Privacy Policy

This privacy policy explains what personal data Vertury collects, why, how long we keep it and what rights you have. It applies to vertury.eu and all services on it.

1. Who is responsible

Vertury Platforms AB (org. no. 559603-0063), Olof Af Acrels Väg 7, 171 64 SOLNA , Sweden, is the controller for the personal data described here. Questions about privacy: zozo@vertury.eu.

2. What we collect

Waitlist: if you join our waitlist, we collect your e-mail address, the role you choose (bringing an idea, helping build, investing) and, if you choose to answer, how far your idea has come, what you need first, a one-sentence description, your country and what you would be willing to pay. We also record which version of the page you saw, how you found us (for example a campaign link or an invite link from another member) and when you gave your consent. To limit abuse we store a one-way hash of your IP address, never the address itself.

Try it: you can try Vertury before launch without an account. We then create an anonymous session; no name or e-mail is needed. We store what you write or say in the intake conversation, the Vertury draft created from it and the investor matches we show you. To limit abuse we store a one-way hash of your network's IP address, never the address itself. We ask you not to share confidential details such as formulas, code or methods before an NDA is in place. Only you can see your trial; we do not show or share it with investors or other members.

Account data: your e-mail address, name and a securely hashed password (if you use one).

Sign in with Google or LinkedIn: if you choose this, we receive your name, e-mail address and profile photo from that provider. We do not receive your password, and signing in does not give us access to your contacts, posts, messages or any other data in your Google or LinkedIn account.

Importing your LinkedIn connections (optional): you can choose to import your LinkedIn connections so that Vertury can show which of your own contacts could introduce you to relevant investors, companies or people on Vertury. You start the import yourself, either by authorising Vertury through LinkedIn's data portability service (available to members in the EU/EEA) or by uploading the connections file you have downloaded from LinkedIn. We receive, for each 1st-degree connection, their name, position, company and the date you connected. We do not receive their e-mail addresses, your messages or any other data. Connections that do not match an investor, a portfolio company or a member in Vertury's registry are discarded immediately and are not stored. Matched connections are visible only to you.

Profile data you add: headline, organisation, city, country, LinkedIn URL, bio, skills, interests, what you are open to, and a profile photo.

Verification and NDA: whether and when you verified your identity, and which version of our non-disclosure agreement you accepted, with the date and the name you entered.

Content you share: information about your ideas and ventures, documents you upload, updates, applications and investment proposals, and messages you send to other members.

Access records: when a member requests, is granted or downloads confidential material, we log who, what and when. These records protect the people who share confidential information on Vertury.

AI-assisted intake: when you describe your idea to our assistant, the conversation is processed to structure your venture profile. If you use voice input, the recording is transcribed and then discarded; we do not store the audio.

Technical data: log data such as IP address, browser type and timestamps, used for security and to keep the service running. We measure how the website is used with PostHog in a cookieless mode: no cookies or similar technologies are stored on your device for analytics, and visitors are counted with an anonymous identifier that changes every day. We only use cookies that are necessary for login, security and the site to work. We do not use advertising or tracking cookies.

3. Why we use it and our legal basis

To provide the service you signed up for: your account, profile, ventures, matching, messaging and document access (performance of contract).

To show you warm introductions through your own LinkedIn connections, if you choose to import them (your consent, which you can withdraw at any time by removing the import). For the people in your import, we rely on legitimate interest: we use only their name, position, company and connection date, only to show you who you already know, and we discard everyone who does not match our registry.

To manage the waitlist, send you your invitation and occasional updates about Vertury's launch (consent; you can withdraw it at any time via the link in every e-mail or by contacting us).

To let you try Vertury and show you a draft of your idea and relevant investors (steps taken at your request before an agreement, and legitimate interest), and to develop and improve our service, including the intake conversation and investor matching (legitimate interest).

To understand how the website is used and improve it, including comparing versions of our pages (legitimate interest; measurement is cookieless and does not identify you).

To protect confidential information and prove who had access to what (legitimate interest, and to establish or defend legal claims).

To keep the service secure and prevent misuse (legitimate interest).

To send you service e-mails such as login links, confirmations and notifications about your activity (performance of contract). We do not send marketing e-mails without your consent.

To meet legal obligations, for example bookkeeping (legal obligation).

4. Google and LinkedIn user data

Vertury's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use your Google name, e-mail address and profile photo to create and identify your Vertury account. We never sell this data, use it for advertising, or use it to train AI models.

Data we receive from LinkedIn, including imported connections, is used only for the purposes described in this policy and in accordance with LinkedIn's terms for its APIs. We never sell it, use it for advertising, share it with other members or third parties, or use it to train AI models.

5. Who we share data with

Other members see what you choose to publish, according to the confidentiality level of each part of the platform: public teasers, extended profiles for verified members who accepted the NDA, and full materials only after the owner approves a request. Imported LinkedIn connections are never shown to other members.

We use the following service providers, who process data on our behalf under data processing agreements: Supabase (database, file storage and authentication, hosted in the EU), Vercel (hosting), Resend (e-mail delivery, EU), PostHog (website analytics, hosted in the EU), Anthropic (AI assistant for the idea intake, including Try it) and OpenAI (voice transcription and image generation). Some of these providers are based in the United States. Where data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

We do not sell personal data.

6. How long we keep it

Waitlist data is kept until you create an account or for 24 months after you joined, whichever comes first, unless you ask us to remove it earlier.

Trials you do not save are deleted automatically 30 days after you started them. If you save a trial by joining the waitlist, it is kept together with your waitlist data and becomes your draft when Vertury opens.

Imported LinkedIn connections that do not match our registry are discarded immediately. Matched connections are kept until you remove the import, disconnect LinkedIn or delete your account, and are then deleted.

Analytics data is kept for up to 12 months.

We keep your account data for as long as you have an account. When you delete your account, we remove your login, profile, photo and saved items, and take down ventures you own. Records of accepted NDAs and access to confidential material are kept without your name, because other members depend on them to protect their information. Technical logs are kept for a limited period for security. Bookkeeping data is kept as long as required by law.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, and to receive your data in a portable format. You can edit most of your data yourself on your profile and delete your account from the profile page. You can remove an imported LinkedIn list at any time. If you believe you appear in another member's imported connections and want to object, contact us and we will remove you. For waitlist data, trials and other requests, contact us at zozo@vertury.eu. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Changes

If we change this policy, we publish a new version here with a new version number and date. If the changes are significant, we will notify you.