Institutional Compliance // EstiloFlow Vantage

Data Privacy & Pitch Deck Protection Policy

Effective Date: October 30, 2026 | Document ID: EF-SEC-PRIV-2026-V2

            Fiduciary Zero-Retention Covenant: EstiloFlow Vantage processes venture capital pitch decks, financial ledgers, and cap table models exclusively in ephemeral volatile memory. Uploaded diligence assets are never retained, sold, shared with third parties, or used to train public or proprietary machine learning weights.
        

1. Scope & Fiduciary Commitment

This Privacy Policy governs the processing of confidential venture capital pitch decks, investment memos, cap tables, and company submissions uploaded to EstiloFlow Vantage (estiloapp.com), operated by EstiloFlow Holdings. We recognize that investment materials contain proprietary corporate trade secrets, non-public financial performance, and sensitive founder identity information.

2. Confidential Asset Processing

RAM-Only Execution: PDF pitch decks, balance sheets, and cap tables undergo optical and multi-modal analysis inside air-gapped, volatile container instances. Upon session conclusion, memory buffers are explicitly unlinked and purged.
Zero Model Training: Neither user prompts, extracted metrics, nor founder pitch decks are ever ingested into model retraining loops, retrieval caches, or foundation model dataset pipelines.
Zero Public Egress: Model inference runs across sovereign private GPU nodes or isolated zero-retention enterprise API enclaves bound by strict non-disclosure covenants.

3. Information We Collect

Account Credentials: Corporate email address, authentication credentials, and institutional firm affiliation for account verification and billing.
Telemetry & Usage Data: Anonymized diagnostic performance data (API response latencies, cryptographic solver compute time) strictly used for infrastructure resilience.
Voluntary Feedback: Inquiries submitted via institutional contact channels.

4. Data Sovereignty & Regional Compliance (GDPR, UK DPA, CCPA)

EstiloFlow Vantage complies with the European General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA):

Right to Erasure (Article 17 GDPR): You may request immediate purging of all portfolio metadata, account records, and associated historical audit references at any time.
Right of Access & Portability (Article 15/20 GDPR): Institutional users may export complete audit summaries in structured JSON format.
Data Controller & Contact: For inquiries regarding data handling, contact our Chief Security Officer at security@estiloapp.com.

5. Cookies & Tracking Technologies

EstiloFlow Vantage uses strictly essential authentication and security cookies necessary for session state management. We do not deploy third-party advertising tracking networks or sell browsing profiles.

6. Policy Updates & Inquiries

We may update this policy to reflect structural enhancements to our infrastructure. Significant modifications are broadcast to registered institutional accounts 30 days prior to enforcement.