AI Angels Group
GDPR Privacy Statement

Effective Date: September 13, 2025

MANDATORY NOTICE: AI Angels Group processes personal data in accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and equivalent data-protection laws where applicable. This Privacy Statement explains how we collect, use, share, and protect personal data of users located in the European Economic Area (EEA), the United Kingdom, Switzerland, or otherwise subject to applicable data protection laws.

1. Data Controller

For the purposes of GDPR, the data controller is AI Angels Group ("AAG") and any designated affiliated entities operating the platform. Contact details for privacy or data protection inquiries are available through our secure support channel.

2. Categories of Personal Data

We may collect and process the following categories of personal data:

• Identification data (name, date of birth, nationality, government-issued identification where required);
• Contact information (email address, telephone number, mailing address);
• Account information (username, profile details, investor or founder status, preferences);
• Startup information, investment interests, communications, pitch submissions, and due diligence materials;
• Technical information (IP address, browser type, operating system, cookies, device identifiers, access logs, and security telemetry);
• Payment or billing information where applicable.

3. Legal Bases for Processing

We process personal data on one or more of the following legal bases:

• Performance of a contract or user agreement;
• Compliance with applicable legal obligations;
• Legitimate interests, including platform security, fraud prevention, service improvement, and operational administration;
• User consent where required, including optional marketing communications.

4. Purposes of Processing

Personal data is processed in order to:

• Create and administer user accounts;
• Connect founders, investors, advisors, and other members of the platform;
• Review startup submissions and facilitate investment opportunities;
• Provide customer support and respond to inquiries;
• Maintain platform security and detect fraud or abuse;
• Communicate important service announcements, legal notices, and platform updates;
• Improve our products, services, and user experience.

5. Data Sharing

We may share personal data with:

• Service providers assisting with hosting, communications, analytics, payment processing, security, or customer support;
• Professional advisors, auditors, insurers, or legal counsel where necessary;
• Government authorities where disclosure is required by applicable law;
• Successor organizations in connection with a merger, acquisition, restructuring, or sale of substantially all assets, subject to appropriate confidentiality obligations.

We do not sell personal data to third parties for marketing purposes.

6. International Transfers

Where personal data is transferred outside the EEA or other jurisdictions with data-transfer restrictions, AI Angels Group implements appropriate safeguards, including Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms recognized under applicable law.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Statement, satisfy contractual obligations, resolve disputes, enforce our agreements, and comply with applicable legal or regulatory requirements.

8. Data Subject Rights

Subject to applicable law, individuals may have the following rights:

• Right of access to personal data;
• Right to correct inaccurate or incomplete information;
• Right to erasure ("right to be forgotten") where legally applicable;
• Right to restrict processing;
• Right to data portability;
• Right to object to certain processing activities;
• Right to withdraw consent where processing is based upon consent;
• Right to lodge a complaint with the appropriate supervisory authority.

Requests to exercise these rights should be submitted through our secure support channel. Identity verification may be required before processing requests.

9. Security Measures

AI Angels Group employs appropriate technical and organizational safeguards, including encryption, access controls, multi-factor authentication, logging, continuous monitoring, secure software development practices, and regular security reviews to protect personal information against unauthorized access, disclosure, alteration, or destruction.

10. Confidentiality

Personal information, startup submissions, investor information, communications, and other confidential materials are treated as Confidential Information under our Terms of Service and applicable confidentiality obligations. Unauthorized disclosure or misuse may result in immediate termination of access and legal action where appropriate.

11. Updates

AI Angels Group may update this GDPR Privacy Statement from time to time to reflect changes in applicable law, technology, or business operations. Material updates will be posted on this website. Continued use of the platform after such updates constitutes acceptance of the revised Privacy Statement.

FINAL NOTICE: Your privacy rights are respected and protected in accordance with applicable law. Certain requests may be limited where retention or processing of personal information is required to comply with legal obligations, resolve disputes, enforce our agreements, protect our users, or maintain the security and integrity of the platform.