1. Introduction

Abax ("we", "us", "our") provides fund administration software for venture capital fund managers and their limited partners. This Privacy Policy explains how we collect, use, disclose, and protect information when you use abax.fund and the Abax platform (the "Service").

2. Information We Collect

We collect the following categories of information:

Account information: name, email address, organization, and authentication credentials.
Fund and investor data: commitments, capital calls, distributions, valuations, documents, and other records you upload or generate in the platform.
Email integration data: if you connect a Gmail inbox, we access message metadata and content solely to identify and process portfolio company updates from senders matching companies in your portfolio.
Usage data: log data, IP address, browser type, pages viewed, and timestamps.
Payment data: billing details processed by our payment provider (Stripe). We do not store full card numbers.

3. How We Use Information

To provide, maintain, and improve the Service.
To process transactions and send transactional communications (capital call notices, LP reports, reminders).
To authenticate users and secure the Service.
To respond to support requests and communicate product updates.
To comply with legal obligations.

4. Google API Services & User Data

Abax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Gmail data accessed via OAuth is used only to send fund communications on your behalf and to identify portfolio company updates.
We do not use Gmail data to train generalized AI/ML models.
We do not transfer Gmail data to third parties except as necessary to provide the Service, comply with law, or with your consent.
We do not allow humans to read Gmail data except (a) with your explicit consent, (b) for security purposes, (c) to comply with law, or (d) when data is aggregated and anonymized.

5. How We Share Information

We share information with:

Service providers: Supabase (database, auth, storage), Stripe (payments), Google (email delivery via Gmail API), and AI providers strictly for document parsing and extraction.
Within your organization: data is shared with members of your organization based on assigned roles and permissions.
Legal: when required by law, subpoena, or to protect our rights.

We do not sell personal information.

6. Data Security

We use encryption in transit (TLS), Row-Level Security on the database, OAuth tokens stored encrypted, and role-based access controls. No system is fully secure, and we cannot guarantee absolute security.

7. Data Retention

We retain account and fund data for the duration of your subscription and as required to comply with legal, accounting, and regulatory obligations. You may request export or deletion of your data by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

9. Revoking Google Access

You can revoke Abax's access to your Google account at any time via Google Account permissions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice.

11. Contact

Questions about this Privacy Policy? Contact us at privacy@abax.fund.