Privacy Policy

• Account information. We use Privy for authentication. Depending on how you sign in, we receive your email address and, if you connect one, a wallet address.
• Listing information. Company details, founder and team profiles, positions, funding, and cap table information you enter in Manage.
• Documents you upload. Pitch decks, cap tables, and other files you attach to your listing or to a Startup Assessment run.
• Billing information. Payment is handled directly by Stripe. We store your subscription status and plan — never your card details.
• Demo requests. If you request a demo or contact sales, we collect your name, email, organization, and the details you provide in that form.

Startup Assessments are generated by sending your listing information and uploaded documents to a third-party AI model provider. When you upload a pitch deck during onboarding, we also use a third-party AI model to draft company and founder fields for you to review.

Our AI providers do not train their models on data submitted through their commercial APIs by default — that only happens if a customer explicitly opts in, which we do not. We do not train any AI models ourselves, and we do not use your data for any purpose beyond generating the assessment or listing draft you requested.

• Your public listing. Whatever you choose to publish — your company and founder profile — is visible to anyone browsing the public roster.
• Data rooms. Private documents and reports are shared only with people you explicitly choose to share them with.
• Program participation. If you run an assessment as part of an accelerator, EDC, fund, or other program, that program’s administrator receives your results — this is part of how program-based assessment works, not an optional broadcast of your data.

We do not sell your data.

We rely on third-party service providers to operate TokenRoster, each processing only the data needed for its purpose:

• Authentication — to sign you in and manage your account
• Payment processing — to handle billing and subscriptions; card details never touch our servers
• AI models — to generate Startup Assessments and draft listing fields from uploaded documents
• Cloud storage — to store uploaded documents
• Hosting — to run our application and database

The specific vendors behind each category are available on request — email us if you’d like the full list.

We use a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

You can review and update your listing information at any time in Manage. Deletion — of a listing, uploaded documents, or your account — isn’t yet self-serve; email us and we’ll process the request for you.

If we make material changes to how we collect or use your information, we will update this page and change the date above.

Questions about this policy? Email [email protected].