Privacy Policy

1. Introduction

G Capital LLC ("Company," "we," "us," or "our"), located at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, UAE, operates the GIGABOOST.AI platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account or use our Service, we may collect the following personal information:

• Email address (used for authentication via magic link)
• Full name and company name (provided during onboarding)
• Company stage, fundraising goals, and experience level
• SMTP email credentials (if you choose to connect email outreach)
• Google account data (if you connect Gmail): When you connect your Gmail account via Google OAuth, we access your Gmail send capability and read reply threads for emails sent through GIGABOOST.AI. We do not access, read, or store any other emails in your inbox.
• Pitch deck documents you upload (PDF files)

2.2 Usage Data

We automatically collect certain information when you access the Service, including:

• IP address, browser type, and device information
• Pages visited, features used, and time spent on the platform
• Referral URLs and search terms that led you to our Service
• Usage patterns and feature engagement metrics

2.3 AI-Generated Data

Our AI modules generate data based on your inputs, including deck reviews, investor match scores, financial projections, outreach content, valuations, and fundraising strategies. This generated data is stored in association with your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process your pitch decks through our AI analysis pipeline
• Match you with relevant investors from our database
• Generate personalized outreach content and fundraising strategies
• Send transactional emails (magic links, notifications)
• Monitor usage against your subscription plan limits
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• AI Processing: Your pitch deck content is sent to Anthropic's API (Claude) for analysis. Anthropic processes this data according to their data usage policies and does not use API inputs for model training.
• Email Delivery: If you use our magic link authentication, email delivery is handled by Resend, our email service provider.
• Investor Enrichment: We use the Perplexity API to search for publicly available investor information to enrich our database. Your personal data is not shared in these searches.
• Google API Services: If you connect your Gmail account, we use Google OAuth to send outreach emails on your behalf and detect investor replies. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Google account data for advertising, do not sell or transfer it to third parties, and do not use it for any purpose other than sending approved outreach emails and detecting replies to those emails.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure database storage with per-user data isolation, rate limiting on API endpoints, input validation and sanitization, HTTP security headers via Helmet, and session-based authentication with secure tokens. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5a. Google User Data — Limited Use Disclosure

GIGABOOST.AI's use of data received from Google APIs is limited to the following purposes:

• Sending outreach emails to investors from your connected Gmail address, only after you have explicitly approved each email inside the GIGABOOST.AI platform
• Detecting replies from investors to those specific outreach emails, in order to pause automated sequences when a response is received

We do not use Google user data to develop, improve, or train any AI or machine learning models. We do not share Google user data with any third party except as necessary to operate the features described above. We do not use Google user data for any advertising purpose. Connecting your Gmail account is entirely optional — the platform functions without it using standard SMTP credentials instead.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. You may request deletion of your account and associated data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at the address listed below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure that your personal data remains protected in accordance with this Privacy Policy when transferred internationally.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: