Privacy Policy

Last Updated: January 2026

This Privacy Policy describes how Blend Capital LLC ("Company," "we," "us," or "our") collects, uses, and protects your personal information when you use the PRLX View platform ("Platform"). By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, password (hashed)
• Profile Information: Investor type, jurisdiction, investment preferences
• Verification Documents: Accreditation verification documents (if applicable)
• Interest Submissions: Project interest expressions and related notes
• Communications: Messages sent through the Platform
• Payment Information: Payment details processed through Stripe

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages viewed, features used, timestamps
• Log Data: IP address, access times, referring URLs
• Cookies: Session and preference cookies (see Section 4)

2. How We Use Your Information

Purpose	Data Used
Provide and operate the Platform	Account data, profile, usage data
Process subscriptions and payments	Account data, payment information
Communicate with you	Email, account data
Verify accreditation status	Verification documents, profile data
Record expressions of interest	Interest submissions, account data
Improve and optimize the Platform	Usage data, analytics
Ensure security and prevent fraud	Log data, device information
Comply with legal obligations	As required by law

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: To provide services you've requested (account management, subscription fulfillment)
• Legitimate Interests: For platform security, fraud prevention, service improvement, and analytics
• Consent: For optional features, marketing communications, and cookies (where required)
• Legal Obligation: To comply with applicable laws and regulations

4. Cookies & Analytics

Types of Cookies We Use

• Essential Cookies: Required for Platform functionality (authentication, security)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Platform

Third-Party Analytics

We may use analytics services to collect and analyze usage data. These services may use cookies and similar technologies. You can manage cookie preferences through your browser settings or our cookie consent banner.

Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no industry standard for this feature.

5. Information Sharing

We do not sell your personal data. We may share information in the following circumstances:

• With Project Founders: When you express interest in a project, we share relevant contact information with the founder to facilitate follow-up (outside the Platform)
• Service Providers: With trusted vendors who help us operate the Platform (see Section 6)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you authorize specific sharing

6. Service Providers (Subprocessors)

We use the following categories of service providers:

Category	Purpose
Cloud Hosting (Fly.io)	Application and database hosting
Payment Processing (Stripe)	Subscription billing and payment handling
Email Service (SendGrid)	Transactional and notification emails
File Storage (Cloudinary)	Document and image storage
Error Monitoring	Application error tracking and debugging

Our service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7. Data Retention

We retain your data for the following periods:

Data Type	Retention Period
Account Data	Duration of account + 2 years after deletion
Interest Submissions	7 years (compliance purposes)
Verification Documents	Duration of verification validity + 5 years
Payment Records	7 years (tax/accounting requirements)
Security Logs	1 year
Analytics Data	26 months (aggregated/anonymized)

8. International Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with service providers
• Privacy Shield certification where applicable

9. Security

We implement technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Secure password hashing
• Access controls and authentication requirements
• Regular security assessments
• Employee training on data protection

While we strive to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@prlxview.com. We will respond within 30 days (or as required by applicable law).

California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete, and the right to opt-out of "sales" (we do not sell personal information). You may designate an authorized agent to make requests on your behalf.

European Residents (GDPR)

If you are in the European Economic Area, you have rights under the GDPR as listed above. You also have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

12. Policy Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via email or Platform notice at least 30 days before taking effect. Your continued use after changes indicates acceptance of the updated policy.

13. Contact Us