SummitPoint Collective, LLC, ("SummitPoint "), is committed to safeguarding your privacy. This Privacy Policy outlines the types of information we collect from website visitors, clients, and other third parties through our business operations and our services, including our web-based application available at SummitPoint.app (the "Services"). We may also offer a mobile application, including an iOS application, in the future.

Relationship to Terms of Service

This Privacy Policy should be read together with our Terms of Service which govern your use of the Services. In the event of a conflict between this Privacy Policy and the Terms of Service regarding data handling, this Privacy Policy will control with respect to personal information.

If you have any questions about SummitPoint's privacy practices or Privacy Policy, please send an email to privacy@summitpoint-collective.com .

EEA, UK, California, Colorado, Connecticut, Nevada, Utah, and Virginia residents may have special opt-out rights, which may be exercised as detailed below.

Personal information we collect and what we use it for

We utilize your personal information for several core business purposes, including processing and fulfilling transactions for products or services and registering and servicing your online account (both directly with us and through authorized third-party entities). Your data allows us to provide detailed information about our own offerings as well as relevant third-party products and services. We also use your contact information to respond to your inquiries—whether received directly or via a third party—and to send service-related messages or marketing communications via call, text, or email. Additionally, we may use your data to administer surveys, sweepstakes, or contests to better engage with our community.

Please note that we do not process personal information on behalf of other entities as a service provider, nor do we currently engage in interest-based or targeted remarketing across multiple third-party websites.

Summary of Data Usage

User-Generated Information

To provide a customized and intuitive experience, SummitPoint may collect and process User-Generated Information and Inferred Data. When you engage with our platform—such as by posting to blogs, providing feedback, leaving comments, or sharing photos, videos, and messages—we collect this content to facilitate community interaction and service delivery.

Information about you from other sources

To ensure full transparency regarding our data sources and relationships, we disclose that SummitPoint collects and receives information from several distinct channels. We collect personal data directly from you through our web-based application, and, when available, our mobile applications. Additionally, we supplement our records with publicly available data to enhance our service accuracy.

As part of our core operations, we facilitate the flow of information within the startup ecosystem by providing data-driven services to various professional entities and firms. While we share necessary insights with these ecosystem partners to fulfill our service obligations, we do not maintain traditional third-party business partnerships for joint marketing or shared data ventures.

Artificial Intelligence, Data Use, and Automated Processing

SummitPoint provides features powered by a proprietary artificial intelligence system known as "Frank."

Use of AI and Automated Processing

When you interact with the Services, including by submitting prompts, uploading content, or otherwise engaging with Frank, SummitPoint may process such information to:

  • Generate responses, insights, and recommendations
  • Improve system performance, functionality, and accuracy
  • Maintain security, integrity, and prevent misuse of the Services
  • Analyze user activity, preferences, and interactions in order to personalize content, enhance user experience, and improve the relevance of features and communications within the Services

    • Use of Identifiable Information to Provide the Services. Where information has not been aggregated, anonymized, or de-identified, SummitPoint may use identifiable personal information contained in User Inputs and other information submitted through the Services only as reasonably necessary to provide, operate, support, secure, and maintain the Services and their features, including generating responses, insights, recommendations, workflows, and other functionality requested by the user.

    Data Classification and User Responsibilities

    You are responsible for the content you submit to the Services ("User Inputs"). User Inputs may include business, financial, or other information.

    You agree:

  • Not to submit highly sensitive personal information (such as Social Security numbers, financial account credentials, health or medical information, or other sensitive data under applicable law) unless expressly required for a specific, supported use case
  • Not to submit information you do not have the right to use or disclose
  • To ensure that any personal information submitted is limited to what is reasonably necessary for your intended use of the Services

    • SummitPoint does not require sensitive personal data to operate core platform functionality and disclaims responsibility for sensitive data submitted outside of intended use cases.

    AI Outputs and Reliance Disclaimer

    Outputs generated by Frank ("Outputs") are probabilistic in nature and are provided for informational purposes only. Outputs may not be accurate, complete, or tailored to your specific circumstances.

