Privacy Policy

Factory Holdings LLC("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Factory Partners Portal ("Service"), an investment deal portal for accredited investors.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

We collect several types of information from and about users of our Service:

Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

• Register for an account
• Complete your investor profile
• View or interact with investment deals
• Contact us for support

This information may include:

• Name, email address, and contact information
• Accredited investor verification details
• Professional background and investment experience
• Company or entity information

Automatically Collected Information

When you access the Service, we automatically collect certain information about your device and usage:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source and exit pages
• Date and time of access

We use the information we collect for various purposes:

• To provide and maintain the Service: Including presenting investment deals and managing your account
• To verify investor status: Confirming your eligibility as an accredited investor to access deal materials
• To improve the Service: Understanding how users interact with the Service helps us enhance functionality and user experience
• To communicate with you: Sending updates about deals, account notifications, and other Service-related information
• To ensure security: Detecting, preventing, and addressing technical issues, fraud, and security breaches
• To comply with legal obligations: Meeting regulatory requirements, including securities regulations, and responding to legal processes

We do not sell your personal information. We may share your information in the following circumstances:

SMS consent information will not be shared with, sold, or disclosed to third parties for marketing or promotional purposes.

Service Providers

We may share your information with third-party service providers who perform services on our behalf:

Infrastructure & Database

• Supabase: Database, authentication, and storage services

Hosting

• Vercel / Render: Application hosting and deployment

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet securities regulatory requirements.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure backup procedures

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We use Cloudflare Turnstile on public forms to help distinguish human visitors from automated traffic and protect our Service from spam, abuse, and other malicious activity. Turnstile may process limited technical signals, such as device, browser, interaction, and network information, for this security purpose.

When Turnstile is configured in invisible mode, the verification may run in the background without displaying a separate challenge widget. For more information about Cloudflare's processing of Turnstile data, please review the Cloudflare Turnstile Privacy Addendum.

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need your personal information, we will securely delete or anonymize it. You may request deletion of your account and associated data at any time by contacting us.

Depending on your location within the United States, you may have certain rights regarding your personal information.

CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us using the contact information provided below.

We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly, including authentication and security

Local Storage

We use browser local storage to remember certain preferences such as your theme preference. Local storage data remains on your device and is not transmitted to our servers. You can clear local storage through your browser settings.

Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18.

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, your privacy rights, or how we handle your personal information, please contact us: