Terms & Conditions

1. Definitions

• Customer means the fund, venture firm, or organisation that subscribes to Gias OS.
• Submitter means a founder or third party who submits a pitch deck through a Customer’s intake form.
• Customer Data means the Customer’s investment thesis, scoring rubric, hard filters, CRM configuration, and any other configuration provided by the Customer.
• Submission Data means pitch decks, extracted text, founder contact information, and any notes submitted through the intake form.
• Evaluation Data means AI-generated scores, decisions, IC memos, and routing actions.

2. Tenant Isolation

All Customer Data, Submission Data, and Evaluation Data is logically isolated per organisation at the database level. No data from one Customer is accessible to, shared with, or used to benefit any other Customer. Access controls are enforced at the application and database layer using organisation-scoped queries.

3. Data Processing & AI Usage

• Submission Data is processed by third-party AI models (currently OpenAI) solely for the purpose of generating Evaluation Data on behalf of the Customer.
• We use OpenAI’s API with data retention disabled (zero-day retention policy). Submitted content is not stored by OpenAI and is not used to train, fine-tune, or improve any AI model.
• Gias does not use Customer Data, Submission Data, or Evaluation Data to train, fine-tune, or improve any proprietary or third-party AI model.
• Aggregated, fully anonymized, and non-reversible statistics (e.g., total submission volume, average processing time) may be used for internal capacity planning and product improvement. No individual submission content or Customer thesis is included in such aggregates.

4. Data Retention Schedule

Customers may request early deletion of all their data at any time by contacting privacy@gias.co. Early deletion requests are fulfilled within 30 business days.

5. Infrastructure & Security

• Hosting: Application hosted on Vercel (SOC 2 Type II certified). Database on Neon PostgreSQL (SOC 2 Type II certified).
• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256). Database connections use SSL with certificate verification.
• Access controls: No Gias employee can access individual submission content without a documented support reason and audit trail. Access is role-based and logged.
• Integration credentials: Customer API keys (Attio, Slack) are stored encrypted in the database and are never exposed in logs, error messages, or API responses.

6. Submitter Rights

• Founders who submit decks through a Gias OS intake form are informed that their submission is processed algorithmically and shared with the subscribing fund.
• Submitters may request deletion of their personal data by contacting privacy@gias.co. Deletion requests are processed within 30 business days and apply to all copies across all systems.
• Gias does not sell, share, or distribute Submitter personal data to any party other than the Customer whose intake form was used.

7. Data Portability & Termination

• Customers may export their data (submissions, evaluations, audit logs) at any time via API or by written request.
• Upon subscription cancellation, Customer Data and all associated Submission Data and Evaluation Data are retained for 30 days (grace period), then permanently deleted per the schedule above.
• Customers may request immediate deletion upon cancellation by written notice.

8. Compliance & Certifications

• SNAB LIMITED is registered with the UK ICO (Ref: ZB783644). Data processing complies with UK GDPR and the Data Protection Act 2018.
• Platform-level SOC 2 Type II certification is on our roadmap for Q3 2026.
• We execute Data Processing Agreements (DPAs) upon request for enterprise Customers.

1. Monthly Volume

• Each organisation may process up to 1,000 submissions per calendar month under the base subscription (Associate or Partner).
• Monthly add-on credit packs may be purchased to increase the effective limit for a given billing cycle. Add-on credits expire at the end of the billing period in which they are purchased.

2. Daily Fair-Use Throttle

• A rolling daily cap of 100 submissions per day (UTC) is applied to prevent burst abuse and protect system stability.
• Organisations anticipating high-volume events (e.g., YC Demo Day, accelerator batches) may request a temporary burst override that raises the daily cap to 1,000 for a defined window. Contact support@gias.co to arrange.

3. Tier Entitlements

4. Anti-Abuse

• Gias reserves the right to throttle, suspend, or terminate service to any organisation that engages in automated abuse, credential sharing, or attempts to circumvent published limits.
• Legitimate high-volume use cases are accommodated via burst packs and add-on credits — contact us before hitting limits and we will work with you.