    To the maximum extent permitted by applicable law:

  • SummitPoint does not warrant the accuracy, reliability, or suitability of any Outputs
  • Outputs do not constitute legal, financial, investment, or professional advice
  • You are solely responsible for evaluating Outputs and any decisions, actions, or omissions made in reliance on them
  • You should independently verify any information before relying on it, particularly in high-stakes, financial, legal, or operational contexts

    • Limitation of Liability (AI-Specific)

    To the fullest extent permitted by applicable law, SummitPoint shall not be liable for any indirect, incidental, consequential, special, or punitive damages arising out of or relating to:

  • Your use of, or reliance on, Outputs generated by Frank
  • Any inaccuracies, errors, or omissions in such Outputs
  • User Inputs provided to the Services, including their content, legality, or accuracy

    • Nothing in this section limits liability that cannot be excluded under applicable law, including liability for fraud, willful misconduct, or gross negligence.

    This section is intended to be read in conjunction with, and not in limitation of, the broader limitation of liability provisions set forth in the Terms of Service .

    Enterprise, Investor, and Partner Use

    SummitPoint's platform is designed to facilitate interactions among founders, investors, and strategic partners. In connection with these use cases:

  • Information you provide may be shared within the platform environment with other authorized users, subject to your settings and the functionality of the Services
  • SummitPoint acts as a facilitator of information exchange and does not independently verify the accuracy, completeness, or reliability of user-provided content
  • Any decisions made by founders, investors, or partners based on platform content or AI-generated Outputs are made at their own risk

    • SummitPoint does not act as a broker, advisor, fiduciary, or intermediary in any transaction or relationship formed through the Services unless expressly agreed in a separate written agreement.

    Your Rights

    Where required by applicable law, you may have the right to request access to, correction of, or deletion of your personal information, or to object to or limit certain types of processing, including automated processing. You may exercise these rights by contacting us at privacy@summitpoint-collective.com .

    Clients and authorized users

    The information we collect from clients and authorized users

    In your capacity as an authorized user or contact for our Services, we collect limited personal information about you, including but not limited to your name, email address and in some cases phone number, title(s), employer name(s), physical address and any other personal information that you choose to provide to us to obtain the Services, or any other information which you communicate to us by email or any other form of communication.

    We also collect your IP Address, geographical location and track information about your use of our Services, including detailed session information.

    The purpose for which we collect information from clients and authorized users

    We use the personal information to administer and support the contracts and relationships we have with you or your employer and the authorized users of and subscribers to our Services. We use this information to provide updates about these Services, to monitor compliance with the terms on which we offer our Services, to enable third parties to provide services related to our provision of Services, to improve the Services, to provide you relevant SummitPoint content, to deliver support related to the Services to you or your employer, to manage billing and other client inquiries, send you information about other products or services that may be of interest to you. We may provide personal information to any competent legal or regulatory body in accordance with applicable law and regulation. We may provide personal information to a potential buyer or target (and to their or our agents and advisers) in connection with any proposed transaction involving all or any part of our business. If such a change happens to our business, the buyer or target will use your personal information in the same way as set out in this Policy or will inform you about how it will use your personal information as required by applicable law.

    Website visitors

    The information we collect through the Services

    If you are accessing the Services, including our websites, the information we collect may include name, IP, physical and email addresses, phone number(s), unique advertising identifier and mobile device type, cookies and other trackers, non-cookie identifiers, browser data, and any other information you choose to share via an online registration or request form. We also collect information about your use of the Services and web-browsing activities and what newsletters or other communications you agree to receive following your visit to the Services, including any of our websites.

    The purpose for which we collect information from website visitors

    We use the personal information (and any preferences indicated by you, where appropriate) to send you the data, tools and other information you have requested, to inform you about products and services we offer, to improve the Services, and, in some cases, to communicate with you about SummitPoint services and, where applicable, relevant ecosystem opportunities consistent with this Privacy Policy.

    We may disclose your information, including your communications to us and including details on your use of our Services, with our vendors that we use to enable our Services or to interact with customers or potential customers. For example, SummitPoint utilizes a proprietary artificial intelligence assistant known as "Frank," which is developed and operated internally. Interactions with Frank may be processed and stored by SummitPoint to provide, improve, and support the Services. Another example: Microsoft technology is utilized for our corporate email, and Microsoft may have real time access to your emails and may record your emails with SummitPoint so that SummitPoint can resume or follow up on discussions or otherwise communicate with you about our Services. By using our Services, you agree that we can disclose to our vendors your information, including your communications to us and including details on your use of our Services.

