Privacy Policy

Last updated: June 2026

This Privacy Policy describes how eSapiens, Inc. ("eSapiens," "we," "us," or "our") collects, uses, and shares information in connection with your use of the Derek platform and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect several types of information to provide and improve our Service:

  • Account Information: When you create an account, we collect your name, email address, organization name, and role.
  • Fund Data: Data you upload or enter about your funds, portfolio companies, limited partners, and financial performance.
  • Usage Data: Information about how you access and use the Service, including IP addresses, browser type, pages visited, and time spent on pages.
  • Communications: Information you provide when you contact us for support or other inquiries.
  • Integration Data: Data received from third-party services you connect to Derek, such as Carta or other portfolio management tools.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities in connection with the Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

Important: We do not use your fund data, portfolio company information, or LP details to train artificial intelligence or machine learning models. Your data is used solely to provide the Service to you.

Data Sharing

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: With vendors, consultants, and service providers who need access to such information to perform services on our behalf (e.g., cloud hosting, analytics).
  • Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
  • With Your Consent: We may share information with your consent or at your direction.

Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your data at any time by contacting us. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law.

Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data at rest (AES-256) and in transit (TLS 1.3)
  • Per-fund data isolation
  • Role-based access controls
  • Regular security assessments and penetration testing
  • Employee security training and background checks

For more details, please see our Security page.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information.
  • Portability: Request a copy of your data in a portable format.
  • Objection: Object to processing of your personal information in certain circumstances.

To exercise these rights, please contact us at privacy@esapiens.ai.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from the laws of your country. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy.

Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

eSapiens, Inc.
Email: privacy@esapiens.ai
Address: Houston, TX