Privacy Notice

The information we collect depends on how you use PinakX and whether you participate as a Startup, Investor, authorised representative or other user.

Personal Data you provide

• Account and contact information, including name, email address, phone number, account details, company or organisation, professional role, location and information required to create and manage an account.
• Identity and government identification information, including Aadhaar information, PAN, government-issued identification and other information required to verify identity, where applicable.
• Investor verification and compliance information, including date of birth, nationality or country of residence, beneficial ownership, investor eligibility or accreditation information, verification results, and information required for fraud prevention, anti-money laundering, sanctions or other compliance purposes.
• Banking and financial information required for verification, investment-related or transaction-related purposes.
• Startup and company information, including incorporation and registration information, founder and management information, fundraising requirements, ownership and capitalisation information, financial information and projections.
• Startup and transaction documents, including pitch decks, fundraising materials, financial models, diligence materials, contracts, corporate documents and other materials submitted in connection with Platform workflows.
• Investor information, including organisation or investment-vehicle information, investment mandate, preferred sectors, geographies, stages, ticket range, experience and investment preferences.
• Communications and workflow information, including messages, support requests, uploaded or shared documents, access requests, approvals, permissions, views, downloads, matching and diligence activity, timestamps and audit records.

Information collected automatically

When you use PinakX, we may automatically collect IP address; browser, device and operating-system information; device identifiers; login and session information; Platform usage and interaction information; security and authentication events; approximate location derived from IP address; cookies and similar technologies; and diagnostic and performance information.

Information from third parties

We may receive Personal Data from your organisation, another authorised user, a Startup or Investor, identity-verification or compliance providers, professional advisers, publicly available business or professional sources, government or regulatory sources, transaction participants and other lawful sources.

PinakX is designed to process information reasonably necessary for fundraising readiness, startup–investor discovery, diligence, communications and deal workflows.

Please do not upload unnecessary Personal Data about third parties, including customers, patients, research participants, employees, children, unrelated vendors or other individuals whose information is not reasonably necessary for the relevant Platform activity.

Where identifying information is not necessary, we recommend that you redact, mask or pseudonymise it before uploading a document. If you provide Personal Data relating to another individual, you are responsible for ensuring that you are authorised to provide that information and that applicable legal requirements have been satisfied.

We process Personal Data for purposes connected with operating, improving, securing and providing PinakX.

Providing the Platform

Creating and managing accounts; authenticating users; providing Platform functionality; providing customer and technical support; managing permissions; and communicating with users.

Fundraising readiness and document intelligence

Assessing fundraising-readiness indicators; organising and analysing fundraising materials; identifying missing, incomplete or inconsistent information; supporting the preparation and improvement of materials; providing structured insights; and suggesting workflow actions or next steps.

Startup–Investor discovery and matching

Identifying potentially relevant counterparties; comparing Startup characteristics with Investor mandates; facilitating introductions; presenting relevant opportunities or mandates; managing access requests; and supporting deal progression. A match, ranking, score or recommendation is not investment advice, a valuation, a recommendation to invest, a guarantee of suitability or a guarantee that a transaction will close.

Due diligence, security and legal purposes

Supporting document review, diligence workflows, issue identification, verification, risk evaluation and transaction readiness; detecting and preventing unauthorised activity, fraud and abuse; protecting accounts and systems; investigating security incidents; enforcing our terms; complying with law; maintaining records; resolving disputes; obtaining professional advice; responding to lawful requests; and managing corporate transactions.

Product development and communications

We may improve Platform functionality, matching and workflow features, security and performance, develop new features, and understand how users interact with PinakX. Where reasonably practicable, we may use aggregated, anonymised or de-identified information. We may send account, security, service, support, workflow, transaction, legal and regulatory communications, as well as promotional communications where permitted by law. You may opt out of promotional communications; essential communications may still be sent where necessary.

PinakX may use AI-assisted and automated technologies for document classification and information extraction, fundraising-readiness analysis, identification of gaps or inconsistencies, structured diligence, risk or readiness indicators, startup–investor matching, recommendations and workflow suggestions.

AI-generated or automated outputs are decision-support tools and may contain errors or omissions. Users should independently review important outputs before relying on them. PinakX does not represent that any AI-generated assessment, score, summary, risk indicator or matching result constitutes legal, financial, tax, investment or other professional advice.

Where applicable law provides rights relating to profiling or automated decision-making, we will comply with those requirements.

PinakX's proprietary Trust-to-Close workflow is designed to support controlled progression from startup–investor discovery through diligence and deal readiness.

To operate this workflow, we may record match events; access requests; approvals and denials; permissions; confidentiality acknowledgements; document access and downloads; communications; diligence actions; workflow status; timestamps; permission changes; and revocation events.

We use these records to administer the workflow, maintain security, support auditability, investigate misuse, resolve disputes, improve the Platform and meet legal or contractual requirements. Where access is revoked, revocation generally prevents further access through PinakX but cannot retrieve information already downloaded, copied or retained by a recipient.

We may share Personal Data where reasonably necessary to provide PinakX, facilitate an authorised transaction or workflow, comply with law, protect our rights, or operate our business.

Startups and Investors

PinakX is a two-sided platform. Information submitted by one user is not automatically available to every other user. Depending on the applicable workflow and permissions, Startup information may be shared with authorised Investors, and Investor information may be shared with relevant Startups or their authorised representatives. Where appropriate, identifying information may be limited during an initial matching stage and disclosed later when the relevant workflow permits.

Service providers and professional advisers

We may share Personal Data with providers supporting hosting and cloud infrastructure, storage, cybersecurity, authentication, identity verification, compliance and fraud prevention, communications, document processing, analytics, customer support, payments and Platform operations. We may share Personal Data with lawyers, accountants, auditors, insurers, consultants and other professional advisers where reasonably necessary.

