Angelinvest
Privacy Policy

Angelinvest Privacy Policy
Last updated: April 2025

This Privacy Policy details how AngelInvest ApS of Nybrogade 22, DK-1203, Copenhagen, Denmark (“we”, “us”, or “our”) collects, uses, and processes personal data. This policy applies to all users globally and incorporates regional privacy provisions specific to the EU, UK, and U.S.

By using our website or services, you agree to be bound by this Privacy Policy. If you do not agree, please do not use our services or submit personal data to us.

We may update this Privacy Policy to reflect changes in law or our services. Where significant changes affect your rights, we will attempt to notify you directly. You are responsible for regularly reviewing this policy.

Questions or concerns? Contact us at [email protected].

We are the data controller for all personal data provided to us and are responsible for your data under applicable privacy laws, including the EU GDPR, UK GDPR, and U.S. privacy legislation where applicable.

• Contact Data: Name, email, phone number, billing and postal addresses.
• Identity Data: Name, birth date.
• Financial Data: Payment information processed securely via Stripe.
• Technical Data: IP address, browser type/version, device ID, cookies.
• Usage Data: Website interaction data (pages visited, search history, duration).
• Marketing Data: Marketing and communication preferences.

We may also collect Aggregated Data (e.g., statistical or demographic) which is not directly linked to your identity unless combined with identifiable data.

We do not knowingly collect data from individuals under 18.

• Directly from you: via forms, email, phone, feedback, registration.
• Automatically: via cookies and analytics (Google, Stripe).
• From third parties: our service providers or partners.

For cookie usage, refer to our Cookies Policy.

• Consent
• Performance of a contract
• Legal obligation
• Legitimate interest (e.g., site security, service improvement)

Purpose	Data Types	Legal Basis
Account access, service delivery	Contact, Identity	Contract, Legitimate Interest
Communication updates	Contact, Identity	Contract, Legal Obligation
Website content/ads optimization	Technical, Usage, Marketing	Legitimate Interest
Analytics and improvements	Technical, Usage	Legitimate Interest
Marketing	Contact, Identity, Usage	Consent, Legitimate Interest
Business and site security	Technical	Legal Obligation, Legitimate Interest

We may share your data with:

• Other users (e.g., investor/startup matches per platform usage)
• Service providers (IT, hosting, legal, consultants)
• Authorities if required by law (e.g., fraud, AML compliance)
• Successors in case of a merger or acquisition

All third parties are bound to process your data in compliance with our instructions and applicable laws.

We may store or process your personal data outside the EEA, UK, or your home country (e.g., the U.S.) when:

• Using providers like Stripe, Google
• Hosting on servers outside the EU
• Transfers will always use:
• EU Standard Contractual Clauses (SCCs)
• UK ICO-approved mechanisms
• Adequacy decisions by the European Commission or UK government

Depending on your region, you have the right to:

• Access your data
• Correct inaccurate data
• Object to or restrict processing
• Request deletion (“right to be forgotten”)
• Port your data to another provider
• Withdraw consent (for marketing)

We may verify your identity before fulfilling requests. You may also contact your data protection authority:

• EU: Your local DPA
• UK: www.ico.org.uk
• U.S.: Your state’s privacy authority

You may opt in to receive updates from us. You can unsubscribe at any time via the link in emails or by contacting us. Transactional or legally required emails cannot be opted out of.
We may retain your details in a suppression list to prevent future contact.

We retain personal data only as long as necessary for:

• Fulfilling our contract
• Legal, audit, and tax compliance (e.g., HMRC)
• Security and fraud prevention

Where not required, data will be deleted or anonymized.

• Your rights are governed under EU GDPR (Regulation 2016/679).
• Complaints can be directed to your national data protection authority.

• Your rights are governed by UK GDPR and Data Protection Act 2018.
• We are committed to fulfilling obligations under UK data law.

If you are a resident of California or other applicable U.S. states:

• You may have rights under laws such as the CCPA or Virginia CDPA.
• These may include the right to access, delete, and opt-out of data sharing.
• We do not sell personal data.
• For inquiries, email us at: [email protected]

EU (inc. Denmark)	Danish law	Courts of Denmark
United Kingdom	English law	Courts of England & Wales
United States	Delaware law	Courts of Delaware

Privacy Policy Addendum (for Stripe Identity)

Identity Verification
To protect the integrity of our platform, AngelInvest requires users to verify their identity using Stripe Identity. This process involves submitting a government-issued photo ID and a live selfie.

We use Stripe, Inc. as our data processor for this verification. All sensitive identity information is handled and stored securely by Stripe, not AngelInvest. Stripe is fully compliant with GDPR and other applicable data protection regulations.

What We Store:
AngelInvest only stores metadata returned by Stripe, including verification status (e.g. passed, failed), timestamp, and user ID. We do not retain or access your ID documents or biometric data.

For more details on Stripe’s privacy practices, please visit https://stripe.com/privacy.

For questions or concerns, contact: [email protected]