Privacy Policy

crossband.io is operated by Invetics Corporation ("we", "us").

1. What information do we collect and why?

Account information: your name, email address, firm and fund, and the profile details you enter, used to create and operate your account. Sign-in is handled by Google's authentication service; we do not store your password.

Business information: the companies, financings, capitalization tables, documents and other data you enter or upload. This can include personal information about other people, such as founders, shareholders, investors and directors. We use it only to provide the Service to you and to the people you choose to share it with.

Technical information: your internet protocol (IP) address, browser and device details, and server logs, used to operate and secure the Service.

Website analytics: our public website uses analytics cookies to measure visits.

Communications: messages you send us, and service emails we send you, such as sign-up and notification emails.

If you are in the European Union or the United Kingdom, we process your personal information to perform our contract with you, for our legitimate interests in operating and securing the Service, and with your consent for marketing emails.

Email marketing (if applicable): With your permission, we may send you emails about our website, new features and other updates.

2. Consent

How do you get my consent?

When you provide us with personal information to register, update your account or use the Service, we imply that you consent to our collecting it and using it for that specific reason only.

When you register with an Access Code provided by a third party, you consent to allowing us to inform that third party, and only that third party, that you used the Access Code to register, and nothing more.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at legal (at) crossband.io.

3. Disclosure

We do not sell your personal information or share it for advertising. We disclose it only to the service providers described in Section 8 so that they can operate the Service, to the people you choose to share companies with, to Claude, if you connect it (see Section 13), if we are required by law to do so, or if you violate our Terms of Service.

4. Third-party services

Links

When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

5. Security

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Information is transmitted over encrypted (TLS/SSL) connections, and sensitive fields are encrypted at rest. No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Our security practices are described in full in our Security Policy.

We do not currently process payments or collect payment card information through the Service. If we enable payments in the future, card and payment details will be handled by a third-party payment processor (such as Stripe) that is responsible for the security of that information under applicable standards, including PCI-DSS; we do not store full payment card numbers on our systems.

Cookies

We use cookies and similar technologies for essential purposes, including keeping you signed in (authentication) and remembering your cookie-consent preferences. Our public website also uses analytics cookies to measure visits. We do not use cookies to sell your information or for advertising. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in or using parts of the Service.

6. Age of consent

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

7. Changes to this privacy policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our website is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide the Service to you.

8. Documents, AI processing, and service providers

The Service allows you to upload financial and legal documents and related data, which may contain sensitive and confidential information. To provide features such as document extraction, comparison, and generation, we transmit the contents of documents and data you submit to third-party artificial-intelligence providers (currently Anthropic and Google) that process the content and return results to us. We use these providers under paid, commercial terms: they do not use your content to train their models, we do not use your content to train our own models, and we do not sell it. This describes our own use of these providers. If you connect your own Claude account, Section 13 applies to what is sent to it.

We also rely on service providers to operate the Service, including for cloud hosting and storage, sign-in, email delivery, website analytics, and the public research databases used by research features. If you connect Clio, the information you choose to import or export is exchanged with Clio (see Section 12). A list of our service providers is available on request. These providers, including our AI providers, may process your information outside your country of residence, including in the United States. We require our service providers to protect your information consistent with this policy.

Sensitive fields are encrypted, and you remain responsible for ensuring you have the right to upload any document and to have it processed as described. We handle personal information in accordance with applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

9. Where your information is stored and how long we keep it

Your information is stored in the United States. Our AI providers may process content in the United States and other countries.

We keep your account and business information while your account is active, and technical logs and backups for limited periods.

You can delete your account and its data at any time from your profile page, or by emailing support (at) crossband.io. Deleted information is removed from our systems, including backups, within 30 days, except the connection and activity records described in Section 13. Our AI providers delete content they received under their own retention terms.

10. Your rights

Depending on where you live, privacy laws including PIPEDA, the European Union and United Kingdom General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) give you rights over your personal information. You may ask us to tell you what personal information we hold about you and give you a copy, to correct it, to delete it, and to stop using it for a particular purpose or withdraw your consent. In the European Union or United Kingdom you may also ask us to restrict how we use it or to provide it in a portable format, and you may object to processing based on our legitimate interests. California residents: we do not sell or share personal information, and we will not treat you differently for exercising your rights.

To make a request, email legal (at) crossband.io. We may need to confirm your identity, and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or to your local data protection authority.

Where personal information about other people, such as the shareholders in a capitalization table, was entered by one of our customers, we process it on that customer's behalf, and requests about it should normally be made to that customer.

11. Security incidents

If a security incident affects your personal information, we will notify you without undue delay and will notify regulators as required by applicable law.

12. Clio

If you connect your Clio account, we use Clio's own sign-in and never see your Clio password. We access only the matters and documents you choose and store our Clio credentials encrypted. Documents imported from Clio are deleted once they have been analyzed. When you disconnect Clio, we delete our Clio credentials and our analysis of the documents imported from Clio.

13. Claude

You may connect your account to Claude, an artificial-intelligence assistant provided by Anthropic. You sign in with crossband.io and approve the connection, and Claude does not receive your crossband.io password.

What Claude receives. When you use the connection, we send Claude the information requested from your account. This can include company information, such as capitalization tables, the names and holdings of shareholders and investors, financing terms and extracts from documents. Once sent, this information is held in your Claude account and is governed by your agreement with Anthropic and Anthropic's privacy policy, not by this policy. You remain responsible for ensuring you have the right to send it to Claude.

What we receive. We receive the requests needed to perform each function, and any information or documents you submit in a crossband.io form shown in Claude. Information you save this way is treated like information you enter on our website. We do not request or receive your other conversations with Claude, your chat history or Claude's memory.

What we keep. To secure the Service and for audit purposes, we keep records of your connection and of each request, including your email address, the function used, the company concerned, the time, the result, and IP address and device details. We keep these records for up to 400 days, including after you disconnect or delete your account. Documents generated through the connection are available to download for 24 hours and are then deleted.

Disconnecting. You can disconnect at any time from your profile page, which ends Claude's access. This does not remove information already in your Claude account, which you manage with Anthropic.

Questions and contact information

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at legal (at) crossband.io. For help using the Service, contact support (at) crossband.io.