Terms, privacy and the small print.

1. Terms of Use

These terms govern your use of the ojas.foundry website, founder workspace, investor workspace, dataroom and any authenticated areas made available through the site, together referred to as the “Site”.

The Site is operated by Ojas Design Ltd, referred to as “Ojas Design”, “ojas.foundry”, “we”, “us” or “our”.

By accessing or using the Site, creating an account, submitting a profile, uploading materials or accessing a dataroom, you agree to these terms.

No advisory relationship from the Site alone

Use of the Site, account creation, profile submission, deck upload, dataroom access, feedback, informal correspondence or introductory discussion does not, on its own, create an advisory, agency, fiduciary, broker, representative, investment, fundraising or regulated financial services relationship.

Any formal engagement between ojas.foundry and a founder, startup, scale-up, investor, adviser or other third party must be governed by a separate signed engagement letter, services agreement, investment-readiness agreement, advisory agreement or other written contract.

Where there is any inconsistency between these terms and a signed agreement, the signed agreement takes precedence for the relevant engagement.

Founder and business submissions

If you submit a founder profile, company profile, pitch deck, financial information, product information, cap table, commercial plan, dataroom content or other materials, you confirm that:

• the information is accurate to the best of your knowledge;
• you have the right to submit it;
• it does not infringe any third-party rights;
• it does not contain unlawful, misleading, defamatory or harmful content;
• it does not contain confidential third-party information unless you are authorised to share it;
• you understand that submission does not guarantee review, feedback, acceptance, investment, funding, advisory support or commercial engagement.

We may review, assess, categorise, score, comment on, request clarification on, decline or remove submitted materials at our discretion.

Intellectual property

The Site, its branding, design, structure, user journeys, copy, software, workflows, templates, scoring logic, original content and other materials created by or for Ojas Design Ltd are owned by Ojas Design Ltd or its licensors.

You may not copy, reproduce, republish, scrape, mirror, reverse engineer, commercially exploit or build derivative services from the Site or its content without our prior written permission.

Materials you upload remain yours or your organisation’s. You grant us a limited, non-exclusive, worldwide licence to host, store, process, review, analyse, display internally, share with authorised users and otherwise use those materials for the purpose of operating the Site, assessing a possible engagement, supporting an agreed engagement, administering dataroom access and improving our services.

Accounts and security

You are responsible for all activity under your account and for keeping your login credentials secure.

You must not share account access, impersonate another person, create misleading profiles, bypass access controls or use another person’s credentials.

You must notify us promptly if you believe your account has been compromised.

Suspension and termination

We may suspend, restrict or terminate access to the Site, workspace or dataroom where we reasonably believe that:

• these terms have been breached;
• applicable law has been breached;
• submitted information is materially inaccurate or misleading;
• the Site, other users, founders, investors or third parties may be exposed to risk;
• access is no longer required or authorised;
• continued access would be commercially, legally, reputationally or operationally inappropriate.

We may also remove, restrict or archive content where necessary to operate the Site, comply with law, protect users or enforce these terms.

Availability and changes

We aim to keep the Site available and useful, but we do not guarantee uninterrupted availability, error-free operation, permanent access, specific features, specific outcomes or compatibility with every device, browser or system.

We may update, suspend, withdraw or change any part of the Site at any time.

Liability

To the maximum extent permitted by law, the Site is provided “as is” and “as available”, without warranties of any kind.

We are not liable for indirect, incidental, special or consequential loss, loss of profits, loss of revenue, loss of opportunity, loss of goodwill, loss of anticipated savings, business interruption or loss of data arising from use of the Site.

Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation or any other liability that cannot be limited or excluded under English law.

Governing law

These terms are governed by the laws of England and Wales.

The courts of England and Wales have exclusive jurisdiction over any dispute arising from or in connection with these terms, the Site or any non-contractual obligation connected with them.

2. Privacy Notice

Ojas Design Ltd is the data controller for personal data processed through ojas.foundry, unless a separate agreement states otherwise.

This Privacy Notice explains what we collect, why we collect it, how we use it, how long we keep it and the rights you have under the UK GDPR and the Data Protection Act 2018.

What we collect

We may collect and process the following categories of information.

Account data

This may include:

• name;
• email address;
• password hash;
• role, such as founder, investor, adviser, admin or reviewer;
• authentication metadata;
• account status;
• access permissions;
• login and security events.

Founder, company and profile data

This may include:

• startup or company name;
• sector, stage, location and operating geography;
• company summary;
• product, market and traction information;
• team details;
• founder and management information;
• funding stage and commercial requirements;
• information submitted through onboarding, profile pages, workspace forms or dataroom readiness tools.

Uploaded materials

This may include:

• pitch decks;
• financial information;
• business plans;
• commercial plans;
• product materials;
• legal, governance or compliance documents;
• cap table information;
• investor updates;
• supporting documents;
• dataroom content voluntarily uploaded by you.