    If you need to update your preferences or personal information or make a data subject request, you need only email us at privacy@summitpoint-collective.com or follow the instructions contained in any email we have sent to you to unsubscribe or change your preferences.

    SummitPoint Suppliers

    The information we collect from suppliers

    We collect limited personal information, such as name, email and in some cases your IP address, phone number, and postal business address, or other information you provide to us by email or any other method of communication, as a contact for the supplier of the business products and services being provided to SummitPoint.

    The purpose for which we collect information from suppliers

    We use the personal information to administer and support the contracts we have with you or your employer. We also may use this information to improve the Services, to contact you for purposes of dealing with support, billing and other inquiries about your products and services.

    Business professionals

    The information we collect on business professionals

    We may collect your name, physical and email addresses, phone number(s), current and previous employers, current and former job titles, investment details, biographical information, gender, and educational history. We also may publish one or more photos of you.

    The purpose for which we collect information on business professionals

    We may make certain professional information available within the platform to facilitate connections among users, consistent with user expectations and applicable law.

    Links to other websites

    SummitPoint may provide links to other websites from the Services. We encourage you to read those websites' individual privacy policies before providing any of your personal information to them. SummitPoint is not responsible for those websites, their policies or practices.

    Personal information: How long we keep it

    SummitPoint retains personal information only for as long as necessary for the uses we have set out above. Individual jurisdictions have different regulatory and legal retention requirements and SummitPoint is bound to keep certain personal data in accordance with these requirements.

    Personal information: How we store and process it

    All personal information we gather from you may be processed and stored in any one of our locations and may subsequently be transferred to other countries for further processing, storage, or use by either SummitPoint or third-parties on SummitPoint's behalf. Our staff who need to access personal information to perform their roles will have access to it and have agreed to comply with SummitPoint's policies on data protection.

    Service Partners

    SummitPoint uses a number of third-parties to provide services. We share your personal information with trusted third-party service providers (our " Service Partners") to facilitate our services and perform business-related functions on our behalf. These partners are contractually restricted from using, selling, or disclosing your data for any purpose other than providing the specific services we have requested.

    Our Service Partners may include, but are not limited to the following categories:

  • Application Hosting and Deployment (Vercel): To host our web application and ensure fast, reliable delivery of our services to your browser.
  • Serverless Computing (AWS Lambda): To run backend processes and handle real-time data requests without maintaining physical hardware, ensuring our platform scales with your needs.
  • Database and Authentication (Supabase): To securely store your account information, manage user logins, and maintain the integrity of the data you provide.
  • Artificial Intelligence and Natural Language Processing (e.g., Perplexity): To power the interactive and intelligent features of our service, such as generating automated insights, answering complex queries, and enhancing content based on the information you provide.
  • Cloud Hosting: To store and protect your data on secure servers (e.g., Vercel for application hosting and deployment).
  • Providing systems and software for administrative functions, such as sales processing, accounting and finance management, and procurement.

    • In such cases, SummitPoint remains the controller of the personal data, and the third-parties are only permitted to process the data in accordance with our instructions, and in compliance with all applicable data protection regulations in relation to their processing activities.

    SummitPoint utilizes a modern cloud-based infrastructure, including Supabase (database and authentication), Vercel (application hosting and deployment), and AWS Lambda (serverless compute). These providers implement industry-standard security and data protection measures. SummitPoint requires its service providers to process personal information only on its behalf and in accordance with applicable data protection laws. SummitPoint's data warehouses currently reside in the US. By using our platform you understand and agree that your personal information may be processed and stored in the United States through these service providers. More information about AWS's compliance can be found on its Compliance page .

    Protection of your personal information

    We have technical and organizational security measures in place reasonably designed to protect against unauthorized access to, or unauthorized alteration, disclosure, or destruction of personal information. The security measures we use are appropriate to the nature, scope and purpose for which we use the personal data we collect. We require our services providers to have appropriate security measures in place as well. Our measures include internal reviews of our data collection, storage, and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data.

