Transparency notice

Who processes your information, and in what role

GetDeal.AI assesses companies for investors and for its own marketplace. Where that work involves information about a person — a founder, a director, a person with significant control — GetDeal Inc. is a controller of that information.

Where an investor commissions an assessment under terms that make GetDeal and that investor joint controllers for the analysis and its delivery, those terms make GetDeal your single point of contact for every right described below, so you never have to find out who the investor was in order to exercise them. Until an investor has agreed such terms, GetDeal is the controller of the assessment it produces, and the same point of contact applies.

The assessment engine this notice describes is being built. Today, the analysis shown for a listing or produced for an investor request is generated by a third-party analysis service from a company’s own public website and other public sources, and this notice, our retention practice and your rights apply to what the platform holds from it.

What we collect

Only what a company assessment needs, and nothing that would let us assess you as a person. We score companies, never people. The engine is designed to collect no more than the following about a person:

• Your full legal name as it appears in a public register
• Role titles, with dates where they matter to a claim a company has made
• Directorships, officer appointments and significant-control entries
• Disqualification status, from the official register
• The outcome of a sanctions check, once a person has reviewed it
• Regulatory permissions, where a company says it holds a licence
• Whether you were a founding shareholder, and of which share class
• Whether you are declared as working full time
• Authorship of code in a repository the company has given us access to
• Contact details for references the company itself nominated

What we never collect

None of the following is stored by the engine, whatever its source:

• Copies of LinkedIn profiles
• Social media posts
• Identity documents
• Images of your face
• Contact details of employees who are not founders
• Full copies of anyone else’s copyrighted material

Where the information comes from

Public company registers, regulator registers and sanctions lists; the company’s own website and materials; documents the company supplied to us; and, once terms are signed with one, licensed data providers. We keep a register of every source the engine may use, the date its terms were reviewed, and the person accountable for the next review.

Our legal bases

Information a company submits to us is processed to perform our agreement with that company. Information from public registers is processed under our legitimate interest in assessing companies accurately, balanced against your interests; the written assessment of that balance is being prepared alongside the engine. Sanctions checks, once the engine runs them, are processed to comply with legal obligations. Where we rely on consent, we ask for it separately.

How long we keep it

Retention depends on the role the information plays, not on where it is stored. Under our retention schedule, raw information about a person that never reaches a delivered report is deleted within 30 days, and information that does appear in a report delivered to an investor is kept for six years from the last delivery, because the report is a record of what was said to someone on a particular date, and then destroyed. The automated deletion that enforces this schedule is being built with the engine; until it runs, deletion under the schedule is carried out by hand.

Your rights, and how to use them

You can ask to see the information we hold about you, correct it, object to its use, and ask for it to be erased. To protect you, we verify your identity before disclosing it.

If you object and we have no overriding reason to continue, we stop using the information about you. An investor reading an assessment will then see that information about individuals has been withheld — we show that it was withheld rather than quietly leaving it out, so nobody is misled about what the assessment contains.

Where the information already appears in a report we delivered, we cannot unsay it, so instead we lock it: it is kept, but excluded from any further use and from any future version of the report.

Why you may not have been told individually

When an investor commissions an assessment of a company, we do not contact the people involved at the time. Doing so would reveal to them that a particular investor is considering a transaction, which would break the confidence that investor is entitled to. That confidentiality is the reason individual notice is not given at that stage, and this page exists so that the information is available to everyone instead.

You are told individually once the transaction completes, or once the process becomes public.

Our two roles

GetDeal operates a marketplace and may in future operate an investment fund. Information held by the marketplace is to be kept separate from any fund, which would access companies on the same terms as any other investor and have no privileged view of what the marketplace holds.

Contact, and complaints

To exercise any of these rights, or to ask about this notice, email support@getdeal.ai. You also have the right to complain to a data protection supervisory authority — in the UK, the Information Commissioner’s Office.