Privacy policy

Who controls this policy

RoundOS is operated by Ignisha Educational Service FZCO, a UAE free zone company. For account, billing, website, and direct service relationship data, Ignisha Educational Service FZCO is generally the controller of your personal data.

For workspace content that a customer uploads, imports, or connects for a fundraising workspace, RoundOS generally processes that data on behalf of the customer workspace, subject to the product settings, these policies, and any separate written agreement.

What we collect

Account data: name, email address, authentication data, workspace membership, role, settings, and support communications.

Workspace content: company profile, round details, decks, files, notes, investor and contact records, pipeline data, relationships, warm paths, interactions, recommendations, approvals, drafts, and generated outputs.

Connected-source data: data you authorize us to access from services such as Gmail, Google Calendar, Google Drive, LinkedIn archives, and uploaded files. The exact data depends on the source you connect and the workflow you request.

LinkedIn browser capture data: if you connect the RoundOS Chrome extension, RoundOS may collect the visible LinkedIn conversations, profile fields, participant names, profile URLs, message text, timestamps shown on the page, page URLs, extension connection status, and sync logs from LinkedIn pages you open while capture is enabled.

Billing data: plan, subscription status, invoices, payment method metadata, and transaction status. Payment card details are handled by Stripe, not stored directly by RoundOS.

Usage and technical data: device, browser, IP address, session data, logs, product events, error reports, integration status, and security/audit events.

How we use data

To provide the product: create and operate workspaces, import context, organize CRM records, build pipeline views, identify next actions, prepare drafts, and run requested workflows.

To connect services: authenticate integrations, sync selected source data, refresh tokens, and allow you to disconnect or manage integrations.

To secure and support the service: prevent abuse, debug errors, monitor availability, respond to support requests, enforce access controls, and maintain auditability.

To handle billing and account administration: manage trials, subscriptions, invoices, payment status, account notices, and legal obligations.

To improve the product: analyze aggregate usage, improve reliability and user experience, and evaluate feature quality. We do not sell your data or your investor contacts.

Google user data

If you sign in with Google or connect Google services, RoundOS may collect or process the Google user data you authorize for the requested workflow: Google account identity data such as your name, email address, profile information, and account identifier; Gmail messages and metadata such as senders, recipients, subjects, timestamps, labels, message bodies, threads, and attachment data when authorized; Google Calendar event data such as titles, descriptions, times, attendees, locations, conference details, and event metadata when authorized; OAuth tokens, scopes, authorization status, and integration logs needed to keep the connection working. Google Drive data is collected only if you separately authorize or provide Drive files through a supported workflow.

RoundOS uses Google user data only to provide or improve user-facing fundraising features you request: sign-in, importing relevant email context, identifying follow-ups, syncing calendar context, preparing drafts, organizing CRM records, answering workspace questions, debugging the connection, and securing the service.

RoundOS shares or transfers Google user data only with service providers and subprocessors that help us host, store, secure, support, integrate, and process the requested workflow, including AI providers used to analyze authorized workspace context. Workspace owners, admins, and invited members may also see Google-derived workspace records according to their product permissions. We may disclose data when required for legal, security, fraud-prevention, or rights-protection reasons.

RoundOS protects Google user data using access controls, workspace permissions, HTTPS/TLS in transit, infrastructure security controls, logging and audit events, and encryption of sensitive integration credentials or tokens before storage where supported by the application.

RoundOS does not sell Google user data, use it for targeted advertising, user advertisements, personalized advertisements, retargeted advertisements, interest-based advertisements, data broker sales, information reseller transfers, creditworthiness decisions, lending purposes, creating unrelated databases, or training generalized AI or ML models.

RoundOS does not transfer Google user data to third parties for targeted advertising, user advertisements, personalized advertisements, retargeted advertisements, interest-based advertisements, data broker sales, information reseller transfers, creditworthiness decisions, lending purposes, creating unrelated databases, or training generalized AI or ML models.

