Data Collection Notice

The short version. We collect what the Platform needs and what you choose to enter. We don't sell it or use it for advertising. Your company's data is visible to you, the people you invite, your partner if you have one, and CatenaHQ administrators for support. Content you send to an AI feature goes to our AI provider to produce the response.

This notice sets out what the Platform collects at each stage, why, and who can see it. It supplements our Privacy Policy, which explains how to access or correct your information and how to complain.

1. When you register

Name, email address and company name — to create your account. Your email address is your login.
Password — stored only as a one-way hash.
Passkey — if you set one up, we store its public key; the private key stays on your device.
Acceptance of the Terms — the version, time, IP address and browser.
Who invited you — if a partner or company invited you, so the right people can reach your account.

2. Company profile, collected as you go

Sector, stage, location, raise target, entity type and ABN/ACN. These are optional and are asked for when a tool needs them, to tailor guidance, matching and templates.

3. By module

Module	What is stored	Visible to
Share register and cap table	Shareholder names, contact details, share classes, holdings, transactions, instruments	You, your team with access, your partner, CatenaHQ administrators
Investor onboarding and verification	Investor names, emails, classifications, certificates and declarations, verification status and messages, documents sent and their status, payments noted, allotments	As above. The investor sees their own verification and documents
Communications and inbox	Emails sent, recipients, delivery status, replies captured	As above
Bookbuild	Expressions of interest, commitment amounts, investor contacts	As above
Data Room and documents	Uploaded documents, versions, share links, who opened shared material	As above; shared links are visible to anyone holding the link and any password
Presentations and deck tools	Decks, share links, views, AI ratings and checks	As above
Board and governance	Directors, meetings, minutes, resolutions	As above. Directors see what is shared with them
Compliance, KPIs, grants, R&D	Checklists, metrics, grant matches and applications, R&D records, AI-generated drafts	As above
ECF campaigns	Campaign details, offer document content, approvals, EOIs, applications, cooling-off and settlement records, stakeholder contacts	As above, and the campaign's intermediary and stakeholders you add
Readiness modules	Your saved answers, financial models and scenarios	You, your team with access, your partner, CatenaHQ administrators
Tasks	Tasks, due dates, comments, assignments	As above
AI features	What you submit and the response, and a log of each request	You and CatenaHQ administrators. The content is sent to Anthropic to generate the response

4. Collected automatically

Activity — sign-ins and actions, for security, support and the audit trail.
Changes to login addresses — the old and new address and who made the change; both addresses are notified.
Administrative access — when a CatenaHQ administrator opens an account's workspace.
Errors and performance — to find and fix faults.
Session cookie — to keep you signed in, for up to 30 days.

5. What you send to others

Emails you send through the Platform are delivered by our email provider, Postmark, in your company's name. Replies go to you, and may also be captured in your Platform inbox.

6. Who can see your data

Who	What	Why
You	Everything in your account	It is your data
People you invite	The areas you give them	Access you control
Your partner	Your company's data, while they manage your account	They act for you
CatenaHQ administrators	Any account, when needed	Operation, support and fixing problems; workspace access is recorded
Our service providers	What each needs for its service	Hosting, email, payments, AI — see the Privacy Policy
Nobody else	—	We do not sell data or share it with advertisers or data brokers

7. Closing or deleting an account

Your data stays available for export for at least 30 days after closure.
Your identifying details are then removed or anonymised and the login is blocked; the email address is freed.
Billing, acceptance and audit records may be kept where the law requires or allows.

To close an account or ask a question, contact anthony@catenahq.com.au or use Support in the Platform.