Promythia

Promythia — Privacy Policy

Last modified: July 26, 2026

Introduction

Ragas Enterprises Inc. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting it by complying with this policy. Ragas Enterprises Inc. operates the Promythia web application available at promythia.com (the "Service" or "Website").

This policy describes how we collect, use, disclose, and protect the personal information of our users ("you"), the types of information we collect from you or that you provide when you use the Service, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

We will only use your personal information in accordance with this policy unless otherwise required by applicable law. We take steps to ensure that the personal information we collect about you is adequate, relevant, not excessive, and used only for the limited purposes described here.

Privacy laws in Canada — including the federal Personal Information Protection and Electronic Documents Act ("PIPEDA") and Québec's Act respecting the protection of personal information in the private sector (the "Québec Privacy Act," as amended by Law 25) — generally define "personal information" as information about an identifiable individual. This policy applies to information we collect, use, or disclose about you on the Service and in email and other electronic messages between you and us.

The Service integrates certain third-party providers that process data on our behalf (for example, our authentication, hosting, and payment-processing providers described below). Those providers act as our service providers under this policy. The Service may also contain links to third-party websites we do not control; this policy does not apply to those websites, and we encourage you to review their privacy policies.

Please read this policy carefully. By accessing or using the Service, you indicate that you understand and accept the practices described in this policy. If you do not agree, your choice is not to use the Service. We will notify you in advance of any material changes and, where required by law, obtain your consent to any new ways in which we collect, use, or disclose your personal information.

Information we collect about you

We collect and use the following types of information:

  • Account information. When you create an account, you sign in using Google (via Google OAuth). We receive from Google, and store, basic profile information such as your name, email address, and Google account identifier. We do not receive or store your Google password.
  • Information you provide in using the Service. Promythia is a financial-planning tool. In using it, you may enter information about yourself and about companies you are associated with, including cap table data, securityholder names, share and option holdings, financing-round terms, valuations, and related financial and business information (collectively, "Financial Data"). Some of this information may constitute personal information about you or about third parties (for example, the names of other securityholders).
  • Fundraising pipeline information. If you use Raise Mode to run a financing round, you may enter information about the investors you are approaching — including firm and contact names, email addresses, target cheque sizes, the stage each investor has reached, your notes on calls and correspondence, and the dates and titles of meetings (collectively, "Pipeline Data"). Pipeline Data is personal information about identifiable third parties who are generally not users of the Service.
  • Billing and payment information. When you purchase paid features (such as the Promythia plan, team seats, or additional companies), our payment processor, Stripe, collects and processes your payment details on our behalf. We do not receive or store your full payment card number. We receive and store limited billing metadata — such as your name, the card brand and last four digits, your billing address and country, any tax registration information you provide, and a record of your transactions, invoices, and account credits — which we use to administer your subscription, issue receipts and invoices, apply taxes, and prevent fraud.
  • Correspondence. Records and copies of your correspondence with us if you contact us for support or other purposes.
  • Technical information, including your login information, browser type and version, time zone setting, operating system and platform, and information about your internet connection and the device you use to access the Service.
  • Usage information, including details of your visits to the Service, pages and features you access, and the dates and times of your interactions. We use this to operate, secure, and improve the Service.

We do not use the Service to serve advertising, and we do not engage in behavioural or targeted advertising, ad-network tracking, or the sale of personal information.

A note about information about third parties

If you enter personal information about other individuals (for example, other founders, employees, or securityholders on a cap table, or investors you are tracking in a fundraising pipeline), you represent that you are authorized to provide that information to us for processing in connection with your use of the Service, and that you will, where required, inform those individuals of this policy.

How we collect information about you

We collect information through:

  • Direct interactions, when you provide it — for example, by signing in, entering data into the Service, or corresponding with us.
  • Our authentication provider (Google), when you choose to sign in with Google.
  • A calendar feed you choose to give us. If you provide a public calendar (iCal / .ics) link, we fetch and read it so your upcoming events can appear alongside your investor meetings. We read it only; we never write to your calendar. A public feed may contain events unrelated to fundraising, so only provide a link you are content for us to read.
  • Automated technologies, as you navigate the Service, including information collected through cookies and similar technologies used to keep you signed in and to operate the Service (see Cookies and similar technologies below).

Cookies and similar technologies

We use two categories of cookies and similar technologies (including browser local storage and session tokens):

  • Strictly necessary technologies, which are required to operate the Service — principally to authenticate you, maintain your session, keep the Service secure, and remember your preferences.
  • Analytics technologies, which help us understand how the Service is used so that we can improve it. We use Google Analytics for this purpose. Google Analytics sets cookies and collects information such as your device and browser type, pages viewed, and interactions with the Service, and may collect information about your use of the Service over time and across the pages of the Service. We use these analytics to measure and improve the Service, not to serve advertising.

We do not use advertising cookies or third-party behavioural-advertising networks, and we do not use these technologies to sell your personal information.

You can set your browser to refuse some or all cookies or to alert you when cookies are being set. If you disable strictly necessary cookies, you may be unable to sign in or use core parts of the Service. You may also opt out of Google Analytics by installing Google's opt-out browser add-on, or by declining analytics cookies where a cookie-preference mechanism is offered on the Service. We honour applicable consent requirements for analytics technologies in Québec and elsewhere before activating them in your browser.

How we use your information

We use the information we collect, including personal information:

  • To provide, operate, and maintain the Service and its features, including your cap-table and round-modelling tools.
  • To authenticate you and manage your account.
  • To store and make available to you the Financial Data you enter.
  • To respond to your requests and provide customer support.
  • To secure the Service, prevent fraud and abuse, and protect the rights, property, and safety of the Company and our users.
  • To improve the Service. Where we analyze usage to improve the Service, we use aggregated or de-identified information that does not identify you wherever practicable.
  • To send you service-related communications (such as account, security, and material change notices).
  • To comply with our legal obligations and enforce our agreements.
  • For any other purpose disclosed to you at the time you provide the information, or with your consent.

