Last updated on 15 June 2026

Privacy Policy

This Privacy Policy explains how Bizznote for Founders (academy.bizznote.com) collects, uses, and protects your personal data when you submit a pitch deck for analysis, in accordance with Regulation (EU) 2016/679 (the "GDPR"). It is separate from the Bizznote investor product privacy policy at bizznote.com.

1. Data controller

The controller responsible for your personal data is Jan Kejř, IČO 10676678, V Semaji 398, 417 61 Bystřany, Czech Republic ("Bizznote", "we", or "us"). For privacy inquiries, contact privacy@bizznote.com. We have not appointed a data protection officer.

2. What we collect

• Contact details: your first name, surname, email address, and an optional phone number.
• About your venture: your motivation for building it, whether it is a side project or a long term commitment, whether you are raising, and your stage.
• Your pitch deck: the PDF you upload.
• The analysis we generate: the investor readiness assessment our AI produces from your deck and answers.
• Limited technical data: your IP address and basic request information, used for security and abuse prevention.

We do not use tracking or advertising cookies. We temporarily keep your answers in your browser (session storage) only so you can resume if you are interrupted; this clears when you finish or close the tab.

3. How and why we use it

• To produce and deliver your analysis, including emailing it to you: to provide the service you requested and our legitimate interest in operating it (Art. 6(1)(b) and (f) GDPR).
• To share your pitch with an investor: only when you explicitly choose "Send my pitch" (your consent, Art. 6(1)(a) GDPR). We currently work with RainbowJet and may add other investors over time. In that case we send the investor your first name, surname, email address, phone number if you provided one, your pitch deck, our Bizznote Academy analysis of it, and a short note summarising your answers.
• To add you to our updates list: only when you click "Keep me posted" (your consent). You can withdraw at any time through the unsubscribe link in our emails.
• To keep the service secure and prevent abuse: our legitimate interest.

4. AI processing and no training

Your deck and answers are processed by an AI model, accessed through Vercel AI Gateway (Anthropic), to generate your analysis. Neither we nor our AI providers use your data to train AI models.

5. Who we share it with

We do not sell your personal data. We share it with:

Our service providers (Vercel, Anthropic, Resend) act as our processors under data protection agreements. An investor is different: when you consent to send your pitch, the investor receives your data as a separate, independent controller and decides how it uses that data under its own privacy policy. We are not responsible for an investor's processing of your data once it has been shared.

The investors we currently work with are:

• RainbowJet

We will update this list as we begin working with additional investors.

6. Storage and international transfers

Your data is stored in the European Union where possible. Where a provider processes data outside the EU, Standard Contractual Clauses and appropriate safeguards apply.

7. How long we keep it

We keep your data only as long as we need it, and it is deleted automatically after that:

• If you start but do not complete a submission, your data is automatically deleted after 30 days.
• If you complete a submission, we keep it for up to 12 months so we can follow up, then it is automatically deleted.

You can ask us to delete your data, including your uploaded deck, sooner at any time. Data we are required to keep by law is retained for the legally required period.

8. Your rights

You have the right to access your personal data, correct it, delete it, restrict or object to its processing, request portability, and withdraw consent at any time. To exercise these rights, contact privacy@bizznote.com; we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

9. Children

This service is intended for founders and is not directed at individuals under 18. We do not knowingly collect data from anyone under 18.

10. Security

We protect your data with encryption in transit and at rest, access controls, and abuse monitoring. If a data breach affects you, we will notify you as required by law.

11. Changes

We may update this Privacy Policy. We will indicate changes by updating the "Last updated" date above.

12. Contact

For any privacy question, contact privacy@bizznote.com.