Legal & Security
Last updated: July 2026
Information We Collect
Capital Untapped collects personal information you provide directly, including name, email, company, investment preferences, and KYC/AML documentation. We also collect usage data such as page views, clicks, and interaction patterns to improve our platform.
How We Use Your Information
Your information is used to provide and improve our services, process transactions, conduct due diligence, comply with regulatory requirements, send platform communications, and match investors with investment opportunities.
Data Sharing
We do not sell your personal data. We share data only with: (1) regulatory authorities when required by law, (2) payment processors for transaction execution, (3) KYC/AML screening providers, and (4) your consented co-investment partners.
Data Security
We employ bank-grade encryption (AES-256 at rest, TLS 1.2+ in transit), multi-factor authentication, role-based access controls, and regular security audits. All sensitive financial data is tokenised.
Your Rights
You have the right to access, correct, export, or delete your personal data. Contact privacy@capitaluntapped.com to exercise these rights. We respond within 30 days.
Data Retention
We retain personal data for the duration of your active account plus 7 years for regulatory compliance (KYC/AML records). Investment records are retained for 10 years post-exit.
Questions about our legal or security practices?
Contact our legal team