Last updated on 1 October 2026

Privacy Policy

This Privacy Policy explains how Bizznote for Founders (academy.bizznote.com) collects, uses, and protects your personal data when you submit a pitch deck for analysis, or describe your idea and link public pages about it, in accordance with Regulation (EU) 2016/679 (the "GDPR"). It is separate from the Bizznote investor product privacy policy at bizznote.com.

1. Data controller

The controller responsible for your personal data is Advantup s.r.o., IČO 21493308, with its registered office at Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague under File No. C 402791, represented by Jan Kejř ("Bizznote", "we", or "us"). For privacy inquiries, contact privacy@bizznote.com. We have not appointed a data protection officer.

2. What we collect

• Contact details: your first name, surname, email address, and an optional phone number.
• Academy waitlist: the first name and email address you give us when you join the Bizznote Academy waitlist on our home page or after your analysis.
• About your venture: your motivation for building it, whether it is a side project or a long term commitment, whether you are raising, and your stage.
• Your pitch deck: the PDF you upload.
• Your idea and links (idea path): the text you write about what you are building, the company name, and up to five public web addresses you give us.
• What we read (idea path): the text of the pages you linked and of pages they link to on the same site, and public web search results that mention you or your company. We keep the page text and the venture profile we build from it, with the source of each fact.
• The analysis we generate: the investor readiness assessment our AI produces from your deck or your idea, the pages we read, and your answers.
• Limited technical data: your IP address and basic request information, used for security and abuse prevention. When you use the waitlist form, Cloudflare checks your browser and IP address to keep bots out.

We temporarily keep your answers in your browser (session storage) only so you can resume if you are interrupted; this clears when you finish or close the tab.

3. Cookies and analytics

We do not use advertising cookies, and we never profile you for ads.

• Anonymous visit statistics (no cookies). We use Vercel Web Analytics, which counts page views and referrers without cookies and without identifying you. Legal basis: our legitimate interest in understanding overall site usage (Art. 6(1)(f) GDPR).
• Google Analytics (only with your consent). If you accept analytics cookies in our cookie banner, we use Google Analytics 4 to understand which pages are visited and where visitors come from. It processes usage data such as pages viewed, referrer, approximate location, and device information. Google Analytics does not load at all unless you accept. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by reopening the cookie preferences and rejecting analytics.
• Consent cookie. Your cookie choice itself is stored in a cookie so we do not ask you on every visit.

The cookies we use:

If you withdraw analytics consent, the Google Analytics cookies are deleted from your browser.

Your pitch deck, your answers, and your analysis are never shared with Google Analytics.

4. How and why we use it

• To produce and deliver your analysis, including emailing it to you: to provide the service you requested and our legitimate interest in operating it (Art. 6(1)(b) and (f) GDPR).
• To share your pitch with an investor: only when you explicitly choose "Send my pitch" or "Send my profile" (your consent, Art. 6(1)(a) GDPR). We work with a small number of early stage investors and may add more over time. In that case we send the investor your first name, surname, email address, phone number if you provided one, your pitch deck, our Bizznote Academy analysis of it (or, on the idea path, your venture profile with its sources and our analysis of it), and a short note summarising your answers.
• To send you tips on raising money and Bizznote Academy news: only when you click "Join the waitlist" (your consent, Art. 6(1)(a) GDPR). You can withdraw at any time through the unsubscribe link in every tips email, or by writing to privacy@bizznote.com.
• To keep the service secure and prevent abuse: our legitimate interest.

5. AI processing and no training

Your deck or idea, the pages we read, and your answers are processed by an AI model, accessed through Vercel AI Gateway (Anthropic), to generate your analysis. On the idea path we also use a web search provider through the same gateway to find public mentions; only your company name, your name and a short description of your idea are sent as search queries. Neither we nor our AI providers use your data to train AI models.

6. Who we share it with

We do not sell your personal data. We share it with:

Our service providers (Vercel, Supabase, Anthropic, Resend, Cloudflare, Google) act as our processors under data protection agreements. An investor is different: when you consent to send your pitch, the investor receives your data as a separate, independent controller and decides how it uses that data under its own privacy policy. We are not responsible for an investor's processing of your data once it has been shared.

Our waitlist form is protected by Cloudflare Turnstile. Its use is subject to the Cloudflare Turnstile Privacy Addendum.

If you want to know which investor would receive your pitch before you consent to sharing it, contact privacy@bizznote.com and we will tell you.

7. Storage and international transfers

Your data is stored in the European Union where possible. Where a provider processes data outside the EU, Standard Contractual Clauses and appropriate safeguards apply. Cloudflare may run the waitlist bot check outside the EU; that transfer relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

8. How long we keep it

We keep your data only as long as we need it:

• If you start but do not complete a submission, your data is automatically deleted after 30 days.
• If you complete a submission, we keep it for up to 12 months so we can follow up, then it is automatically deleted.
• If you join the Academy waitlist, we keep your name and email until you ask us to delete them. If you unsubscribe, we keep them only so we never email you again.

You can ask us to delete your data, including your uploaded deck, the page text we read and your venture profile, sooner at any time. Data we are required to keep by law is retained for the legally required period.

9. Your rights

You have the right to access your personal data, correct it, delete it, restrict or object to its processing, request portability, and withdraw consent at any time. To exercise these rights, contact privacy@bizznote.com; we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

10. Children

This service is intended for founders and is not directed at individuals under 18. We do not knowingly collect data from anyone under 18.

11. Security

We protect your data with encryption in transit and at rest, access controls, and abuse monitoring. If a data breach affects you, we will notify you as required by law.

12. Changes

We may update this Privacy Policy. We will indicate changes by updating the "Last updated" date above.

13. Contact

For any privacy question, contact privacy@bizznote.com.