighten's investment and regulatory records, and to settle disputes. Syndication and fee records may be kept longer for accounting and audit. When you ask us to delete your account we remove or anonymise personal data unless the law or an active deal requires us to keep it.

Data is encrypted in transit. Files are in private storage. Access is limited by role and approval, and disabled accounts lose access immediately. No system is perfectly secure, so please use a strong password and tell us at once if you suspect misuse of your account.

You can ask us to:

• show you the personal data we hold about you;
• correct or complete it;
• delete it, or close your account;
• withdraw consent for a public listing or for emails, which you can also do inside the platform where offered;
• raise a grievance, and nominate someone to exercise these rights for you.

Write to goutham.s@enlightencapital.in. We aim to reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India once it is in operation for your complaint.

One Pitch is for businesses and professionals. It is not meant for anyone under 18, and we do not knowingly collect their data.

We may update this policy. We will change the date at the top and, for important changes, tell you by email or in the platform.

One Pitch, an initiative of Enlighten Capital, Chennai, India.
Email: goutham.s@enlightencapital.in