Legal
Last updated: March 19, 2026
Aureum Aletheia collects the following categories of information in the course of providing its services:
Account Data. Name and email address provided through OAuth authentication. No passwords are stored by Aureum Aletheia.
Payment Data. Payment transactions are processed by Stripe. Aureum Aletheia does not store card numbers, CVV codes, or card expiration dates. Only Stripe-issued payment reference identifiers are retained.
Evaluation Data. Company information submitted for evaluation, including but not limited to: financial statements, governance documentation, cap table data, and operational metrics. This data is submitted voluntarily by the user for the purpose of receiving structured evaluation outputs.
All information collected is used solely to perform structured evaluations and deliver reports to the requesting user. Aureum Aletheia does not use collected data for marketing purposes, behavioral profiling, or resale to third parties.
Data is never sold. Sharing occurs only under the following limited circumstances:
(a) Payment Processing. Transaction data is shared with Stripe solely for the purpose of completing payment processing.
(b) Capital Provider Pipeline. Company evaluation data may be shared with the curated capital provider network exclusively for companies that: (i) achieve an A or A+ rating (composite score of 7.5 or above), and (ii) provide explicit, affirmative opt-in consent to pipeline sharing. The document shared is the standardized deal memo only — no raw data, no source documents.
All data is encrypted in transit and at rest using enterprise-grade standards. Access controls are role-based. Full technical architecture is described in our Data Handling Policy.
Evaluation data is retained for 24 months following report delivery unless the user requests earlier deletion. Account data is retained for the life of the account. Upon account deletion, all associated data is permanently removed within 30 days.
Users retain the following rights with respect to their data: the right to access all data held; the right to correct inaccurate data; the right to request permanent deletion of all personal data; the right to receive a copy of all data held in a portable format; and the right to withdraw consent for pipeline sharing at any time. To exercise any of these rights, contact: [email protected].
This platform uses privacy-preserving analytics for aggregated usage tracking. The analytics implementation tracks page views and anonymized usage patterns. It does not track personally identifiable information (PII), individual user sessions tied to identity, or behavioral profiles. No third-party advertising cookies are used.
Material changes to this Privacy Policy will be communicated to registered users via the email address associated with their account at least 14 days prior to the changes taking effect. Continued use of the platform following notification constitutes acceptance of the revised policy.