    We have processes in place related to complying with data subject requests and to provide notices as required under applicable law, to address complaints and to comply with breach reporting procedures and incident management plans. SummitPoint networks are protected by industry-standard firewall and password protection systems. Our security and privacy policies are periodically reviewed and enhanced as necessary. Further information on our security and incident management is available from privacy@summitpoint-collective.com .

    Cookies

    SummitPoint primarily uses first-party cookies necessary for authentication, security, and core platform functionality. We do not currently use third-party advertising cookies for cross-site tracking.

    California + General U.S. Privacy Rights

    Your U.S. Privacy Rights

    Depending on your state of residence (including California, Colorado, Connecticut, Utah, Virginia, and Texas), you may have the following rights, subject to applicable law:

  • The right to access personal information we collect about you
  • The right to correct inaccuracies
  • The right to delete personal information
  • The right to obtain a copy of your data (data portability)
  • The right to opt out of certain processing activities, including sale, sharing, or targeted advertising (if applicable)

    • To exercise your rights, please contact us at privacy@summitpoint-collective.com .

    Texas Privacy Rights

    If you are a Texas resident, you may have rights under the Texas Data Privacy and Security Act (TDPSA), including the right to:

  • Confirm whether we are processing your personal data
  • Access the personal data we have collected about you
  • Correct inaccuracies in your personal data
  • Delete personal data provided by or obtained about you
  • Obtain a copy of your personal data in a portable format
  • Opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (if applicable)

    • Appeals Process. If we decline to take action on your request, you may appeal our decision by contacting us at privacy@summitpoint-collective.com with the subject line "Privacy Rights Appeal." We will respond in accordance with applicable law.

    California residents

    The California Consumer Privacy Act (CCPA) requires that we list the categories of individuals' personal information that we've sold or disclosed for business purposes in the last 12 months.

    Sale or Sharing of Personal Information.

    SummitPoint does not sell personal information as that term is defined under applicable privacy laws, and we do not share personal information for cross-context behavioral advertising. As of the "Last Updated" date of this Privacy Policy, SummitPoint has not sold or shared personal information for cross-context behavioral advertising.

    As our services evolve, we will update this Privacy Policy if our data practices change.

    Targeted Advertising

    SummitPoint does not currently engage in targeted advertising based on cross-context behavioral tracking. If this changes, we will update this Privacy Policy and provide appropriate opt-out mechanisms as required by applicable law.

    Right to Opt Out of Sale or Sharing

    You have the right to opt out of the sale or sharing of your personal information. Although we do not currently engage in such activities, you may submit a request at any time using the methods below, and we will honor your request as a forward-looking preference.

    Global Privacy Control (GPC)

    You have the right to opt-out of the sale of your personal information by SummitPoint. This means that your personal information, such as your name, business email, and business phone number, would not appear in the SummitPoint Platform. Some web browsers and browser extensions transmit "opt-out preference signals," such as the Global Privacy Control ("GPC"), that communicate a user's preference to opt out of the sale or sharing of personal information. Where we detect a recognized GPC signal, we will treat it as a valid request to opt out of any future sale or sharing of personal information for that browser or device, to the extent such activities are applicable.

    Because SummitPoint does not currently sell or share personal information for cross-context behavioral advertising, GPC signals will be honored as a forward-looking preference. Alternatively, if you would like to make such a request by email, you can do so by contacting us directly at privacy@summitpoint-collective.com or through any other in-product privacy controls we may make available.

    For more information about the categories of personal information we've disclosed, who we've disclosed it to, and the reasons for disclosure, please contact us at privacy@summitpoint-collective.com .

    Other jurisdictions with data subject rights

    Other state jurisdictions may have laws providing for data subject rights related to personal information. If you are an individual with such rights and wish to exercise those rights, please contact us at privacy@summitpoint-collective.com .

    How to make a data subject request

    What is a data subject request?

    Some United States state consumer data privacy laws grant individuals in those localities certain rights in respect of the personal data held by companies. Those rights may include, but are not necessarily limited to, the right of a data subject to access, delete or correct their personal information. We respond to such requests in compliance with applicable law.

    Clients & suppliers

    If you need to update your personal information or make a data subject request, please email us at privacy@summitpoint-collective.com . Your email will be directed to the correct SummitPoint team to take action with respect to your request.

