Privacy Policy
Last Updated: April 1, 2026
This Privacy Policy (“Policy”) describes how Not Legal Advice, Inc., a California corporation (“Company,” “we,” “us,” or “our”) collects, uses, and handles your information in connection with the Services (as defined in the Terms of Service). It is incorporated by reference into the Terms of Service, available at fullydiluted.io/terms (the “Terms”). Capitalized terms not defined here have the meanings given in the Terms.
If you are looking for our recommendations regarding anonymization, data security warnings, and the various disclaimers about the Services’ AI-built infrastructure, those are addressed more fully in the Terms. This document focuses on what happens to your data. To the extent we know.
1. INFORMATION WE COLLECT
1.1 Cap Table Data
When you upload a cap table, its contents are transmitted to and processed on our server. This data may include founder names, investor names, share counts, share classes, option pools, vesting schedules, SAFE and convertible note terms, valuation information, and other details that most companies treat as highly confidential.
We want to be transparent about what happens to this data after processing: we are not entirely certain. Your cap table is sent to a server. The server processes it. When you upload a new cap table, the previous one may be saved, overwritten, deleted, or may persist in some form we have not fully mapped out. The backend is under active development and its data lifecycle has not been formally documented.
This is an honest account of the current state of affairs. We will update this section as we learn more about our own infrastructure.
1.2 Analytics Data
We use Google Analytics, which collects information about your visit including your IP address, browser type, device information, pages visited, referring URLs, time spent on the Services, and other standard web analytics data. Google Analytics uses cookies to collect this information.
Google’s use of this data is governed by Google’s own privacy policy, which is comprehensive and long and available at https://policies.google.com/privacy. We encourage you to review it, or at least acknowledge its existence.
1.3 Other Technologies
As of the date of this Policy, we do not believe we have additional tracking tools or analytics services installed beyond Google Analytics. However, the Services are under constant development. We may have added something between when this Policy was last updated and when you are reading it. We may also add things in the future. We will update this Policy when we become aware of material changes, assuming we become aware of them.
2. HOW WE USE YOUR INFORMATION
2.1 Cap Table Data
We use the cap table data you upload for the purpose of providing the Services: processing your cap table and modeling pro forma financing rounds. That is the intended use.
2.2 Analytics Data
We use Google Analytics data to understand how people use the Services, which pages are visited, and other standard analytics purposes. We do this so we can improve the Services, which, given their current state, has meaningful room for improvement.
3. DATA SHARING
3.1 We do not currently sell, rent, or trade your personal information or cap table data to third parties but that practice could change. Who knows. Again, we STRONGLY recommend that you redact all sensitive information from your cap table before uploading it or building it within the Services.
3.2 We may share data with service providers who help us operate the Services (such as hosting providers), to the extent such sharing is necessary for the Services to function.
3.3 Google Analytics data is shared with Google in accordance with Google’s terms. We did not design Google Analytics and cannot speak to what Google does with the data it collects, though we suspect it is extensive.
3.4 We may disclose information if required by law, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
4. DATA RETENTION
For analytics data, retention is governed by our Google Analytics settings and Google’s own data retention policies.
For cap table data, our retention practices are described in Section 1.1 above with as much specificity as we can currently offer. We are working on this.
5. SALE OR TRANSFER
In the event of a sale, merger, acquisition, or other transfer of the Company or the Services or their assets, your data — including any cap table data that exists on our servers at that time — may be among the assets transferred. This is addressed further in Section 10 of the Terms.
6. DATA SECURITY
We have not conducted a formal security audit, penetration test, or third-party security assessment. We do not have a SOC 2 report. The Services were built primarily by AI.
We take reasonable precautions to protect your data, but “reasonable” is doing a lot of work in that sentence given the disclosures above. We cannot guarantee the security of any data transmitted to or stored by the Services.
Please see Section 5.4 of the Terms for our thoughts on anonymization, which we will summarize here as: please anonymize your data.
7. COOKIES
Google Analytics uses cookies. We may use additional cookies as the Services develop. Your browser settings allow you to manage or disable cookies, though doing so may affect functionality.
8. YOUR RIGHTS
Depending on your jurisdiction, you may have rights regarding your personal data, including rights to access, correct, delete, restrict processing, or port your data. You may also have the right to withdraw consent or object to processing.
To exercise any of these rights, please contact us at gintelbot@gmail.com. We will make good faith efforts to respond to your request, which in some cases may involve figuring out where your data is and how to retrieve or delete it.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). If you are in the European Economic Area, you may have rights under the General Data Protection Regulation (GDPR). We will work to honor applicable rights under these and other data protection laws.
9. CHILDREN’S PRIVACY
The Services are not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has used the Services, please contact us and we will take appropriate steps, including being mildly impressed.
10. THIRD-PARTY LINKS
The Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Given that we are still cataloguing our own privacy practices, this should be expected.
11. CHANGES TO THIS POLICY
We may update this Policy at any time. When we do, we will revise the “Last Updated” date at the top. Material changes will be communicated through the Services or by other reasonable means, to the extent we remember.
12. CONTACT
For questions about this Policy or to exercise your data rights, please send an email to: gintelbot@gmail.com
We will respond as promptly and helpfully as we can.