Privacy Policy

Last Updated: October 15, 2026

This Privacy Policy (the “Policy”) describes how Raisi, Inc., a Delaware corporation (“Raisi,” “Company,” “we,” “our,” or “us”), collects, uses, discloses, and protects information of individuals and entities (“you,” “your,” or “User”) who access or use our website located at https://www.raisi.ai, our software platform, and any related products, features, or services (collectively, the “Services”).

This Policy explains our information practices and your choices. Visiting or using the Services does not by itself provide consent to optional analytics or advertising technologies.

This Policy applies to all Users of the Services, including founders, fund managers, investors, business operators, prospective clients, and site visitors. This Policy is designed to comply with applicable U.S. federal and state laws, international data privacy regulations, and best practices for SaaS platforms operating in financial technology and regulated capital markets infrastructure.

IMPORTANT: Raisi is not, and does not operate as, a broker-dealer, investment adviser, placement agent, or underwriter as defined by the U.S. Securities and Exchange Commission (SEC), the Financial Industry Regulatory Authority (FINRA), or any state securities regulator. Nothing in this Policy or the Services constitutes investment advice, a solicitation, or an endorsement of any security or investment opportunity.

1. Scope and Applicability

This Policy governs the collection, use, processing, storage, transfer, and disclosure of personal information and other data in connection with the Services. It applies to information collected through any channel controlled by Raisi, including the website, web applications, mobile interfaces, email communications, customer onboarding workflows, and any related APIs or integrations.

Third-party sites that you visit independently have their own privacy practices. This Policy describes Raisi’s collection and disclosure through the Services, including the analytics and advertising integrations described below. Those partners may also process information under their own privacy policies.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including when you create an account, request services, communicate with our team, complete intake forms, or otherwise interact with the Services. This information may include:

• Name, email address, telephone number, and business or billing address;
• Company name, role or title, industry, funding stage, and related business information;
• Authentication credentials, account preferences, and profile information;
• LinkedIn URLs, website links, and other professional identifiers;
• Investor or founder profile preferences, including sector, stage, deal size, and geographic focus;
• Information submitted via forms, onboarding surveys, pitch deck intakes, coaching sessions, or support inquiries;
• Payment and billing information (processed through third-party payment processors; see Section 4);
• Any other information you choose to share with us in the course of using the Services.
  

2.2 Information Collected Automatically

Depending on the Services you use and your privacy choices, we, our service providers, and analytics or advertising partners may collect technical and usage information, including:

• IP address, device identifiers, and general geolocation data derived from IP;
• Browser type, version, operating system, and language preferences;
• Pages visited, time on site, referring URLs, clickstream data, and session duration;
• Event and interaction data (e.g., feature usage, form submissions, outreach activity);
• Cookie data, pixel tags, local storage identifiers, and similar tracking technologies;
• Log files, diagnostic data, and security telemetry.
  

The public website uses integrations including Google Analytics, Google Ads, Meta Pixel, and HubSpot. These tools may receive pages viewed, interaction events, device information, IP addresses, and browser or cookie identifiers. Google and Meta may combine information with information from their own services. Our separate software application may use PostHog for product analytics. See Sections 4.7 and 5 for website tracking purposes and privacy choices.

2.3 Third-Party and Publicly Available Data

To power our investor discovery, matching, and campaign intelligence functionality, Raisi enriches its datasets with information obtained from publicly available and licensed third-party sources. These sources may include:

• Public websites of venture capital, private equity, and institutional investors;
• Professional networking platforms, firm websites, and portfolio pages;
• SEC filings and other publicly available government databases;
• News articles, press releases, podcasts, and other publicly disseminated media;
• Reputable third-party data providers operating under commercial agreements;
• Open-source datasets and research directories.
  

Enriched data supports investor discovery, targeting, signal modeling, and campaign optimization. The website’s analytics and advertising disclosures are described separately in Sections 4.7 and 5.

2.4 Information From Clients and Users

If you are a client, you may upload, transmit, or otherwise provide information related to your business, fundraise, or outreach campaigns (“Client Materials”). You are solely responsible for ensuring that all Client Materials are lawfully obtained, accurate, and provided with all necessary rights, consents, and disclosures required under applicable law. Raisi processes Client Materials solely to deliver the Services and in accordance with our Terms and Conditions.

3. How We Use Information

We use the information we collect for legitimate business purposes, including to:

• Provide, operate, maintain, and improve the Services;
• Authenticate Users, manage accounts, and deliver customer support;
• Process transactions, manage subscriptions, and issue invoices and receipts;
• Personalize and optimize your experience on the platform;
• Build, train, refine, and operate proprietary capital markets intelligence, matching, and signal models;
• Power investor discovery, targeting, outreach infrastructure, and campaign optimization for clients;
• Generate anonymized and aggregated analytics, benchmarks, and performance reporting;
• Communicate with you regarding service updates, features, administrative matters, and marketing (in accordance with applicable law);
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and other prohibited activity;
• Enforce our Terms and Conditions, this Policy, and other applicable policies;
• Comply with legal, regulatory, tax, and accounting obligations;
• Conduct internal research, testing, diagnostics, and product development;
• Protect the rights, property, and safety of Raisi, our Users, and the public.
  

