Privacy Policy

1. Introduction

Abax ("we", "us", "our") provides fund administration software for venture capital fund managers and their limited partners. This Privacy Policy explains how we collect, use, disclose, and protect information when you use abax.fund and the Abax platform (the "Service").

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, organization, and authentication credentials.
• Fund and investor data: commitments, capital calls, distributions, valuations, documents, and other records you upload or generate in the platform.
• Email integration data: if you connect a Gmail inbox, we access message metadata and content solely to identify and process portfolio company updates from senders matching companies in your portfolio.
• Usage data: log data, IP address, browser type, pages viewed, and timestamps.
• Billing data: billing contact and invoicing details needed to invoice you under your agreement with us. We do not collect or store payment card numbers.

3. How We Use Information

• To provide, maintain, and improve the Service.
• To process transactions and send transactional communications (capital call notices, LP reports, reminders).
• To authenticate users and secure the Service.
• To respond to support requests and communicate product updates.
• To comply with legal obligations.

4. Google API Services & User Data

Abax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Gmail data accessed via OAuth is used only to send fund communications on your behalf and to identify portfolio company updates.
• We do not use Gmail data to train generalized AI/ML models.
• We do not transfer Gmail data to third parties except as necessary to provide the Service, comply with law, or with your consent.
• We do not allow humans to read Gmail data except (a) with your explicit consent, (b) for security purposes, (c) to comply with law, or (d) when data is aggregated and anonymized.

5. How We Share Information

We share information with:

• Service providers (subprocessors): Supabase (database, authentication, file storage, serverless functions), Cloudflare (DNS, TLS and hosting), Google (email delivery and inbox access via the Gmail API; Gemini for extracting structured data from the documents, portfolio-company emails, CRM notes and meeting notes you choose to process), bank-feed providers you connect (Mercury, Plaid, Brex, Grasshopper), CRM and notetaker services you connect (Attio, Granola), a sanctions-screening provider (ofac-api.com) and our affiliate bookkeeping service YourBooks for entities you link. The full list, with the data each receives, is at abax.fund/subprocessors.
• Within your organization: data is shared with members of your organization based on assigned roles and permissions.
• Legal: when required by law, subpoena, or to protect our rights.

We do not sell personal information.

6. Data Security

We use encryption in transit (TLS), Row-Level Security on the database, OAuth tokens stored encrypted, and role-based access controls. No system is fully secure, and we cannot guarantee absolute security.

7. Data Retention

We retain account and fund data for the duration of your subscription and as required to comply with legal, accounting, and regulatory obligations. You may request export or deletion of your data by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

9. Revoking Google Access

You can revoke Abax's access to your Google account at any time via Google Account permissions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Each version is dated below.

• Version 1.2, October 5, 2026: fixed the policy date (it previously displayed the current date); named every subprocessor and linked the subprocessor list; described what the AI provider receives.
• Version 1.1, September 29, 2026: removed card payments (Stripe); billing is invoiced under your agreement with us.
• Version 1.0, August 20, 2026: initial published version.

11. Contact

Questions about this Privacy Policy? Contact us at privacy@abax.fund.