1. Who we are
InvestOS is a local-LLM startup-evaluation platform operated by AI Factory for investment teams assessing prospective startups. All document parsing and AI analysis run on the firm’s own hardware; each tenant operates an isolated workspace.
2. Data we process
- Analyst account data — name, email, role, sign-in events.
- Startup documents — pitch decks, financials, cap tables, and data-room files uploaded by analysts. Treated as confidential under the firm’s agreements with the startup.
- Diagnostic data — IP, user-agent, device fingerprint at the moment of each state-changing action (audit-event scope only).
3. Local-only AI processing
All AI inference (PDF parsing, field extraction, classification) runs on hardware controlled by AI Factory. The platform does not transmit startup data to OpenAI, Anthropic, Google Document AI, AWS Textract, or any other third-party LLM/OCR API. This constraint is enforced in code: no external API key fields exist in the runtime configuration.
4. Multi-tenant isolation
Each investment team operates a separate Organization. Postgres row-level security keys every domain-table read/write to the acting org. Data from one tenant is not visible to any other tenant under any access path.
5. Chain of custody
Every state change — startup creation, field override, evaluation runs, verdict generation, document download — writes a tamper-evident audit-event row scoped to the actor and the affected resource. Audit events are retained for the life of the workspace.
6. Retention
Data is retained per the investment firm’s record-retention policy. A workspace Admin may archive or anonymize individual startups at any time.
7. Contact
Privacy enquiries should go to your workspace Admin. For platform-level questions, contact AI Factory through the channel established during pilot onboarding.