Data Processing Agreement

For your account data Capitalynx acts as controller. For personal data you upload about third parties (for example team members or portfolio contacts) you are the controller and Capitalynx is the processor.

Subject matter: operation of the Capitalynx platform. Duration: the term of your account. Nature and purpose: hosting, storage, matching, analysis and communication. Data subjects: founders, investors, their teams and contacts.

Process only on documented instructions, ensure confidentiality of personnel, implement appropriate technical and organisational measures, assist with data-subject requests and breach notification, and delete or return data at the end of the term.

Current sub-processors include our cloud database and authentication provider, hosting provider, AI model providers, payment processor and analytics providers. We give notice before adding a new sub-processor and you may object on reasonable data-protection grounds.

Transfers outside the EEA/UK rely on Standard Contractual Clauses or an adequacy decision, with supplementary measures where needed.

We provide reasonable information to demonstrate compliance and support audits no more than once per year, subject to confidentiality.

To execute a signed DPA, email capitalynx.in@gmail.com.