We use website analytics and advertising integrations to understand visits and measure and personalize advertising, subject to the choices described in Section 5. Disclosures to advertising partners may be considered a sale or sharing under some privacy laws, even when no money is exchanged for the information.

3.1 Legal Bases for Processing (EEA/UK Users)

For Users located in the European Economic Area, United Kingdom, or Switzerland, we process personal information on one or more of the following legal bases:

• Performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract;
• Our legitimate business interests in operating, improving, and securing the Services, provided those interests are not overridden by your rights and freedoms;
• Your consent, where required (including for certain marketing activities and cookies);
• Compliance with a legal obligation to which Raisi is subject.
  

4. How We Disclose and Share Information

We may disclose information in the circumstances below. A recipient’s role and use of information depend on the service, applicable terms, and law; advertising partners are addressed separately in Section 4.7.

4.1 Service Providers and Subprocessors

We use vendors for hosting, infrastructure, customer relationship management, communications, payment processing, email delivery, analytics, and support. Where a vendor acts as our service provider or processor, its processing is governed by the applicable agreement. Advertising partners may have separate purposes and privacy practices, as described in Section 4.7.

4.2 Legal and Regulatory Disclosures

We may disclose information if we believe in good faith that disclosure is necessary to:

1. comply with applicable law, regulation, subpoena, court order, or other legal process;
2. respond to lawful requests from public authorities, including for national security or law enforcement purposes;
3. enforce our Terms and Conditions, this Policy, or other agreements;
4. protect the rights, property, or safety of Raisi, our Users, or any third party; or
5. investigate and address fraud, security incidents, or technical issues.
   

4.3 Corporate Transactions

In the event of a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of all or substantially all of our assets, or transition of service to another provider, we may transfer personal information as part of or in connection with such transaction, subject to customary confidentiality protections and continuity of this Policy.

4.4 Affiliates

We may share information with our current or future affiliates and subsidiaries under common ownership or control, for purposes consistent with this Policy and to support the operation of our business.

4.5 With Your Consent

We may share information with third parties when you direct us to do so or when you have otherwise provided consent.

4.6 Aggregated and De-Identified Data

We may create, use, and disclose aggregated, anonymized, or de-identified data for any purpose, including for product improvement, research, benchmarking, marketing, and commercial analytics. Such data does not identify you or any other individual and is not considered personal information under this Policy.

4.7 Advertising Partners and Sale or Sharing Choices

Advertising disclosures and your choices. Our website’s Google and Meta integrations may disclose website activity, device information, IP addresses, and browser or cookie identifiers for advertising measurement, audience creation, and ad personalization. These disclosures may qualify as a sale or sharing under applicable privacy laws, including sharing for cross-context behavioral advertising. Use Privacy Choices or Do Not Sell or Share My Personal Information to reject optional advertising technologies or change your choice. For requests concerning other processing, contact privacy@raisi.ai.

5. Cookies, Pixels, and Tracking Technologies

We use cookies, pixels, local storage, and similar technologies to provide core functions and, with the choices described below, support analytics and advertising. The website consent controls apply to optional technologies in this browser; they do not delete information previously collected or automatically change separate account, email, or third-party settings.

We use the following categories of Cookies:

• Strictly Necessary Cookies — required for the Services to function (e.g., authentication, session management, load balancing);
• Performance and Analytics Cookies — help us understand how Users interact with the Services so we can improve functionality;
• Functional Cookies — remember preferences, settings, and display configurations;
• Marketing and Advertising Cookies — support marketing attribution, campaign measurement, and audience reach (where applicable and permitted by law).

On our public website, optional analytics and advertising technologies are held until you choose to allow them. Choose Reject optional to decline, or Manage preferences to select categories. You can change or withdraw optional consent at any time through Privacy Choices or Do Not Sell or Share My Personal Information. Some integrations provide both analytics and advertising and remain blocked unless both categories are allowed. Essential website functions remain available when optional categories are rejected. You may also use browser controls; they apply separately.

Cookiebot supports Global Privacy Control (GPC), a browser signal requesting an opt-out of sale or sharing. Our website consent controls use this signal to restrict optional tracking. GPC is different from the older Do Not Track signal. If you need help applying an opt-out beyond this browser or to other processing, contact privacy@raisi.ai.

6. Data Retention and Security

6.1 Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, to deliver the Services, to comply with our legal, regulatory, tax, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Specific retention periods vary based on the nature and sensitivity of the information, the legal basis for processing, and applicable legal requirements.

Upon termination of a client engagement, Raisi shall, at the client’s written request, delete or return all client-provided data within thirty (30) days, except as required by law or for legitimate internal compliance and audit purposes. We may retain anonymized, de-identified, and aggregated data indefinitely for product improvement and analytics purposes.

6.2 Security

Raisi implements and maintains commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, consistent with industry standards for SaaS platforms processing similar categories of data. These safeguards include:

• Encryption of data in transit using SSL/TLS protocols;
• Encryption of data at rest where appropriate and supported;
• Role-based access controls and principle-of-least-privilege provisioning;
• Multi-factor authentication for privileged accounts;
• Regular security reviews, vulnerability assessments, and logging;
• Vendor risk management and subprocessor due diligence;
• Employee training on data protection and information security.

DESPITE THESE MEASURES, NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS 100% SECURE. Raisi cannot and does not guarantee the absolute security of personal information. By using the Services, you acknowledge and accept this inherent risk.

7. Your Privacy Rights

Depending on your jurisdiction and applicable law, you may have certain rights with respect to your personal information. These rights may include:

• The right to access and receive a copy of the personal information we hold about you;
• The right to correct inaccurate or incomplete personal information;
• The right to request deletion or erasure of personal information, subject to certain legal exceptions;
• The right to restrict or object to certain processing activities;
• The right to data portability (to receive your data in a structured, commonly used, machine-readable format);
• The right to withdraw consent, where processing is based on consent;
• The right to opt out of marketing communications;
• The right to opt out of the sale or sharing of personal information (where applicable);
• The right to non-discrimination for exercising your privacy rights;
• The right to lodge a complaint with a supervisory authority (for Users in the EEA, UK, and Switzerland).

To exercise privacy rights, contact privacy@raisi.ai. We may request information needed to verify requests to access, correct, or delete personal information, as permitted by law. You do not need an account or identity verification to use the website’s sale or sharing opt-out controls. Authorized agents may submit requests subject to applicable requirements.

7.1 California Residents (CCPA/CPRA)

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, delete, correct, limit certain uses of sensitive personal information, and opt out of sale or sharing, subject to the law’s scope and exceptions. Advertising disclosures described in Section 4.7 may constitute sale or sharing. Use Do Not Sell or Share My Personal Information or contact privacy@raisi.ai to exercise applicable rights.

7.2 European Economic Area, United Kingdom, and Switzerland

Users in the EEA, UK, and Switzerland have rights under the General Data Protection Regulation, the UK GDPR, and the Swiss Federal Act on Data Protection, as applicable. You may lodge a complaint with your local data protection authority if you believe our processing of your personal information violates applicable law. For the purposes of the GDPR, Raisi acts as a data controller with respect to information collected directly through the Services, and as a data processor when processing Client Materials on behalf of our clients.

7.3 Other Jurisdictions

Users located in other jurisdictions, including Virginia, Colorado, Connecticut, Utah, Texas, and other U.S. states with enacted privacy laws, may have similar rights under applicable law. We honor verified requests consistent with applicable statutory requirements.

8. Children’s Privacy

The Services are intended for Users who are at least eighteen (18) years of age. We do not knowingly collect, use, or disclose personal information from children under thirteen (13) years of age in violation of the Children’s Online Privacy Protection Act, or from minors under the age of majority in their jurisdiction without appropriate parental or legal guardian consent. If you believe that a child has provided us with personal information in violation of this Policy, please contact us immediately at privacy@raisi.ai, and we will take prompt steps to investigate and delete such information.

9. International Data Transfers

Raisi is headquartered in the United States, and our primary data processing operations and infrastructure are located in the United States. If you access the Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other jurisdictions in which we or our service providers operate. These jurisdictions may have data protection laws that differ from those of your country of residence.

Where required by applicable law, we use appropriate safeguards for cross-border transfers. The safeguards and legal basis depend on the destination and processing involved; visiting the website does not by itself supply consent to a transfer that requires consent.

10. Third-Party Services and Links

The Services may link to or integrate third-party services, including analytics, payments, communications, and data providers. This Policy describes Raisi’s collection and disclosure through those integrations. Third parties also have their own privacy policies governing their processing. We encourage you to review those policies before using their services.

11. Updates to This Policy

We may update or modify this Policy from time to time to reflect changes in our practices, the Services, applicable law, or for other operational, legal, or regulatory reasons. When we make material changes, we will post the updated Policy on this page and update the “Last Updated” date at the top. Where required by law, we will provide additional notice, such as by email or in-platform notification.

We will identify the effective date of material updates and provide additional notice or request consent where required. An updated policy does not replace your choices for optional analytics or advertising technologies.

12. Contact Us

If you have questions, concerns, complaints, or requests regarding this Policy, your personal information, or our privacy practices, please contact us using the information below:

Raisi, Inc.

A Delaware Corporation

Website: https://www.raisi.ai

Privacy Inquiries: privacy@raisi.ai

‍

‍