This policy explains how Aukai collects, uses, and protects personal data when you visit our websites and our investor data room. It applies to aukai.ai and to the gated investor room at chart.aukai.ai.
We have written this plainly. If anything is unclear, contact us at privacy@aukai.ai.
Who we are
Aukai is a Delaware corporation founded by Matt Hunt and Lindsey Breeden. Aukai is the data controller for the personal data described in this policy. Personal data collected by the founders before incorporation is now controlled by Aukai.
For the purposes of the UK and EU General Data Protection Regulation (GDPR), Aukai is the data controller for the personal data described in this policy.
Contact for any privacy matter, including requests to access or delete your data: privacy@aukai.ai.
What this policy covers
We collect personal data in three contexts:
- When you visit our public website (aukai.ai).
- When you access our investor data room (chart.aukai.ai) through an invitation link.
- Through third-party tools we use to understand engagement and manage our fundraising process.
Each is described below.
The personal data we collect
When you visit our public website. We may collect technical information such as your IP address, browser type, device information, the pages you view, and the time and duration of your visit. We may also use a visitor-identification service (see "Third parties" below) that can associate a visit with a business or individual.
When you access the investor data room. Because the data room is accessed through a personal invitation link tied to you, we record information connected to your identity, including: your name and email address (as held by us from our investor outreach), the date and time you open the room, which sections and documents you view, how long you spend on each, your IP address, and your device and browser information. We use this to understand investor interest and to manage our fundraising process.
Information you provide directly. If you request a call, schedule a meeting, or otherwise contact us, we collect the information you choose to share (such as your name, email, and the content of your message).
When you request a demo. If you submit our demo request form, we collect the details you provide: your name, company, role, work email, what your marketing team needs to produce more of, and, if you choose to share it, your company website. We use this to respond to your request, prepare for the conversation, and manage our relationship with you. We keep a record of your submission in our systems, including a log kept for reliability, and in our customer relationship management tool (see 'Third parties' below). We send you a confirmation email when you submit the form.
Why we use your data, and our legal basis
We process personal data for the following purposes:
- To operate and secure the investor data room (authenticating invitation links, preventing unauthorized access). Legal basis: our legitimate interest in protecting confidential information, and the performance of our fundraising relationship with you.
- To understand investor engagement (which materials are reviewed, by whom, and when) so we can manage our capital raise and follow up appropriately. Legal basis: our legitimate interest in conducting our fundraising.
- To understand interest in our public website. Legal basis: your consent, where required, for non-essential analytics and identification tools (see "Cookies and consent").
- To respond to you when you contact us or request a call. Legal basis: our legitimate interest in responding, and steps taken at your request.
- To respond to demo requests and manage sales relationships. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in operating our business.
Where we rely on legitimate interest, we have considered your rights and consider our use proportionate to the purpose. You can object to processing based on legitimate interest at any time (see "Your rights").
Third parties who process data on our behalf
We use the following service providers ("processors"). They process personal data on our instructions to help us run our services:
- Attio (customer relationship management). We record investor identity and engagement information, and the details of demo requests and sales relationships, in Attio to manage those relationships. Attio is based in the United States.
- RB2B / Retention.com (website visitor identification). On our public website, cookies and similar technologies may be used by our online data partners or vendors to associate your visit with other personal information they or others hold about you, including by association with your email address. RB2B may identify the business or individual associated with a visit and report this to us, and we (or service providers on our behalf) may use this information to manage and follow up on our fundraising and business relationships. RB2B is based in the United States. This tool is only active where you have consented (see "Cookies and consent"). You may opt out of this advertising-related use at any time by visiting https://app.retention.com/optout, and you may opt out of the collection of your personal data under GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
- SiteGround (hosting of our public website), Render (hosting of our investor data room), and Cloudflare (content delivery and security), which process technical data such as IP addresses in the course of serving our sites.
- Google (Workspace and authentication), which processes data where you interact with our email or sign-in.
A current list of processors is available on request at privacy@aukai.ai.
International transfers
Some of our processors, including Attio and RB2B, are based in the United States. This means your personal data may be transferred outside the UK and the European Economic Area. Where we make such transfers, we rely on appropriate safeguards as required by GDPR (such as Standard Contractual Clauses or an equivalent approved mechanism). You can ask us for more detail at privacy@aukai.ai.
Cookies and consent
Our sites use cookies and similar technologies. Some are strictly necessary to operate the data room (for example, to keep you authenticated during a session); these do not require consent. Others are non-essential, including analytics and the visitor-identification tool described above.
We do not activate non-essential cookies or tools until you have given consent through our consent banner. You can accept or decline, and you can change your choice at any time. Declining non-essential cookies does not prevent you from using the data room.
How long we keep your data
We retain personal data only as long as needed for the purposes above. Engagement and investor-relationship data is retained for the duration of our fundraising process and for a reasonable period afterward to meet our legal and record-keeping obligations, after which it is deleted or anonymized. You can request deletion at any time (see "Your rights").
Your rights
If you are in the UK or EU, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict our processing; withdraw consent where we rely on it; and request a copy of your data in a portable format. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
To exercise any of these rights, contact privacy@aukai.ai. We will respond within the time required by law (generally one month).
In addition, for the RB2B visitor-identification tool specifically, you can opt out directly at https://app.retention.com/optout (advertising opt-out) and https://www.rb2b.com/rb2b-gdpr-opt-out (GDPR opt-out).
How we protect your data
The investor data room is access-controlled through individual invitation links, served over encrypted connections, with administrative access restricted to the founders. We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.
Children
Our sites and data room are intended for business and investment audiences and are not directed to children. We do not knowingly collect data from anyone under 18.
Changes to this policy
We may update this policy as our practices or the law evolve. The "last updated" date above reflects the most recent version. Material changes will be communicated where appropriate.
Contact
For any privacy question, or to exercise your rights, contact us at privacy@aukai.ai.