You should not upload special category personal data, highly sensitive personal data or confidential third-party information unless it is necessary, lawful and you are authorised to do so.

Investor and adviser data

Where applicable, this may include:

• name;
• email address;
• organisation;
• role;
• investment interests;
• access permissions;
• dataroom access records;
• document request activity;
• interaction history within the Site.

Billing data

For paid plans, we may process billing identifiers, subscription status, invoice status, plan type and payment-related metadata.

Card details are processed directly by Stripe and are not stored on our systems.

Operational and security data

This may include:

• server logs;
• access timestamps;
• IP address;
• device and browser information;
• authentication events;
• audit logs;
• workspace activity;
• dataroom access records;
• error and diagnostic information.

Analytics and session data

We may use analytics and session replay tools to understand how the Site is used and to improve the user experience. See the Cookie Notice below.

Why we use personal data

We use personal data to:

• create and manage accounts;
• operate the Site and authenticated workspace;
• receive, store and review founder and company submissions;
• manage datarooms and investor access;
• assess potential engagements;
• provide support and respond to enquiries;
• administer paid plans and billing;
• maintain security, auditability and access control;
• improve the Site, onboarding experience and user journeys;
• comply with legal, accounting, tax and regulatory obligations;
• protect our legitimate commercial, legal and operational interests.

Lawful bases

We rely on the following lawful bases under UK GDPR.

Contract

To provide accounts, workspace access, paid plans, requested services and any engagement you enter into with us.

Legitimate interests

To operate, secure, improve and administer the Site, assess potential engagements, manage dataroom access, prevent misuse, protect our business, support founders and investors, and maintain appropriate records.

Consent

For non-essential cookies, analytics, session replay and any other processing that requires consent.

Legal obligation

To comply with tax, accounting, regulatory, company law, dispute-resolution and legal record-keeping obligations.

Sharing personal data

We do not sell personal data.

We may share personal data with:

• service providers and subprocessors that help us operate the Site;
• professional advisers, including lawyers, accountants and consultants, where they are under a duty of confidentiality;
• authorised members of our team, reviewers, advisers or administrators;
• investors or authorised third parties where a founder has granted access or where access is part of an agreed process;
• regulators, authorities, courts or law enforcement where required by law;
• third parties involved in a merger, restructuring, investment, acquisition or sale of all or part of our business, subject to appropriate safeguards.

Dataroom access and investor visibility

Where founders or companies upload dataroom materials, those materials may be made visible to authorised users according to the access permissions configured in the Site.

We may maintain audit logs showing who accessed materials, when access occurred, and what actions were taken. These logs are used for security, accountability, investor-readiness, founder visibility and dispute-resolution purposes.

Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this notice.

In general:

• account data is retained while your account is active and for a reasonable period afterwards;
• engagement and commercial records may be retained for legal, accounting and dispute-resolution purposes;
• uploaded materials may be retained while an account, assessment, dataroom or engagement remains active;
• security and audit logs may be retained for a reasonable period to protect the Site and users;
• billing and accounting records are retained as required by law.

Uploaded materials may be removed on request unless we are required or permitted to retain them for legal, regulatory, accounting, security or dispute-resolution reasons.

International transfers

Some subprocessors may process personal data outside the United Kingdom.

Where this happens, we use appropriate safeguards, such as adequacy regulations, the UK International Data Transfer Agreement, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or equivalent mechanisms recognised under UK data protection law.

Your rights

Subject to applicable law and exemptions, you have the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing relies on consent;
• complain to the UK Information Commissioner’s Office.

To exercise your rights, contact us using the details below.

We may need to verify your identity before responding to a rights request.

3. Cookie Notice

We use cookies and similar technologies to operate the Site, keep it secure, understand how it is used and improve the experience.

Cookies are small files or similar technologies placed on or accessed from your device.

Categories we use

Strictly necessary cookies

These are required for authentication, session management, security, account access, fraud prevention and core Site functionality.

They cannot be disabled through our cookie tools while using authenticated areas of the Site.

Analytics cookies

We may use Google Analytics to measure aggregate traffic, understand how visitors move through the Site and improve content, navigation and performance.

Analytics cookies are used only where consent is required and has been given.

Product analytics and session replay

We may use Mouseflow to understand usability issues, friction points, navigation behaviour and page performance.

Mouseflow may provide session replay, heatmap and behavioural analytics. We configure these tools to avoid capturing form input values by default where possible.

Product analytics and session replay technologies are used only where consent is required and has been given.

Managing cookies

You can manage non-essential cookies through the cookie banner or preference tool where available.

You can also control cookies through your browser settings.

You can opt out of Google Analytics using Google’s browser opt-out add-on.

