Draft for legal review. Items in [brackets] still need real details before Fursa launches.
Privacy Policy
Last updated 4 November 2026
What we collect
- Account: your email, name, role (founder or investor), and records of when you accepted our terms.
- Founders: startup profiles (name, description, sector, stage, county, raise amount, whether the startup is women- or youth-led), pitch videos and automatic captions.
- Investors: profile and thesis (type, firm, bio, LinkedIn, sectors, stages, counties, ticket size), the pitches you watched and for how long, your calls, pass reasons, notes and intro requests.
- Arena: practice calls and notes. Guests get a temporary account with no email.
- Safety and operations: reports, moderation actions, sign-in rate limits, and counts of failed uploads.
“Women-led” and “youth-led” are optional. We use them only to measure whether Fursa reaches founders fairly.
Why we use it
- To run the service you signed up for: showing pitches, recording calls, and making introductions you both agree to.
- To keep Fursa safe: verification, moderation and abuse prevention.
- To measure impact. We publish totals only, and hide any breakdown too small to keep people anonymous.
We rely on your consent and on what's needed to provide the service. We don't sell personal data, show ads, or use tracking or advertising cookies.
Who sees what
- Investors see your startup profile and pitch, according to the visibility you choose. They see your name and email only after you accept their intro request.
- Founders see investor feedback only as totals, and pass reasons only once at least 3 investors have called. When an investor requests an intro, founders see that investor's profile and activity counts.
- The Arena shows only pitches the founder opted in, without the founder's name. Notes reach founders without the writer's name.
- Fursa staff can see accounts to verify investors and moderate content.
Service providers and transfers
We use these processors, under contracts that protect your data:
- Mux, to store and stream pitch videos and make captions
- Resend, to send sign-in codes and intro emails
- [Hosting and database provider and region]
Some of these process data outside Kenya, including in the United States. We transfer data only with the safeguards the Data Protection Act requires.
How long we keep it
- We keep your data while your account is open. Deleting a startup or your account removes it, and its videos, from Fursa straight away.
- Deleted data can stay in encrypted backups for up to [30] days.
- Unused guest accounts are removed after [90] days. Counts already included in published totals stay, but can't identify you.
Your rights
Under the Data Protection Act, you can:
- be told how your data is used, which is this policy
- access your data: download it from your account page
- correct it: edit your profile, or ask us to correct anything else
- delete it: delete a startup or your whole account from your account page
- object to processing, or withdraw your consent
To use any of these rights, contact [[email protected]]. You can also complain to the ODPC at odpc.go.ke.
Security and cookies
- Sign-in codes are stored hashed, and expire after 5 minutes.
- Pitch videos are served only through short-lived signed links, to people allowed to see them.
- We use only essential cookies: your sign-in session, and which startup a founder is viewing. Your light or dark theme preference is saved in your browser.
- Fursa is for adults. We don't knowingly collect data from children.
Contact
Data protection questions: [[email protected]] · [Registered office address, Nairobi]. If we change this policy materially, we'll ask you to accept the new version.