Tableicity ("Tableicity," "we," "us," or "our") provides a privacy-first cap table management platform that uses SHA-256 hashing and zero-knowledge proofs to keep equity records secure, pseudonymous, and portable. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices and rights you have. By using www.tableicity.com (the "Site") or any Tableicity service (collectively, the "Service"), you agree to the practices described here.
1. Information We Collect
We collect only what we need to operate the Service. We group it into three categories:
- Information you give us. Account details (name, email, organization), authentication credentials, billing information processed by our payment processor, and any content you submit such as cap-table entries, support messages, or form input.
- Information collected automatically. Standard log data such as IP address, browser type, device type, pages visited, referring page, timestamps, and approximate location derived from IP. We use this to operate, secure, and improve the Service.
- Information from cookies and similar technologies. A small number of strictly necessary cookies for authentication, session management, and security; and, with your consent where required, analytics cookies that help us understand aggregate usage.
We do not knowingly collect information from children under 16. If you believe a child has provided us information, contact us and we will delete it.
2. How We Use Information
- To provide, maintain, and secure the Service and your account.
- To process transactions and send transactional emails (receipts, account notifications, security alerts).
- To respond to support requests and communicate with you about the Service.
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To improve the Service through aggregated, de-identified analytics.
- To comply with legal obligations and enforce our Terms and Conditions.
We do not sell your personal information. We do not share your personal information with third parties for their independent marketing purposes.
3. Privacy-First Architecture
Tableicity is designed so that sensitive equity data can be represented as cryptographic commitments (SHA-256 hashes) rather than raw values, and verifiable using zero-knowledge proofs. Wherever you use these privacy features, the underlying personal or financial data does not leave your control in identifiable form. This is a structural protection, not just a policy promise.
4. How We Share Information
We share information only in these limited circumstances:
- Service providers. Vetted vendors who help us operate the Service (cloud hosting, payment processing, email delivery, analytics, error tracking). They are contractually bound to use information only for the services they provide to us.
- Legal compliance. When required by law, subpoena, court order, or to protect the rights, property, or safety of Tableicity, our users, or the public.
- Business transfers. If Tableicity is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and provide choices where required by law.
- With your consent. Any other sharing happens only after you direct or consent to it.
5. Data Retention
We keep personal information only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer needed, we delete or anonymize it. You can request deletion of your account at any time using the contact information below.
6. Security
We use industry-standard administrative, technical, and physical safeguards including encryption in transit (TLS), encryption at rest, scrypt-hashed credentials, JWT-based session management with httpOnly cookies, rate limiting, input sanitization, and parameterized SQL via an ORM. No system is perfectly secure, and we cannot guarantee absolute security. If we discover a security incident affecting your information, we will notify you as required by applicable law.
7. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information, subject to legal exceptions.
- Object to or restrict certain processing.
- Receive a copy of your information in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email us at privacy@tableicity.com. We will respond within the timeframe required by applicable law.
8. International Transfers
Tableicity operates globally. Your information may be processed and stored in countries other than your own, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses to protect your information during international transfers.
9. Cookies
Tableicity uses strictly necessary cookies for authentication and security. Where required by law, we ask for your consent before setting analytics or preference cookies. You can control cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the Service from working.
10. Third-Party Links
The Service may link to third-party sites we do not control. Their privacy practices are governed by their own policies, not this one. We encourage you to read the privacy policy of every site you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective" date at the top reflects the latest version. Material changes will be communicated through the Service or by email. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.
12. Contact Us
Questions, requests, or concerns about this Privacy Policy or our handling of your information:
Tableicity
privacy@tableicity.com