Investor portal

Privacy notice

This portal is by invitation only. This page says what it collects about you, who else handles it, and how long it is kept, as the portal works today.

COUNSEL: not yet reviewed by counsel
This notice states facts about the system. It does not yet state the legal choices below; counsel must supply them before this page is relied on.
  • Legal basis (GDPR Art. 6) for each purpose: account and investment records, access logging and security, the signature record, email delivery, the group-platform contact record.
  • Retention periods. Today most logs and signature records have no automatic deletion; the notice can only say so.
  • Whether investor personal data may be sent to Anthropic, and the data-processing agreement with it and the other processors.
  • International transfers (processors are US-based or global) and the transfer mechanism.
  • Which regimes apply to which investors (GDPR, UK GDPR, CCPA) and the wording of their rights, including how a request is made and answered.
  • Whether the group platform receiving a contact event is a processor, a joint controller or a separate controller.
  • The named data-protection contact, if one is required.
  • Whether Resend open/click tracking (a dashboard setting this code cannot see) is switched off.

Who is responsible

Rebel Seller Inc. Questions, access, correction or deletion requests: investor@rebelseller.com. COUNSEL: named data-protection contact and the way requests are answered.

What is collected and how long it is kept

Account
What: Your name, email address and, where you give them, phone and postal address; your investment records, agreements and documents; your optional profile photo and its two visibility switches.
Kept: Kept for as long as the investment relationship and the records belonging to it.
Sign-in
What: Sessions: email, IP address shortened to its first three parts (IPv4 /24, IPv6 /48), browser name and major version, and times. Rows written before this change keep the full address and browser string. Passkey credentials (public part) and authenticator secret (stored encrypted). Failed sign-in attempts and rate-limit counters.
Kept: Session rows are deleted 30 days after they expire. Rate-limit and one-time sign-in state rows are deleted after 1 to 2 days.
Access log
What: What you open: portal opened, tab viewed, time spent on a tab (seconds), document viewed (its title), with your email, IP address shortened as above and browser name and major version. Older rows keep the full values.
Kept: No automatic deletion today.
Signature records
What: NDA and agreement signing: your name, email, IP address, time, document version and a SHA-256 hash of the document; for some agreements the forwarded-for headers used to derive the IP. This is an intentional evidence trail.
Kept: No automatic deletion today (evidence).
Support form (signed out)
What: The IP address and an email key, used to limit how often the form can be used.
Kept: No automatic deletion today.

Cookies and browser storage

Cookies
What: Session; step-up check; owner admin unlock; one-time sign-in flow and proof cookies for Google or LinkedIn sign-in. All first party, HttpOnly, Secure. No analytics or advertising cookie.
Lifetime: Session ends at sign-out, after 2 hours idle, or at most 7 days (12 hours for owners). The others last minutes.
Browser storage
What: localStorage: your email and sign-in method if you sign in on this device (so the form is pre-filled), last tab and scroll positions, step and panel state, theme, which page tours you have seen, deck slide. sessionStorage: short-lived hints. A service worker (/sw.js) for the installed app.
Lifetime: Stays on your device until you clear it. None of it is sent to a third party.

Who else handles it

These providers act for us on the server. Your browser talks to this site's own servers and, when you open a stored document, to the document storage gateway (Cloudflare R2). It contacts anything else only when you ask, as listed after this.

Resend
Used for: Sends every portal email (sign-in links, dispatches, notices).
What it receives: Your email address and the message. The portal adds no tracking pixel or tracked link to dispatches.
Cloudflare R2
Used for: Stores uploaded and generated documents, served through signed links.
What it receives: Your documents. Your browser contacts the storage gateway directly when you open one.
Neon
Used for: Database.
What it receives: All records above.
Railway
Used for: Hosting.
What it receives: All traffic to the portal.
Anthropic
Used for: AI drafting tools used by the owner (memos, letters, document drafts, reply drafts); one tool accepts attached documents.
What it receives: Text the owner submits, which can include an investor first name or the text of an attached document.
Google and LinkedIn
Used for: Sign-in, only if you choose it.
What it receives: You are sent to the provider; we receive your name and email address.
Google Places, Mapbox, US Census Geocoder, OpenStreetMap Nominatim
Used for: Address suggestions while you type an address; the first that answers is used.
What it receives: The text of the address you typed, sent by our server (not your browser).
Google Workspace (Admin API)
Used for: The owner creates workspace accounts for the team.
What it receives: Staff account details; not investor data.
Rebel Seller platform (app.rebelseller.com)
Used for: Group platform; the portal tells it that a dispatch was sent to your email address so it shows on your contact record there.
What it receives: Your email address, dispatch subject, send time.
Rebel Seller voice service (rt.rebelseller.com)
Used for: Group service that turns text into speech for the read-aloud player and voice features. Our server sends it the text to be read (up to 1,500 characters at a time) and, for the voice list, a request for the available voices.
What it receives: The text being read aloud, which can be portal content. No name or email address is added to the request.

Contacted by your browser only after you click:

YouTube (youtube-nocookie.com) and Vimeo
Used for: A dispatch video.
What it receives: Contacted only after you press Play; they then see your IP address.
Rebel Seller platform (app.rebelseller.com), deck checkout
Used for: If a wire or crypto payment notice is submitted from the deck checkout, your browser sends it directly to the group platform. (The /deck route currently redirects to sign-in; the code remains.)
What it receives: Email, name, company, plan, amount and reference of that notice.
rebelseller.com live demo
Used for: The product demo tab.
What it receives: Contacted only after you press "Load the live demo"; it then sees your IP address and may ask for your microphone.

Fonts, scripts, icons and images are served from this site. No analytics, advertising or tracking script runs on it. Nothing about you is sent to a font or CDN host.

Signing the NDA and other agreements

The signature screen shows the record that is kept (name, time, IP address, document hash). E-SIGN and UETA are the laws that make the electronic signature valid; they are not the basis for processing the data in it. COUNSEL: state that basis.