Regulators, authorities and corporate transactions

We may disclose Personal Data where required or reasonably necessary to comply with law, legal process, regulatory requirements or lawful requests, or to protect our rights, property, safety or systems. If Zeltar Ventures or the PinakX business is involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency or similar transaction, Personal Data may be disclosed as part of that transaction, subject to applicable law.

We may also disclose Personal Data when you instruct us to do so or where disclosure is necessary to provide a service you have requested.

PinakX facilitates the controlled sharing of business and investment information. However, privacy and confidentiality are not the same thing.

Pitch decks, financial models, intellectual property, source code, customer information, contracts, valuations, cap tables, transaction terms, investment mandates and diligence materials may be subject to separate NDAs, confidentiality agreements, Platform terms or transaction restrictions.

Once information has been lawfully disclosed to an authorised Startup, Investor, adviser, counterparty or other recipient, Zeltar Ventures cannot guarantee that the recipient will not retain, copy, download, reproduce or otherwise use that information. Users are responsible for complying with the confidentiality obligations applicable to information they receive through PinakX.

Where the GDPR or another applicable law requires us to identify a legal basis, we may rely on contract, where processing is necessary to provide PinakX or fulfil a requested workflow; legal obligation, where processing is necessary to comply with law, regulatory requirements, tax or accounting obligations, lawful requests, or applicable AML, securities or other regulatory requirements; legitimate interests, where permitted by law, including security, fraud prevention, Platform improvement, product development, administration, enforcement of agreements and protection of legal interests; and consent, where consent is legally required.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Zeltar Ventures intends to operate PinakX in accordance with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), to the extent applicable.

The DPDP framework has a phased commencement structure. We will update this Privacy Policy and our practices as the relevant provisions become effective and as applicable legal requirements evolve.

PinakX and our service providers may process Personal Data in India and other countries. Where an international transfer is subject to specific legal requirements, we will implement appropriate safeguards required by applicable law. For transfers subject to the GDPR, safeguards may include adequacy decisions, Standard Contractual Clauses or other legally recognised transfer mechanisms, together with supplementary safeguards where appropriate.

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law. Retention may depend on the nature of the information, the purpose of processing, account status, transaction or fundraising lifecycle, security requirements, contractual obligations, legal or regulatory requirements, tax and accounting requirements, disputes or legal claims, and applicable limitation periods.

Certain transaction, compliance, communication, audit and security records may need to be retained after an account is closed. We do not apply one fixed retention period to all Personal Data. When information is no longer required, we may securely delete, anonymise or de-identify it, subject to applicable law.

Depending on your location and applicable law, you may have rights to access your Personal Data; request correction of inaccurate Personal Data; request deletion or erasure; restrict or object to certain processing; request portability of eligible Personal Data; withdraw consent where processing relies on consent; object to certain direct marketing; exercise rights relating to profiling or automated decision-making; and lodge a complaint with an applicable regulator or data protection authority.

These rights may be subject to legal limitations and exemptions. To exercise an applicable right or raise a privacy concern, contact the Privacy / Grievance Contact identified below. We may take reasonable steps to verify your identity before responding.

PinakX may use cookies and similar technologies for authentication, security, preferences, analytics, performance and diagnostics. Where applicable law requires consent for non-essential cookies or similar technologies, we will provide an appropriate consent mechanism.

PinakX may also contain links to or integrate with third-party websites, applications or services. Where a third party independently determines how and why it processes Personal Data, its own privacy notice may apply. Additional information about cookies and analytics may be provided through a separate Cookie Policy or Notice.

We maintain administrative, technical, physical and organisational safeguards designed to protect Personal Data against unauthorised access, use, alteration, disclosure, loss or destruction. Depending on the nature and risk of the processing, safeguards may include access controls, authentication, encryption, secure storage, logging and monitoring, incident response, backup and recovery, confidentiality obligations, vendor controls and security testing.

No electronic service can guarantee absolute security. You are responsible for protecting your account credentials and should promptly report suspected unauthorised access.

We maintain procedures designed to identify, investigate, contain, remediate and respond to Personal Data breaches and other security incidents. Where applicable law requires notification to individuals, regulators or authorities, we will provide notification in accordance with the applicable requirements.

PinakX is a professional B2B platform intended for adults and is not directed to children. We do not knowingly solicit Personal Data from individuals below the minimum age permitted by applicable law.

You should provide accurate information; submit only information you are authorised to provide; comply with applicable confidentiality obligations; minimise third-party Personal Data; protect your account credentials; and promptly report suspected unauthorised access or disclosure.

If you provide Personal Data relating to another individual, you are responsible for ensuring that you are authorised to provide that information and have complied with applicable requirements.

PinakX is intended to facilitate startup–investor discovery, readiness, evaluation, diligence and deal workflows. Nothing in this Privacy Policy represents that Zeltar Ventures is a broker-dealer, investment adviser, fund manager, securities exchange, securities intermediary or other regulated financial institution.

Where a transaction involves a regulated participant, that organisation may independently process Personal Data to satisfy its own legal, regulatory, KYC, AML, tax, suitability, investor-protection or recordkeeping obligations. Its own privacy notice may apply.

We may update this Privacy Policy to reflect changes to PinakX, our processing activities, services, service providers, legal requirements or privacy practices. Where an update materially changes how we process Personal Data or materially affects your rights, we will provide appropriate notice and obtain consent or other acknowledgement where required by law. The Last Updated date identifies the latest version.

Zeltar Ventures LLP
Attn: Privacy / Data Protection
Grievance Contact: info@pinakx.in

Please do not send confidential transaction documents or sensitive Personal Data to this email unless specifically requested.