Privacy Policy

Account information: When you create an account, we collect your email address, full name, company name, and role.

Financial and cap table data: We store the financial, cap table, equity plan, and investor data you enter into the Service, including shareholder information, equity grants, funding round details, and financial metrics.

Documents: We store documents you upload or generate through the Service, including legal agreements, board materials, data room files, and investor updates.

Communications data: If you connect an email account or send investor communications through the Service, we process the content, metadata, and engagement data (opens, clicks) associated with those communications.

Usage data: We collect information about how you interact with the Service, including pages visited, features used, actions taken, and technical information such as IP address, browser type, and device identifiers.

When you send emails through the Service’s email features, those emails may include tracking technologies including open-tracking pixels and click-tracking redirect links. These allow us (and you, as the sender) to see when recipients open emails and click links.

Tracking data is associated with the investor or contact record in your CRM. You can view engagement data in the Service’s analytics features. By using the email sending features, you represent that your use of tracking complies with applicable laws in your jurisdiction.

When you share documents through the Service’s data room or shared document features, we may collect analytics about document access including when documents are viewed, how long they are viewed, and from what location. This data is made available to you to understand investor engagement with your materials.

The Service’s AI features (investor matching, outreach drafting, data analysis) are powered by Anthropic Claude, a third-party large language model. When you use AI features, certain data from your workspace may be transmitted to Anthropic for processing.

Important: We have contracted with Anthropic under terms that prohibit Anthropic from using your data to train or improve their models. Your data is processed solely to return results to you and is not retained by Anthropic beyond what is necessary for the immediate request.

You should exercise caution about what data you submit to AI features. We recommend avoiding submission of highly sensitive personal data, non-public material information, or attorney-client privileged materials through AI features unless you have independently reviewed Anthropic’s current data handling practices.

The Service may support connections to external tools and services via integrations or Model Context Protocol (MCP) servers. When you enable such integrations, data relevant to your request may be transmitted to the connected service. Review the privacy policy of each integration you enable. Webel, Inc. is not responsible for data handling by third-party integration providers.

We use cookies and browser local storage to maintain your session, remember preferences (such as your last used email address), and provide core Service functionality. We may also use cookies for basic analytics. We do not use third-party advertising cookies.

You can disable cookies in your browser settings, but doing so may impair the functionality of the Service.

We use information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and maintain your session
• Generate cap table calculations, analytics, and AI-powered insights
• Send transactional emails (sign-in links, document signature requests, notifications)
• Provide customer support
• Detect, investigate, and prevent fraud and security incidents
• Comply with legal obligations

We retain your data for as long as your account is active. If you terminate your account, we will retain your data for up to 90 days to allow for data export requests and dispute resolution, after which it will be deleted or anonymized, unless we are required by law to retain it longer.

Certain anonymized or aggregated analytics data may be retained indefinitely.

We use the following third-party service providers to operate the Service:

• Amazon Web Services (AWS): Cloud infrastructure, document storage (S3), and compute. Data is stored in the US-East region with encryption at rest and in transit.
• Resend / Amazon SES: Transactional email delivery (sign-in links, notifications, signature requests).
• Anthropic: AI language model processing for AI features. Data is not used for model training.
• Stripe: Payment processing for subscription billing. Webel, Inc. does not store payment card details; Stripe handles payment data per their PCI-compliant practices.

These providers are contractually bound to process your data only as directed by Webel, Inc. and in accordance with this Privacy Policy.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share your data:

• With third-party service providers listed above, as necessary to operate the Service
• If required by law, regulation, legal process, or government request
• In connection with a merger, acquisition, or sale of assets (with advance notice to you)
• To protect the rights, property, or safety of Webel, Inc., our users, or the public

Investor-facing portal data you explicitly share with investors is accessible to those investors per your settings. You control all sharing settings within the Service.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a portable format
• Restriction / Objection: Restrict or object to certain processing
• Opt-out of sale: We do not sell personal data

To exercise these rights, contact us at privacy@webel.ai. We will respond within the timeframes required by applicable law.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for stored documents, access controls, audit logging, and regular security reviews. Passkey (WebAuthn) and magic link authentication are used in place of passwords to reduce credential theft risks.

Despite these measures, no security system is impenetrable. In the event of a data breach, we will notify affected users in accordance with applicable law.

The Service is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date and, where appropriate, by email or in-app notification. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

For privacy-related questions or to exercise your rights, contact us at privacy@webel.ai. Webel, Inc., a Delaware corporation.