Investor Privacy Notice

The operator who invited you can see the information you provide through this portal. That includes your name and contact details, anything you submit on their forms, the documents you upload for their review, your indications of interest and commitments, and records of your meetings and correspondence with them through the Service.

That operator is a separate and independent controller of your information. They decide how they use it, subject to their own privacy practices and their own legal obligations — which Mownt does not set and does not enforce. For questions about how a particular operator handles your data, contact that operator directly.

Account information. Your name, email address, and a hashed password. Investor accounts are not billed, so we collect no payment details from you.

Identity and accreditation documents. If an operator asks you to verify your identity or accreditation status, the documents you upload are stored for that operator’s review. These are sensitive, and they are accessible to that operator and to Mownt staff only where support or security requires it.

Investing activity. Deals you are given access to, pages you view, documents you open, indications of interest and soft commitments you record, and meetings booked through connected scheduling tools.

Communications. Email we send on an operator’s behalf, and whether it was delivered and opened. Replies you send may be recorded on your contact record with that operator.

Usage and log data. Standard technical data including IP address, browser type, pages visited, referring URLs, and timestamps.

To operate the portal and show you what the operator has given you access to; to keep accounts secure; to send transactional email; and to maintain the compliance records an operator needs to meet their own obligations under Regulation D — including records of when a relationship began and what was disclosed.

Mownt does not sell your information, and does not use it to market other operators’ offerings to you.

Beyond the inviting operator, your information is processed by service providers who run parts of the platform on our behalf:

• Supabase — database hosting, authentication, and file storage
• Vercel — application hosting
• Resend — transactional and campaign email delivery
• Anthropic — AI features used by operators on deal material
• SignWell — electronic signature, where an operator sends you a document to sign
• Calendly, Google, Apple — scheduling and calendar, where an operator has connected them

We may also disclose information where the law requires it, or to protect the rights and safety of users and the Service.

We keep your account data while your account is active. Some records are kept longer because an operator is required to keep them: compliance and audit records supporting a securities offering are append-only by design and are retained on the operator’s behalf even after you stop using the portal.

You may request access to, correction of, or deletion of your account information by writing to privacy@mownt.com.

A deletion request to Mownt does not erase the operator’s own records of you. They hold their own copy as an independent controller, and compliance records tied to an offering generally cannot be deleted. To have an operator remove your information, ask that operator.

Data is encrypted in transit and at rest, access is scoped per tenant so one operator cannot see another’s investors, and sensitive credentials are encrypted with keys held outside the database. No system is perfectly secure; we cannot guarantee absolute security.

We may update this notice. Material changes will be posted here with a new effective date. Questions: privacy@mownt.com.