RoundOS's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Google access from your Google account settings or disconnect supported integrations in the product. Revocation stops future syncs for that source but does not automatically delete workspace records already created from prior authorized use. You can request deletion of Google-derived workspace records by contacting us; deletion is subject to legal, security, billing, backup, and operational limits.

Chrome extension and LinkedIn browser capture

The RoundOS Chrome extension has a narrow purpose: saving LinkedIn conversations and profiles you open into your RoundOS fundraising workspace. It does not send LinkedIn messages, click buttons, scroll pages, read LinkedIn cookies, intercept network traffic, or call LinkedIn's internal APIs.

The extension transmits captured LinkedIn data to RoundOS over HTTPS and stores a scoped RoundOS browser-capture token in Chrome extension storage. The token can only be used for browser-capture endpoints for the linked source.

RoundOS uses LinkedIn browser capture data only to provide and improve the user-facing fundraising memory workflow you requested: source evidence, contact/profile import, CRM review items, proposed changes, recommendations, and related AI processing.

RoundOS does not sell extension data, use it for targeted advertising, transfer it to data brokers, determine creditworthiness, or train generalized AI or ML models. Human access to captured personal communications is restricted to user-authorized support, security, legal compliance, or aggregated internal operations as allowed by the Chrome Web Store User Data Policy.

RoundOS's use of information received from Chrome extension APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

You can pause or disconnect LinkedIn browser capture from the extension or RoundOS settings. Disconnection stops future capture and invalidates the extension token; existing workspace records created from prior authorized capture remain subject to the retention and deletion rules in this policy.

AI processing

RoundOS uses AI providers to analyze user-provided context, classify source material, suggest CRM updates, recommend next moves, and draft communications.

We send only the content needed for the requested workflow. We do not use workspace content to train general-purpose AI models, and we do not authorize AI providers to train general-purpose models on your workspace content.

AI outputs can be inaccurate or incomplete. You should review outputs before relying on them, sending messages, or making fundraising decisions.

When we share data

Service providers: we share data with vendors that help us host, store, secure, analyze, support, bill, integrate, and process AI workflows for the service. These providers may process data only as needed to provide their services to RoundOS.

Workspace users: workspace owners, admins, and invited members may access workspace content according to their roles and product permissions.

Legal and safety reasons: we may disclose data if required by law, legal process, security investigation, fraud prevention, rights protection, or to prevent harm.

Business transfers: if RoundOS is involved in a merger, acquisition, financing, reorganization, or asset sale, data may be transferred subject to appropriate protections.

Retention

We keep account and workspace data while your workspace is active or as needed to provide the service, comply with law, resolve disputes, enforce agreements, maintain security, and preserve backups.

If you delete data, disconnect a source, cancel a subscription, or request deletion, we will process that request subject to legal, security, billing, backup, and operational limits. Backup deletion may take additional time.

Your choices and rights

You can request access, correction, export, or deletion of your data by contacting us. Workspace admins may also manage users, integrations, and workspace content in the product.

Depending on where you live, you may have additional privacy rights such as requesting a copy of data, deletion, correction, restriction, portability, or objection to certain processing.

You can opt out of non-essential communications, but we may still send transactional, billing, security, and service notices.

International transfers

RoundOS is operated from the United Arab Emirates, and its service providers may process data in the UAE, United States, European Union, and other countries where they operate. Those countries may have privacy laws different from where you live.

Where required, we use appropriate safeguards for cross-border transfers and aim to comply with privacy obligations that apply to the service.

Children

RoundOS is not directed to children and should not be used by anyone under 18. Do not provide children's personal data to the service.

Changes and contact

We may update this Privacy Policy as the product, law, or our practices change. If changes are material, including material changes to how RoundOS uses Google user data, we will use reasonable efforts to notify users through the product, by email, or another appropriate channel.

Privacy questions or requests can be sent to hello@roundos.ai or mailed to Ignisha Educational Service FZCO, IFZA Business Park, Building A2, Dubai Silicon Oasis, Dubai, United Arab Emirates.