Zaphon

1. Information We Collect

We collect information you provide directly:

Email address (required for authentication)
Full name, company name, phone number (optional profile information)
Investment interest amounts and notes
Messages sent through the platform

We automatically collect:

IP address and user agent (for security and audit logging)
Access timestamps and actions performed (audit trail)

2. How We Use Your Information

To authenticate and secure your account
To facilitate communication between investors and deal sponsors
To maintain an audit trail of platform activity for security purposes
To send transactional emails (investment status updates, messages)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit. We use industry-standard security measures including row-level security policies, rate limiting, and comprehensive audit logging. Authentication is handled via secure magic link tokens — no passwords are stored.

4. Data Retention

Account and investment data is retained for the duration of your membership and for a minimum of 7 years after account closure (for regulatory compliance purposes). Audit logs are retained indefinitely. You may request data export or deletion by contacting the platform administrator.

5. Third-Party Services

We use the following third-party services to operate the platform:

Supabase (database, authentication, file storage)
Vercel (hosting, CDN)
Resend (transactional email delivery)

Each operates under their own privacy policies and data processing agreements.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to regulatory requirements)
Export your data in a machine-readable format

To exercise these rights, contact the platform administrator directly.

7. Cookies

We use essential cookies only — specifically for authentication session management. We do not use advertising, tracking, or analytics cookies.