Privacy policy

Last updated 4 September 2026

Portfolio Fundraising is an internal tool operated by Base10 Partners. It is used by Base10 and by the founders of Base10 portfolio companies to track an active fundraise. It is not a public product, it has no advertising, and it does not sell data.

Who this covers

Two kinds of user: Base10 staff, and people at a portfolio company whose raise Base10 is supporting. Access is by invitation only, and everyone signs in with a Google account.

What we collect when you sign in

Signing in uses your Google account’s email address, name, and profile picture. Nothing else. Signing in does not give us access to your email or your calendar.

Connecting a calendar is separate, and optional

Calendar access is a second, deliberate step with its own Google consent screen. You can use the app fully without it. If you do connect one, we request a single scope, calendar.readonly, which is read-only. The app contains no code that can create, change, or delete anything on your calendar.

Google’s calendar permission is all-or-nothing: there is no setting that grants access to only some events. So the app reads your primary calendar within a window (by default 30 days back and 90 days forward) and then applies its own filter before anything is written down. We think you should know that the narrowing is done by our code rather than by a limit Google enforces.

What we skip, before looking at anything else

• Any event you have marked private or confidential in Google Calendar. This is checked first, before we look at who is on the invite.
• Out-of-office blocks, focus time, birthdays, and working-location entries.

What we store, and what we discard

An event is stored only if at least one attendee’s email domain matches a firm in our investor registry. Everything else is read into memory to make that check and then discarded without being written: internal meetings, customer calls, one-on-ones, personal appointments, and anything with no attendees.

For an event that does match, we store:

• Title, start and end time, and whether it is all-day
• Location, the video-call link, and the link back to the event in Google Calendar
• The attendee list: email addresses, display names, and RSVP status
• Google’s event identifier, and which connected account it came from

We do not store the event description. Agendas, dial-in details, and notes written in the body of an invitation are dropped.

One thing worth being explicit about: the filter is “an investor firm is on the invite”, not “this meeting is about the raise”. A meeting with an investor for an unrelated reason would still be stored.

Slack

Where a company and Base10 share a Slack channel for the raise, and that channel has been connected explicitly, the app reads messages from that channel only. It does not read direct messages, and it does not join channels on its own.

Automated processing

Messages from a connected Slack channel are sent to Anthropic’s API to extract structured facts about the raise, such as which investor reached a given stage. Where meeting transcripts are connected through a notetaker, the transcript, meeting title, date, and firm name are sent for the same purpose. Anthropic does not train models on this data.

Calendar event data is not sent to a model. It is matched against the investor registry and displayed.

Who can see it

Base10 staff can see the raises they support. A person at a portfolio company sees their own company’s raise and nothing else. Some fields are Base10-internal and are removed from the response before it reaches a company user rather than merely hidden in the interface.

Where it is stored

In a Postgres database hosted by Supabase, with the application hosted by Vercel, both in the United States. Google access and refresh tokens are encrypted before they are written.

Deleting it

You can disconnect a calendar at any time from the same screen where you connected it. Disconnecting revokes the app’s access at Google, not only on our side, and deletes the stored connection. A checkbox on that screen deletes every meeting already synced from that calendar at the same time.

To delete your account entirely, or to ask what is held about you, email jason@base10.vc.

Google API Services User Data Policy

This app’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide this app, comply with the law, or as part of a merger or acquisition.

Changes

If what the app collects changes, this page changes with it, and the date at the top is updated.

Contact

Base10 Partners, San Francisco, California. jason@base10.vc