Privacy Policy

Factory Holdings LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use thefactoryhq.com (the "Site").

Please read this Privacy Policy carefully. By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

We collect several types of information from and about users of our Site:

Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

• Register for an account
• Complete your investor profile
• View or interact with investment deals
• Contact us for support

This information may include:

• Name, email address, and contact information
• Accredited investor verification details
• Professional background and investment experience
• Company or entity information

Automatically Collected Information

When you access the Site, we automatically collect certain information about your device and usage:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source and exit pages
• Date and time of access

We use the information we collect for various purposes:

• To provide and maintain the Site: Including presenting investment deals and managing your account
• To verify investor status: Confirming your eligibility as an accredited investor to access deal materials
• To improve the Site: Understanding how users interact with the Site helps us enhance functionality and user experience
• To communicate with you: Sending updates about deals, account notifications, and other Site-related information
• To ensure security: Detecting, preventing, and addressing technical issues, fraud, and security breaches
• To comply with legal obligations: Meeting regulatory requirements, including securities regulations, and responding to legal processes

We do not sell your personal information. We may share your information in the following circumstances:

SMS consent information will not be shared with, sold, or disclosed to third parties for marketing or promotional purposes.

Service Providers

We may share your information with third-party service providers who perform services on our behalf:

Infrastructure & Database

• Supabase: Database, authentication, and storage services

Hosting

• Vercel / Render: Application hosting and deployment

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet securities regulatory requirements.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure backup procedures

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We use Cloudflare Turnstile on public forms to help distinguish human visitors from automated traffic and protect our Site from spam, abuse, and other malicious activity. Turnstile may process limited technical signals, such as device, browser, interaction, and network information, for this security purpose.

When Turnstile is configured in invisible mode, the verification may run in the background without displaying a separate challenge widget. For more information about Cloudflare's processing of Turnstile data, please review the Cloudflare Turnstile Privacy Addendum.

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need your personal information, we will securely delete or anonymize it. You may request deletion of your account and associated data at any time by contacting us, subject to legal, regulatory, security, fraud-prevention, or operational obligations. Backups may continue to contain deleted information until they expire under our backup retention practices.

Depending on your location within the United States, you may have certain rights regarding your personal information.

CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and share
• Access a copy of personal information we maintain about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Limit certain uses of sensitive personal information where required by applicable law
• Non-discrimination for exercising your privacy rights

You may also designate an authorized agent to make a request on your behalf where permitted by law.

You can contact us to request access, correction, deletion, or restriction of your personal information. You may submit a deletion request or email legal@thefactoryhq.com with enough detail for us to understand the request and locate the relevant account or submission.

Some requests may require verification before we can act on them. We may also decline or narrow a request when we need to retain information for legal, regulatory, security, fraud-prevention, or operational obligations, including securities compliance, dispute prevention, audit logs, and service integrity.

We use cookies and similar tracking technologies to track activity on our Site and hold certain information.

Types of Cookies We Use

• Essential Cookies: Required for the Site to function properly, including authentication and security

Local Storage

We use browser local storage to remember certain preferences such as your theme preference. Local storage data remains on your device and is not transmitted to our servers. You can clear local storage through your browser settings.

Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18.

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, your privacy rights, or how we handle your personal information, please contact us: