Legal
Privacy policy
Last updated 7 September 2026
Placeholder — not yet reviewed by counsel. This page describes what the final document will cover. It is not a statement of Viora Capital’s policy and should not be relied on. Nothing here is legal advice.
The final policy will describe what Viora Capital collects, why, how long it is kept, and who it is shared with. The outline below is what it has to cover, and reflects what the portal actually holds today.
What we collect — applications and accounts
Information submitted through the distributor application: name, email, phone, business name, EIN, business address, the audience description and expected volume. Signing in creates a session record. Standard server logs record requests.
What we collect — signatures
When a confidentiality agreement or an investment document is signed, we store the version and a cryptographic fingerprint of the exact wording shown, the typed name or the drawn signature image, and the IP address and browser reported at the moment of signing. The fingerprint is what makes a signature evidence: it proves which words were on the screen even after the document is later revised.
What we collect — investor information
For an investment we hold the investor's name, email, phone, business, state, the amount, and a taxpayer identification number, which for an individual is a Social Security number. The taxpayer number is encrypted at rest, shown as its last four digits everywhere in the product, and revealable only by an administrator or by the investor it belongs to — never by a distributor. Every time it is revealed, that is recorded. It is excluded from every export.
What we collect — enquiries and calls
If you ask to book a call we hold your name, email, phone, what you are enquiring about, the meeting time, and — if you choose to answer, after booking — how you heard about us. The attribution question is optional and a booking is complete without it.
What we collect — records of what was done
We keep an append-only log of significant actions taken in the portal: approvals, refusals, document access, configuration changes, and each occasion a taxpayer number is revealed. Entries record who acted, what they acted on, and when. No part of the product edits or deletes an entry once written.
Why we collect it
To review applications, to operate accounts, to produce and evidence the documents people sign, to arrange calls, to meet tax and record-keeping obligations, and to be able to show afterwards who did what.
Who it is shared with
The service providers that run the product: Vercel (hosting), Neon (database), Resend (email delivery), Vercel Blob (document and signature storage), and Google Calendar (scheduling, for booking data only). We do not sell personal information or share it for advertising. Otherwise it is disclosed only where the law requires it.
How long it is kept
To be set by counsel, and to be stated per category rather than as a single retention period. Two categories are already constrained by how the product works: signature records and the action log are retained as evidence and are not deleted on request, because a record that can be removed by the person it describes is not a record.
Your choices
How to request access to, correction of, or deletion of the information we hold, which state-level rights apply, and how the evidence categories above are treated when a deletion request covers them.