Trust Centre
Data processing terms and sub-processors
I. AI LTD trading as InvestorUniverse · Summary written October 2026
Awaiting solicitor review. This page describes in plain English what we do today. Our solicitor has yet to review the legal wording, so it may change. It is no substitute for legal advice or for a signed agreement.
Who this is for
Accelerators, networks and other organisations that buy InvestorUniverse for the founders they support. If you are a founder buying for yourself, the privacy notice is the page you want.
Who is responsible for what
When your organisation gives us details of your founders so we can set up their access, you decide why and how that data is used, and we handle it on your instructions. In data protection terms you are the controller and we are your processor for that data.
The investor database is different. We build and maintain it ourselves and we are the controller for it. Your founders use it under our terms, and the legitimate interests assessment covers it.
What we process for you
- Your founders' names and email addresses, to create their accounts
- The company details each founder enters, and any pitch deck they upload
- What each founder does in the product: lists run, investors saved, emails drafted or sent through us
- Your own contact details and the terms of your licence
What we commit to
- We use that data only to provide the service to you and your founders, and only on your instructions.
- Everyone with access to it is bound to keep it confidential.
- We tell you without undue delay if we become aware of a personal data breach that affects it.
- We help you answer requests from your founders to see, correct or delete their data.
- When the licence ends we delete your founders' data or return it, as you choose, apart from records the law requires us to keep, such as invoices.
- We give you the information you reasonably need to check that we do what this page says.
- We use other companies to help deliver the service only as listed below, and we tell organisation customers before adding one that will handle their data.
How we protect it
- All traffic is encrypted in transit.
- Investor contact details are encrypted in the database with a key held outside it.
- Staff access needs an authenticator app as well as a sign-in link, and can be limited to our own network.
- Reveals, exports, sign-ins and staff actions are written to an audit trail.
- Rate limits and automatic account pausing stop bulk harvesting.
- Backups we take ourselves are encrypted before they are stored.
- Card payments are handled by our payment provider, and card details never reach our servers.
Sub-processors
These are the services this site is connected to right now. The list is read from the live configuration when this page loads, so a service appears here only while it is switched on.
| Service | What we use it for | Data it handles |
|---|---|---|
| Vercel | Hosting the website and running its scheduled jobs | Everything sent to or shown by the site passes through its servers |
| Neon | The database | Accounts, orders, investor records and usage records. Investor contact details are encrypted before they are stored |
| Stripe | Taking payments and running subscriptions | Customer email, what was bought and payment details. Card details go straight to Stripe and never reach our servers |
| Resend | Sending email | The recipient's address and the content of each email, including introduction emails a founder approves |
| Anthropic | Drafting text: company summaries, investor briefs and first-email drafts | The company's website text and details the founder entered, and the professional profile of the investor a draft is for |
Where each service stores data, and the terms that cover any transfer outside the UK, are still to be confirmed with our solicitor and will be added to this table.
A signed agreement
Organisation customers can ask for a data processing agreement to sign. The agreement itself is still to be reviewed by our solicitor. Until it is ready, this page is our statement of what we do. Email privacy@investoruniverse.uk and we will send it as soon as it is available, or talk through anything here that your own counsel needs.