Privacy Policy
Last updated 30 July 2026
Short version: we collect what we need to run the network, we show your profile and posts to other users because that is the point of the product, we do not sell your data, and you can get it deleted by asking.
1. What we collect
- What you give us. Name, email, password (stored hashed, never in readable form), role, profile photo, company and venture details, pitch content, milestones and updates, investment thesis, messages, and anything else you type into Xoventra.
- What happens automatically. IP address, browser and device type, pages viewed, referring page, and timestamps. We use this to keep the service running, spot abuse, and understand which parts of the product people actually use.
- From third parties. If you sign in with Google, we receive your name, email address, and profile picture from that account. We never receive your Google password.
2. Why we use it
To create and secure your account; to publish your profile and posts to the people the network is meant to reach; to match founders and investors on stage, sector, ticket size, and geography; to deliver notifications and messages; to prevent fraud, spam, and abuse; to measure and improve the product; and to comply with the law.
We rely on your consent for marketing email and on our legitimate interest in operating a functioning network for the rest. You can withdraw consent at any time.
3. What other people can see
Xoventra is a network, so much of it is deliberately visible:
- Your profile, pitch, milestones, and posts are visible to other signed-in users, and may be visible to the public web and to search engines.
- Investors matched to your thesis can see the venture details you have published.
- Messages are visible to the people in the conversation. Assume anything you send can be forwarded.
Your email address, password, and account settings are never shown to other users. Please do not put confidential or non-public financial information into a public pitch.
4. Who we share it with
We do not sell your personal data, and we do not share it with advertisers. We share it only with:
- Service providers who run parts of our infrastructure - hosting, file and image storage, email delivery, and analytics - under contract and only to provide those services.
- Google Analytics, which sets cookies to measure site usage. You can opt out with Google's browser add-on or by blocking cookies.
- Authorities, where we are legally required to, or to protect the safety and rights of our users.
- A successor, if Xoventra is acquired or merged - in which case this policy travels with your data and we will tell you.
5. Cookies
We use cookies that are necessary to sign you in and keep your session secure, and analytics cookies to measure usage. Blocking necessary cookies will break login. You can clear or block cookies in your browser at any time.
6. How long we keep it
We keep your account data while your account is open. After you delete your account we remove your profile and personal data within 30 days, except where we must retain something to meet a legal obligation, resolve a dispute, or enforce our terms. Backups are overwritten on a rolling basis and are purged within 90 days. Aggregated statistics that cannot identify you may be kept indefinitely.
7. Security
Traffic is served over HTTPS, passwords are hashed, and access to production data is limited to the people who need it. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify affected users without undue delay.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop sending you marketing. Most of this you can do yourself from your profile settings; for anything else, email contact@xoventra.com and we will respond within 30 days. Every marketing email has a one-click unsubscribe link.
9. Children
Xoventra is not for anyone under 18. We do not knowingly collect data from children, and we delete it if we discover we have.
10. International transfers
Our hosting and storage providers may process data on servers outside Nepal. Where that happens, we use providers that offer appropriate contractual safeguards.
11. Changes
If we make a material change to this policy, we will post a notice on the site or email you before it takes effect. The “last updated” date above always reflects the current version.
12. Contact
Privacy questions, data requests, and complaints: contact@xoventra.com.
This document is a plain-language draft prepared for Xoventra's launch and is not legal advice. Have it reviewed by a lawyer before relying on it, and update section 4 whenever you add or change a data processor.