Privacy Policy

The Moonshot Deal Room is operated by TechCabal, which decides how and why your personal data is used (the data controller). This policy explains what we collect, why, who we share it with and your rights, including under Nigeria’s Data Protection Act 2023 and, where it applies, the UK and EU GDPR.

• Account details: name, email, password (stored only as a secure hash), phone, LinkedIn URL, role and settings. If you sign in with Google we receive your name, email and Google account ID.
• Profile information: for founders, company details, sectors, stage, team, traction and fundraising figures; for investors, firm details, mandate, cheque sizes and portfolio.
• Verification material: identity documents, a live selfie, incorporation certificates, financials, cap tables, pitch decks and website or LinkedIn checks.
• Activity: connections, messages and attachments, meetings (including the Zoom transcript of online meetings, available to both participants), saved profiles, pipeline notes and notifications.
• Technical data: IP address, device identifier, browser and sign-in events, used for security and fraud prevention, and essential cookies that keep you signed in. We do not use advertising cookies.

• To run the Deal Room: accounts, profiles, discovery, AI Matches, messaging, meetings and the pipeline (to provide the service you asked for).
• To review applications: verifying identity and companies, eligibility checks, duplicate detection and pitch-deck screening (legitimate interests in a trusted marketplace, and your consent where required for identity checks).
• To keep the platform secure: rate limiting, fraud and abuse detection, audit logs (legitimate interests and legal obligations).
• To contact you about your account, applications, connections and meetings, and about Moonshot events if you agree.

Match scores are calculated from the profile fields you provide. We do not make decisions with legal effects about you by automated means alone: the Moonshot team reviews every application.

• Other approved members see your profile and match information. Verification documents are never shown to members; pitch decks and data-room files are shared only with members you connect with.
• The public sees your startup’s name, sector, stage, country and one-liner on the public startup list only if you opt in. Traction and fundraising figures are never public.
• The Moonshot team sees what it needs to review applications and support members.

We use trusted processors that act on our instructions: cloud hosting and secure file storage, email delivery, Zoom for online meetings, Google for optional sign-in and, where used, an identity-verification provider. We do not sell your personal data.

Some providers process data outside your country. Where that happens we rely on adequacy decisions, standard contractual clauses or other safeguards required by law.

• Account and profile data: while your account is open, then deleted or anonymised after you close it.
• Identity and financial verification documents: up to 12 months after a decision on your application, then deleted for inactive accounts.
• Messages and meeting records: while the account of at least one participant is open.
• Security logs: as long as needed to protect the service and meet legal obligations.

Data is encrypted in transit; passwords are hashed; verification documents are kept in private storage and opened only through short-lived links by authorised people. Access is limited by role and logged. No system is perfectly secure, so please use a strong, unique password and tell us about anything suspicious.

You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict certain uses, and withdraw consent at any time. You can edit most information in your profile and Settings, and delete your account from Settings.

To exercise a right, please contact the Moonshot team through moonshot.techcabal.com. We will respond within the time the law requires. You may also complain to the Nigeria Data Protection Commission or your local data-protection authority.

The Deal Room is for professionals aged 18 and over. We do not knowingly collect data from children.

We will update this policy when our practices change and show the date at the top. We will tell you by email or in the app about significant changes.