    Exercise of Privacy Rights

    We won't discriminate against our customers who choose to exercise their rights to access, control, or delete their personal information. Some of our Services, however, may require your personal information. If you choose not to provide your personal information, you may not be able to use those Services.

    Privacy Rights Appeal Process

    If you are unsatisfied with our response to a privacy request or a decision made by our automated systems, you have the right to appeal. Please follow the steps below to initiate a formal review:

  • Submit Your Appeal: Send a written 'Notice of Appeal' to our privacy team at privacy@summitpoint-collective.com within 30 calendar days of receiving our initial decision.
  • Required Information: Your appeal must include your original request number (if applicable), a clear description of the specific decision you are appealing, and any supporting documentation or facts that show why the decision was in error.
  • Our Review: Our privacy team will acknowledge your appeal within 10 business days. We will conduct a fair and consistent review based on applicable privacy laws and our internal policies.
  • Final Determination: We will provide a written response within 45 days, explaining the actions taken or the reasons for upholding our original decision.

    • What about children's privacy?

    SummitPoint does not separately identify, knowingly collect, or intend to collect, any information that is specific to children.

    Your Opt-Out Rights and Choices

    We provide you with several ways to control how your personal information is used for marketing and sharing purposes. You may exercise your right to opt-out of the following activities:

  • Marketing Communications from SummitPoint: You can opt-out of receiving our newsletters, advertisements, or promotional emails at any time by clicking the "Unsubscribe" link located at the bottom of our email communications.
  • Sharing with Third Parties: If you do not want us to share your personal information with third-party partners for their own marketing purposes, you may submit a request through our email: privacy@summitpoint-collective.com . Once processed, we will cease sharing your data for these external promotional uses.
  • Targeted and Behavioral Advertising: Although we focus on direct engagement, you may opt-out of any targeted advertising or remarketing efforts by contacting privacy@summitpoint-collective.com .
  • Note on Online Tracking: Please be aware that we do not currently offer an opt-out for the tracking of online activity, as our first-party cookies and tracking technologies are necessary for the security, authentication, and core functionality of the Service.

    • Your consent

    If you are submitting personal information from a US IP address, you consent to the collection and use of any personal information and any related information in the manner described in this Privacy Policy. SummitPoint will only use your personal information if it can do so in a lawful manner that is consistent with this Privacy Policy. In addition to any tools which may be available through our Services to control or opt-out of the collection of some personal data, a tool for opting out of interest-based advertising from the Network Advertising Initiative may be available at https://optout.networkadvertising.org/ . A tool from the Digital Advertising Alliance may be available at https://optout.aboutads.info/ . For website visitors located in European Territories, the European Interactive Digital Advertising Alliance opt-out page may be available at https://youronlinechoices.eu/ .

    Changes to the Privacy Policy

    SummitPoint reserves the right to change this Privacy Policy at any time by distributing and/or posting a new Privacy Policy, without notice. We encourage you to review our Privacy Policy on a regular basis so that you will be aware of any changes to it. When we make changes to this Privacy Policy, we'll revise the "last updated" date at the top of this page.

    EEA and UK data subjects

    If SummitPoint offers services to individuals located in the EEA or United Kingdom, we will process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") and the UK GDPR. Where applicable, individuals may have rights including access, correction, deletion, restriction, portability, and objection to processing. To exercise these rights, please contact us at privacy@summitpoint-collective.com . If you are located in the European Economic Area ("EEA") or United Kingdom, additional rights and disclosures may apply to your personal information. For example, if applicable, you may have the right to opt-out of the sale of your personal information by SummitPoint. This means that your personal information, such as your name, business email, and business phone number, would not appear in the SummitPoint Platform.

    If you are an EEA or UK data subject and have any questions or comments about the information contained in this Privacy Policy or any other privacy inquiries, including if you want to make a data subject request or complain about SummitPoint Collective's collection and use of your personal data, please contact our Data Privacy Officer for all EU SummitPoint entities:

    ATTN: The Data Privacy Officer (DPO) SummitPoint Collective, LLC 814 N Bluff Dr #86, Austin, TX 78745 Email: privacy@summitpoint-collective.com