Cubicle
Sign up

Legal

Privacy policy

Last updated: 26 September 2026

Template. This is a starting point, not legal advice. Have it reviewed and complete the bracketed details before launch.

1. Who is responsible

[Company name B.V.], [address], KvK [number], is the controller of your personal data under the GDPR (AVG). Questions or requests: hello@cubicle.business.

2. What we collect

  • Account: name, email address, role (investor or founder), password (stored hashed) and, if you turn it on, a phone number for two-factor codes.
  • Investments: amounts, companies and payment status. Card and bank details are handled by Mollie, not stored by us.
  • What you post: questions, updates and company information.
  • Newsletter: only if you opt in when you sign up.
  • Technical: logs needed to run and protect the service, such as IP addresses (kept briefly, hashed where possible for rate limits).

3. Why we use it

  • To run your account and process investments (contract).
  • To comply with legal duties such as anti-money-laundering checks (legal obligation).
  • To secure the platform and prevent abuse (legitimate interest).
  • To send the newsletter (consent; you can withdraw it any time).

4. Who we share it with

We only use service providers that need the data to run Cubicle, under data processing agreements:

  • Supabase (database and login, hosted in the EU, Frankfurt)
  • Cloudflare (hosting and security)
  • Mollie (payments)
  • Brevo (email and newsletter)
  • AI and data services for summaries and news signals (Anthropic, MiniMax, Apify); we only send them company information, not your account details. [Check and complete.]

Companies you invest in receive the details they legally need about their investors.

5. How long we keep it

As long as your account is active, and afterwards as long as the law requires (for example 7 years for financial records). [Complete per data type.]

6. Your rights

You can ask to see, correct, export or delete your data, object to its use or withdraw consent. Email us; we reply within a month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Cookies

We only use cookies needed for logging in and security, plus your light/dark preference in local storage. No advertising or tracking cookies.