Privacy Policy

This Privacy Policy describes how Curevstone Capital LLC ("Curevstone Capital," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information about individuals who visit our website located at curevstone.com (the "Site"), contact us regarding investment opportunities, participate in our portfolio programs, or otherwise interact with us. By accessing or using our Site or services, you acknowledge that you have read and understood this Privacy Policy.

Curevstone Capital is committed to respecting your privacy and protecting any personal information that you share with us. This Privacy Policy is designed to help you understand how we handle your data in accordance with applicable privacy laws including, without limitation, the California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), the General Data Protection Regulation (GDPR) to the extent applicable, and other applicable state and federal privacy laws in the United States.

1. Information We Collect

We collect personal information from you in a variety of contexts depending on how you interact with us. The categories of personal information we collect include:

1.1 Information You Provide Directly

When you contact us, submit a pitch, request information, or otherwise communicate with us, we may collect:

• Contact Information: Your name, email address, telephone number, postal address, and similar identifying information.
• Professional Information: Your job title, company name, company website, professional background, and employment history.
• Business Information: Details about your company or startup, including pitch decks, business plans, financial projections, customer data summaries, technology descriptions, and any other materials you submit in connection with a funding inquiry or investment process.
• Communications: The content of emails, messages, and other communications you send to us, including any attachments or supporting materials.
• Event Information: Information you provide when registering for or attending events sponsored or hosted by Curevstone Capital.

1.2 Information We Collect Automatically

When you visit our Site, we and our third-party service providers may automatically collect certain technical information about your device and browsing activity, including:

• Usage Data: Pages visited, time spent on each page, links clicked, referring URLs, and exit pages.
• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Location Information: General geographic location derived from your IP address (typically at the city or regional level).
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies as described in our Cookie Policy.

1.3 Information We Obtain from Third Parties

We may receive personal information about you from third parties, including:

• Professional networking platforms such as LinkedIn when you connect with us or when we research potential investment opportunities.
• Business information services, background check providers, and public records sources used in connection with our investment due diligence processes.
• Our portfolio companies, when you interact with them in a context relevant to our investment relationship.
• Referral sources when a founder, investor, or advisor introduces you to us.
• Conference organizers and event platforms when we obtain attendee information from events at which we participate.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

2.1 Investment and Business Operations

• Evaluating investment opportunities and conducting due diligence on prospective portfolio companies.
• Communicating with founders, entrepreneurs, and other individuals in connection with potential or existing investments.
• Managing our relationships with existing portfolio companies and monitoring the performance of our investments.
• Sourcing new investment opportunities and identifying relevant market trends and companies of interest.
• Managing our relationships with limited partners, co-investors, and other institutional counterparties.

2.2 Site Operation and Improvement

• Operating and maintaining our Site and ensuring it functions properly.
• Analyzing usage patterns to improve the Site's content, design, and user experience.
• Detecting and preventing fraud, unauthorized access, and other security incidents.
• Complying with technical requirements and troubleshooting technical problems.

2.3 Communications and Marketing

• Responding to your inquiries, questions, and communications.
• Sending you information about Curevstone Capital's investment activities, insights, events, and other relevant communications.
• Inviting you to events, conferences, and portfolio gatherings we host or sponsor.
• Sending you our newsletter and other thought leadership content, subject to your consent where required by applicable law.

2.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, legal processes, and governmental requests.
• Enforcing our legal rights and the terms of our agreements.
• Protecting the rights, property, and safety of Curevstone Capital, our employees, our portfolio companies, and others.
• Meeting our regulatory obligations as a registered investment adviser or in connection with our fund operations.

3. Legal Bases for Processing (GDPR)

To the extent the GDPR applies to our processing of your personal information, we rely on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate business interests, including investment sourcing and evaluation, portfolio management, improving our services, and business development, provided such interests are not overridden by your rights and interests.
• Legal Obligation: Processing necessary to comply with our legal obligations under applicable law.
• Consent: Where we have obtained your specific, informed consent to process your personal information for a particular purpose, such as sending marketing communications.

4. How We Share Your Information

We do not sell your personal information. We may share your personal information in the following circumstances:

4.1 Service Providers

We may share your personal information with third-party service providers who perform services on our behalf, such as:

• Cloud computing and data storage providers.
• Customer relationship management (CRM) software providers.
• Email and communications platforms.
• Legal, accounting, and professional advisors.
• Background check and due diligence data providers.
• Website analytics and performance monitoring services.

These service providers are contractually obligated to use your personal information only for the purposes for which we disclose it to them and to maintain appropriate security measures.

4.2 Investment-Related Disclosures

In connection with our investment activities, we may share information about founders and companies with:

• Our limited partners and investors, to the extent necessary for fund reporting and compliance obligations.
• Co-investors and potential syndicate partners, where you have submitted a pitch and we believe sharing your information may assist in closing a round.
• Advisors, legal counsel, and other professionals engaged in connection with a specific investment transaction.

We will not share your confidential business information with competitors or with parties unrelated to a specific transaction without your consent.

4.3 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request.
• Enforce our agreements, including this Privacy Policy and our Terms of Use.
• Detect, prevent, or address fraud, security incidents, or other illegal activity.
• Protect the rights, property, and safety of Curevstone Capital, our employees, and the public.

4.4 Corporate Transactions

In connection with a merger, acquisition, reorganization, sale of assets, or other corporate transaction, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such transfer and any material changes to the processing of your personal information that may result.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The specific retention period depends on the nature of the information and the context in which it was collected:

• Pitch and Investment Materials: We retain information submitted as part of a funding inquiry or investment evaluation for a period of seven years from the date of submission, unless we enter into an ongoing investment relationship that requires longer retention.
• Portfolio Company Information: We retain information related to our portfolio companies throughout the duration of our investment and for a period of seven years thereafter.
• Contact and Communication Records: We retain records of communications with founders, limited partners, and other counterparties for a period of five years.
• Website Analytics: We retain aggregated analytics data for a period of three years. Non-aggregated usage data is retained for up to twelve months.

When personal information is no longer required for the purposes for which it was collected, we will either delete it securely or render it anonymous so that it can no longer be attributed to you.

6. Data Security

We implement reasonable and appropriate technical, administrative, and physical security measures designed to protect the personal information we collect and process against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS) and at rest using AES-256 or comparable encryption standards.
• Access controls and authentication requirements limiting access to personal information to authorized personnel with a legitimate need to access such information.
• Regular security assessments and testing of our information systems.
• Employee training on data security and privacy best practices.
• Contractual requirements imposed on service providers to maintain appropriate security standards.

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable security practices, we cannot guarantee the absolute security of your personal information. If you become aware of any breach or suspected breach of the security of your personal information in connection with your interactions with us, please contact us immediately at security@curevstone.com.

7. Your Rights and Choices

Depending on your location and the applicable laws, you may have certain rights regarding your personal information:

7.1 Access and Portability

You may have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

7.2 Correction and Rectification

You may have the right to request that we correct inaccurate or incomplete personal information we hold about you.

7.3 Deletion

You may have the right to request that we delete your personal information, subject to certain exceptions for legal, regulatory, and contractual obligations.

7.4 Restriction and Objection

You may have the right to request that we restrict the processing of your personal information in certain circumstances, or to object to our processing of your personal information based on legitimate interests.

7.5 Opt-Out of Marketing

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@curevstone.com. Please note that you may continue to receive transactional communications related to any ongoing business relationship.

7.6 California Residents

California residents have specific rights under the CCPA and CPRA, including the right to know about personal information collected, disclosed, or sold; the right to delete personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising privacy rights. To submit a California privacy rights request, contact us at privacy@curevstone.com.

8. International Data Transfers

Curevstone Capital is headquartered in the United States. If you are located outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries that may have different data protection laws than those in your home country.

Where required by applicable law (including GDPR), we implement appropriate safeguards for cross-border transfers of personal information, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

9. Children's Privacy

Our Site and services are not directed to children under the age of 18, and we do not knowingly collect personal information from children. If we discover that we have inadvertently collected personal information from a child under 18, we will promptly delete such information. If you believe we have collected information from a child, please contact us at privacy@curevstone.com.

10. Third-Party Links and Services

Our Site may contain links to third-party websites, applications, or services that are not operated or controlled by Curevstone Capital. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our Site. We are not responsible for the privacy practices or content of third-party services.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page and, where required by applicable law, provide you with notice of such changes (for example, by email or by posting a prominent notice on our Site). Your continued use of our Site or services after any such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Curevstone Capital LLC
Empire State Building
350 Fifth Avenue, Suite 6801
New York, NY 10118
United States

Email: privacy@curevstone.com
General: info@curevstone.com

We aim to respond to all privacy-related inquiries within 30 days. For complex requests or requests requiring significant research, we may take up to 90 days, in which case we will notify you of the expected timeline within the initial 30-day period.