Privacy Policy

1. Who we are

Dax Connect is operated for users in India by DaxHive [India] Private Limited (legal name to be confirmed) ("we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data processed on Dax Connect. This policy explains, in plain language, what we collect, why, and the rights you have.

2. What we collect

• Account and profile data: your name, email address, chosen role (founder, investor or service provider), city, and the professional profile you build on Dax Connect.
• LinkedIn URL and verification data: the LinkedIn profile URL you provide, used to validate your identity.
• Pitch content (founders): the information you choose to publish about your startup — problem, solution, market, traction, team and funding goal — visible only to verified, logged-in members.
• Declarations (investors): your investment thesis and your self-certification of investor sophistication.
• Usage data: activity on the platform such as swipes, interest indications, matches, messages you send, device and log information, and approximate location derived from your IP address.
• Communications: messages you exchange with us, including support and grievance correspondence.

We do not knowingly collect data from anyone under 18 — Dax Connect is an adults-only platform.

3. Why we process it

• Creating and operating your account, and verifying your identity.
• Powering discovery and matching: showing your profile to the members you have chosen to make it visible to, and filtering the deck to an investor's stated thesis.
• Sending you notifications you have consented to (in-app, email and, where enabled, SMS).
• Keeping the platform safe: moderation, fraud and abuse prevention, enforcing our Terms of Use.
• Complying with law — including record-keeping duties under the Information Technology Act, 2000 and rules made under it.

Each purpose is itemised in the consent notice you see at signup. We do not use your data for purposes you have not been told about.

4. Consent — and withdrawing it

We process your personal data on the basis of your consent, given by clear affirmative action at signup after an itemised, plain-language notice, as required by the DPDP Act. You can withdraw consent at any time, as easily as you gave it, from your account settings or by writing to us (see section 10). On withdrawal we stop the related processing and delete the data, except where the law requires us to retain it.

5. Where your data lives

Your data is stored on Google Cloud infrastructure in the asia-south1 (Mumbai) region, India. Our cloud and communications vendors act as Data Processors under contract with us and may process data only on our instructions.

6. Who sees your data

• Other members: only what you choose to publish, and only to verified, logged-in members. Deal-related content is never shown on public pages. Investor identity is hidden from founders until a mutual match, and revealed only if the investor chooses.
• Service providers (processors): cloud hosting, email/SMS delivery — bound by contract, on our instructions only.
• Authorities: where required by applicable law or lawful order.

7. Cookies

We keep cookies minimal. This marketing site sets no cookies and runs no third-party trackers or analytics. The platform itself uses only what is essential to keep you signed in securely. There are no advertising or cross-site tracking cookies.

8. How long we keep data

We keep your data while your account is active and for as long as needed for the purposes above. When you close your account or withdraw consent, we delete your personal data, except records we must retain under law — for example, registration information retained for 180 days after account withdrawal under the IT Rules, 2021.

9. Your rights

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it has been processed.
• Correction and completion — have inaccurate or incomplete data corrected or updated.
• Erasure — have your personal data deleted when it is no longer needed or when you withdraw consent.
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.
• Grievance redressal — raise a complaint with us and, if unresolved, escalate to the Data Protection Board of India.
• Nominate — designate a person to exercise your rights in the event of death or incapacity.

10. How to exercise your rights

Email privacy@daxhive.com from your registered email address, describing your request. You can also reach our Grievance Officer — details on the Grievance Officer page. We acknowledge grievances within 24 hours and resolve them within 15 days.

11. Security and breach notification

We protect your data with reasonable security safeguards — encryption in transit and at rest, role-based access controls, audit logging and backups. In the event of a personal data breach, we are committed to notifying affected users promptly in plain language, and reporting to the Data Protection Board of India within the timelines prescribed under the DPDP Act and its rules.

12. Changes to this policy

If we change this policy materially, we will notify you on the platform or by email before the change takes effect, and seek fresh consent where the law requires it.

13. Contact

Data questions: privacy@daxhive.com. Grievances: see the Grievance Officer page.