Privacy Policy

Last updated: March 9, 2026

1. Introduction

Kunfa.AI (“the Platform”) is operated by Metronome FZ-LLC, a company registered in Dubai, UAE. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our Platform. We are committed to protecting your privacy and handling your data in accordance with applicable UAE data protection regulations and international best practices.

2. Information We Collect

Personal Information

  • Name, email address, and job title (provided during registration)
  • LinkedIn profile URL (optional, provided during onboarding)
  • Company name, role, and professional details
  • Payment information (processed by Stripe; we do not store card details)

Company Data

  • Company name, description, industry, stage, country, and website
  • Founding team details (names, titles, emails, LinkedIn profiles)
  • Financial metrics (raise amount, team size, founded year, traction data)

Uploaded Documents

  • Pitch deck files (PDF)
  • Financial documents (PDF, optional)

Usage Data

  • IP address and device information
  • Pages visited, features used, and interaction patterns
  • Scoring requests and timestamps

3. How We Use Your Information

  • AI Scoring and Analysis: Your uploaded documents and company data are processed by AI models to generate investment readiness scores, grades, and analysis reports.
  • Company Profile Creation: Information you provide is used to create your public company profile, which is visible to investors on the Platform.
  • Investor Matching: Company profiles and scores are displayed to investors to facilitate deal discovery and evaluation.
  • Account Management: To authenticate your identity, manage your account, and communicate with you about your account or the Platform.
  • Payment Processing: To process payments for premium features such as the Kunfa Readiness Report.
  • Platform Improvement: Aggregated, anonymized data may be used to improve our scoring algorithms, platform features, and user experience.

4. Who Can See Your Information

Public Information

Your company profile — including company name, description, one-liner, industry, stage, country, Kunfa Score, and team information — is publicly visible to all authenticated users of the Platform.

Restricted Information

Your uploaded documents (pitch decks and financial documents) are not publicly accessible. Access is restricted to:

  • You (the document uploader / company owner)
  • Authenticated investors who have added your company to their deal pipeline
  • Authenticated investors who have added your company to their watchlist

Document access is controlled through an authenticated server-side proxy. Raw file URLs are never exposed to clients.

5. AI Processing

Your documents and company data are sent to third-party AI providers (currently Anthropic's Claude) for analysis and scoring. Important details about this processing:

  • Document text is extracted and sent to the AI model for analysis. The AI provider does not store your data beyond the processing session.
  • AI-generated outputs (scores, analysis, recommendations) are stored on our platform and associated with your account.
  • We do not use your data to train AI models. Our AI provider's data handling practices are governed by their own terms of service.

6. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide services:

  • Account data: Retained while your account is active. Upon account deletion request, personal data is removed within 30 days.
  • Uploaded documents: Retained while your account is active. Deleted upon account deletion or upon your request.
  • Generated reports: Paid reports are retained for the lifetime of your account. They may be retained after account deletion to fulfill our obligations to paying customers.
  • Anonymized data: Aggregated, anonymized analytics data may be retained indefinitely for platform improvement.

To request deletion of your account and associated data, contact us at hello@vitality.capital.

7. Third-Party Services

We use the following third-party services to operate the Platform:

  • Supabase: Database hosting, user authentication, and data storage (servers in the US/EU).
  • Vercel: Application hosting, file storage (Vercel Blob), and content delivery.
  • Stripe: Payment processing. We do not store your credit card information; it is handled entirely by Stripe in accordance with PCI DSS standards.
  • Anthropic (Claude): AI model provider for document analysis and scoring. Documents are processed in real-time and are not stored by the provider.

Each third-party provider is bound by their own privacy policies and data processing agreements.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS) for all data transfers
  • Encryption at rest for stored data
  • Role-based access controls and row-level security policies
  • Authenticated server-side proxy for document access
  • Rate limiting on sensitive endpoints

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data and account.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to certain processing of your personal data.

To exercise any of these rights, please contact us at hello@vitality.capital. We will respond to your request within 30 days.

10. Cookies

The Platform uses essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. Essential cookies are necessary for the Platform to function and cannot be disabled.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. International Data Transfers

Your data may be transferred to and processed in countries other than the UAE, including the United States and European Union, where our third-party service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Platform. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy or our data practices, please contact:

Metronome FZ-LLC
Dubai, United Arab Emirates
Email: hello@vitality.capital