You can opt out of Mouseflow recordings using Mouseflow’s opt-out tools.

If you disable cookies, parts of the Site may not function properly, particularly authenticated workspaces and dataroom access.

4. Acceptable Use

When using the Site, including founder workspaces, investor workspaces and datarooms, you agree not to:

• upload unlawful, infringing, defamatory, misleading, harmful or malicious content;
• upload content that you do not have the right to share;
• upload third-party confidential information without authorisation;
• misrepresent your identity, organisation, role, authority, eligibility or investment status;
• attempt to access accounts, workspaces, datarooms or materials you have not been granted access to;
• probe, scan, scrape, stress-test or attempt to compromise the Site outside a coordinated vulnerability disclosure process approved by us;
• bypass authentication, authorisation, subscription limits or dataroom controls;
• introduce malware, malicious code, corrupted files or harmful data;
• use automated tools to extract, copy or harvest Site content, profiles or dataroom materials;
• redistribute dataroom materials outside the permissions granted to you;
• use the Site for spam, phishing, fraud, impersonation or unlawful solicitation;
• use the Site in a way that breaches applicable law or regulation;
• use the Site to communicate unlawful financial promotions or misleading investment materials.

We may investigate suspected misuse and take action including account suspension, content removal, access restriction, notification to affected users and reporting to relevant authorities.

5. Dataroom and Uploaded Materials

ojas.foundry may allow founders, companies and authorised users to upload, organise, review and share business materials through a dataroom or workspace.

Founder responsibility

Founders and companies are responsible for ensuring that uploaded materials are accurate, lawful, current, appropriately authorised and suitable for sharing with the selected audience.

We do not independently verify every statement, forecast, financial model, legal document, claim or representation uploaded by a founder or company.

Investor responsibility

Investors and other recipients are responsible for conducting their own due diligence and forming their own judgement.

Access to a dataroom, investor pack, profile, deck, update or other material does not mean that ojas.foundry endorses, verifies, recommends or approves the relevant company, founder, investment opportunity or commercial proposition.

Confidentiality and access control

Where materials are shared through a dataroom, you must only use them for the purpose for which access was granted.

You must not copy, forward, publish, redistribute, scrape, train models on, commercially exploit or otherwise disclose dataroom materials unless expressly authorised by the relevant founder, company or ojas.foundry.

We may revoke dataroom access at any time.

6. Partner Application Fee

Partner organisations may be required to pay a one-time Partner Application Fee when submitting a partner application. This fee is non-refundable and contributes to the administration, processing and review of the application.

Payment of the Partner Application Fee does not guarantee approval, publication in the Partners Directory, preferred status, strategic partner status, introductions, referrals, investment opportunities or any commercial outcome.

ojas.foundry may approve, reject, request changes, hide, suspend or remove any partner profile at its discretion.

7. Subprocessors

We use a small number of trusted providers to operate the Site.

Each provider processes personal data only on documented instructions and under appropriate data protection terms.

Current subprocessors include:

We may update this list from time to time as the Site develops.

8. Disclaimers

Not regulated financial advice

ojas.foundry provides venture-building, strategic advisory, business development, operating model, transformation, execution and investment-readiness support.

Ojas Design Ltd is not authorised by the Financial Conduct Authority.

Nothing on the Site constitutes regulated investment advice, a personal recommendation, an invitation or inducement to invest in any specific company, a regulated financial promotion, a securities offering, broker activity, placing activity or investment management activity.

Any information made available through the Site is provided for general information, founder assessment, business development, investment-readiness or professional discussion purposes only.

Where investor-related materials are made available, they are intended only for recipients who are capable of forming their own judgement, taking their own professional advice and conducting their own due diligence.

No material on the Site should be relied upon as the sole basis for making an investment, commercial, financial, legal, tax or strategic decision.

No guarantee of outcomes

References to fundraising, investment, revenue growth, commercial traction, partnerships, readiness scores, investor interest, market access, execution support or other outcomes are illustrative only.

We do not guarantee that use of the Site or engagement with ojas.foundry will result in funding, investment, customers, commercial contracts, partnerships, revenue, valuation uplift, business success or any other specific outcome.

No legal, tax or accounting advice

The Site does not provide legal, tax, accounting, regulatory or financial advice.

You should obtain appropriate professional advice before making decisions in these areas.

Third-party content and links

The Site may include links, references or access to third-party services, websites, documents or materials.

We are not responsible for third-party content, availability, security, privacy practices, accuracy or actions.

9. Contact and Entity Details

ojas.foundry is a service of Ojas Design Ltd, registered in England and Wales.

• Company name: Ojas Design Ltd
• Company number: 16105099
• Registered office: 124 City Road, London EC1V 2NX, United Kingdom
• Jurisdiction: England and Wales
• Legal and privacy contact: legal@ojasfoundry.vc