Privacy Policy
Last updated: August 27, 2026
Overview
Sophon Capital ("we," "us," or "our") operates sophon.capital. This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our service.
Information We Collect
When you submit a deck for analysis, we collect:
- Email address - to send you the analysis results and follow-up communications
- Pitch deck (PDF) - the document you upload for AI-powered analysis
- Website URL - if provided, to enrich our understanding of your company
- IP address and user agent - for rate limiting and security purposes
How We Use Your Information
- AI Analysis - Uploaded PDFs are converted to text with Mistral's OCR service, then your deck is processed by AI models (Groq, OpenAI) to generate a First Look analysis
- Email Communications - We send you the analysis results and may follow up regarding potential investment
- Internal Review - Our team reviews submissions to evaluate investment opportunities
- Private Investment Review - When this internal workflow is enabled, we stage the original PDF and raw founder-submitted fields in authenticated private Vercel Blob storage and a limited-access queue. After a team member verifies the file and approves that specific deck, the PDF, submitted website, and a deck-first diligence prompt may be provided to a signed-in ChatGPT subscription for a separate internal investment review. The public-site First Look, scores, enrichment, and personalization are excluded. The workflow may create a founder email draft for human review, but that draft is never sent automatically
- Service Improvement - Aggregated, anonymized data may be used to improve our analysis quality
Third-Party Services
We use the following third-party services to operate:
- Groq / OpenAI - AI model providers for the public First Look analysis
- ChatGPT - signed-in subscription used for separately approved internal investment review of a submitted deck
- Mistral - OCR text extraction from uploaded deck PDFs
- Resend - Email delivery service
- PostHog - consent-gated page and product analytics
- Vercel - Hosting and infrastructure, including optional AI Gateway routing and authenticated private Blob storage for staged investment-review PDFs
- Sentry - Error and performance monitoring for service reliability
- Upstash - Rate limiting and the limited-access investment-review job ledger (Redis)
These services process data according to their respective privacy policies and data processing agreements.
Data Retention
We retain your submitted deck and analysis results for the duration of our evaluation process and any subsequent investment relationship. An unprocessed PDF in the private investment-review staging store is retained for up to 30 days. After that internal review is completed, its cloud PDF copy is retained for seven days after completion and then deleted using its exact recorded storage path. Owner-restricted local review artifacts remain until our investment evaluation closes or we process a deletion request. Rate limiting data (IP addresses) is retained for 24 hours. You may request deletion of your data at any time by contacting us.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), rate limiting to prevent abuse, and secure handling of file uploads.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
To exercise these rights, contact us at hello@sophon.capital.
Cookies
Vercel Web Analytics provides aggregate traffic measurement without third-party cookies. PostHog stays off unless you explicitly accept analytics. Before that choice, the site does not initialize PostHog, send PostHog requests, or create PostHog analytics storage.
If you accept, PostHog records page views and bounded product interactions such as CTA clicks and submit-flow milestones, using local browser storage to maintain an anonymous analytics session. We do not enable autocapture, page-leave events, JavaScript error capture, replay, heatmaps, click diagnostics, performance capture, feature flags, surveys, or person profiles. You can withdraw consent at any time through the site-wide Privacy settings control.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at hello@sophon.capital.