Data processing agreement
Parties and scope
Between you as the investor (controller) and SHIO VENTURES GmbH, Straßburger Straße 55, 10405 Berlin, Germany, as operator of Zenpitch (processor). The agreement covers everything you put into your dealflow and starts when you create your investor account.
Subject matter
Zenpitch stores decks, documents, notes and founder details, accepts emails to your inbound address and files them, reads them, analyses them with a language model (quick check of every deck of your own, pre-analysis, call briefing, questions to all documents, inconsistencies, metrics over time, investment committee memo, rejection with feedback) and shows them to you. Data subjects are founders, their teams and people named in the documents. Data: names, contact details, education and career, company and financial data.
Instructions
Zenpitch processes this data only on your instructions, given through the dealflow functions (upload, forward to the inbound address, analyse, briefing, questions, inconsistency check, send rejection, delete). Zenpitch does not use it for its own purposes, does not share it, does not show it to Shio Ventures and does not train models on it. Emails to founders are only sent on your click; Zenpitch never replies to emails sent to the inbound address.
Sub-processors
Cloudflare, Inc. (hosting, storage in Western Europe, email delivery, opening deck links), Anthropic PBC, USA (language model; API content is not used for training). Transfers to the USA based on the Standard Contractual Clauses (Art. 46(2)(c) GDPR), for Cloudflare also the EU-US Data Privacy Framework. We inform you before adding new sub-processors; you can object and delete your account.
Security
Separate rooms per investor, access only with your sign-in link, storage with Cloudflare in Western Europe, tokens and sessions only as hashes, no admin access to deals. Technical access only for people at Shio bound to confidentiality, who do not view deals.
Data subject rights and assistance
We forward questions from data subjects about data in your dealflow to you. We support you with access, rectification and erasure where you cannot do it yourself through the functions, and notify you of personal data breaches without undue delay.
Deletion and termination
You can delete deals yourself at any time. We delete deals without activity after the period you choose in your thesis (default 24 months). If you delete your investor account, we delete all data of your dealflow immediately; database backups expire after 30 days at the latest. You can export your deals as CSV beforehand.
Plans
Scope and quotas follow your plan (terms, section Plans for investors); anything beyond a quota is only processed on your instruction (add-on purchase or a click next month). Contact: hallo@zenpitch.ai.