We rely on your consent, and on the other legal bases permitted under applicable Canadian and Québec privacy law, to process your personal information for these purposes.

Our rights in your User Data

The information you submit to the Service — including cap table and financing data (your "User Data") — is also licensed to us under our Terms of Use. Under that licence, you grant us and our affiliates, service providers, and their respective licensees, successors, and assigns a worldwide, royalty-free, perpetual, irrevocable, non-exclusive right to use, reproduce, modify, host, store, process, distribute, and otherwise disclose to third parties your User Data, and to incorporate it into any form, medium, or technology, for any purpose and in accordance with your account settings, without compensation to you. Where your User Data contains personal information, our collection, use, and disclosure of that personal information is also governed by this policy and by applicable privacy law.

Disclosure of your information

We do not sell your personal information, and we do not disclose it to advertisers. We may disclose personal information:

  • To service providers who process data on our behalf, under contract and only for the purposes of operating the Service. Our principal service providers are:

    • Google LLC — authentication (Google OAuth sign-in) and website analytics (Google Analytics).
    • Supabase, Inc. — database, authentication infrastructure, and hosting of user data.
    • Vercel Inc. — application hosting and delivery.
    • Resend (Plus Five Five, Inc.) — transactional and service-related email delivery.
    • Stripe Payments Canada, Ltd. and its affiliates (including Stripe, Inc.) — payment processing, billing, invoicing, and fraud prevention for paid features.
    • HubSpot, Inc. — customer-relationship management and processing of the messages you send us through our contact form.
    • Calendly LLC — scheduling, where you choose to connect your Calendly account. When connected, we exchange with Calendly the information needed to match a booking to an investor you are tracking, including that investor's email address, and the title and time of the meeting.

    These providers are contractually required to protect personal information, use it only for the purposes for which we disclose it, and apply protections consistent with this policy and applicable law.

  • In connection with a business transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in accordance with applicable law, where personal information may be among the assets transferred. We will require the recipient to protect the information consistent with this policy.

  • To comply with legal obligations, including in response to a court order, subpoena, law, or governmental or regulatory request, in accordance with applicable law.

  • To protect rights and safety, where we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our users, or others, or to enforce our Terms of Use.

  • With your consent, or as otherwise disclosed to you when you provide the information.

We may disclose aggregated or de-identified information that does not identify any individual without restriction.

Transferring your personal information (cross-border)

We and our service providers may store and process your personal information outside Québec and outside Canada, including in the United States. As a result, your personal information may be subject to the laws of those jurisdictions, and the governments, courts, law enforcement, or regulatory agencies of those jurisdictions may in certain circumstances be able to access it.

Before transferring personal information outside Québec, we assess the transfer as required under the Québec Privacy Act, and we require our service providers to provide protection for personal information that is adequate and consistent with applicable Canadian and Québec privacy legislation.

You are welcome to contact our Privacy Officer (below) for more information about our practices regarding service providers located outside Québec or Canada.

Data security

The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include access controls that restrict each user's data to their own account, encryption of data in transit, and reliance on established infrastructure providers.

Access to your account data by our personnel is limited. Only a small number of authorized staff may access it, and only where necessary to operate, support, secure, or maintain the Service (for example, to resolve a support request or investigate abuse). Such access is restricted by role and is recorded in an internal audit log.

The safety and security of your information also depends on you. You are responsible for keeping your Google account and any access credentials secure, and for not sharing access to your account. Please notify us immediately of any unauthorized access to or use of your account.

Unfortunately, no method of transmission over the internet or electronic storage is completely secure. While we take reasonable measures to protect your personal information, we cannot guarantee its absolute security, and any transmission is at your own risk.

Confidentiality incidents (breach notification)

We maintain procedures to respond to confidentiality incidents (security breaches involving personal information). In accordance with the Québec Privacy Act and other applicable law, where a confidentiality incident presents a risk of serious injury, we will take reasonable measures to mitigate the risk, notify affected individuals and the Commission d'accès à l'information (and any other regulator, such as the Office of the Privacy Commissioner of Canada, where required), and maintain a register of confidentiality incidents as required by law.

Data retention

Except as otherwise permitted or required by applicable law, we retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including to provide the Service to you and to satisfy any legal, accounting, or reporting requirements. When you delete your account, we will delete or de-identify the personal information and Financial Data associated with your account from our live systems within 30 days of your request. Residual copies may remain in our encrypted backups for up to 90 days following deletion, after which they are purged as backups cycle out in the ordinary course. These retention periods are subject to any legal retention obligations that require us to keep certain information longer.

Children

The Service is intended for business users who are at least 18 years of age. The Service is not directed to, or intended for use by, anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact our Privacy Officer and we will take appropriate steps to delete it.

Accessing and correcting your personal information; your rights

It is important that the personal information we hold about you is accurate and current. You have the right, under applicable law, to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete personal information.
  • Withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions (withdrawing consent may mean we can no longer provide the Service).
  • Request deletion of your personal information, subject to our legal retention obligations.
  • Data portability — where required by the Québec Privacy Act, request that computerized personal information you have provided to us be communicated to you in a structured, commonly used technology format.

You can review and update much of your information directly within the Service, or by contacting our Privacy Officer. We may request specific information to confirm your identity before responding. Applicable law may permit or require us to decline certain requests; if we do, we will explain why, subject to legal restrictions.

Withdrawing your consent

Where you have provided consent to the collection, use, or transfer of your personal information, you may withdraw it, subject to legal or contractual restrictions, by contacting our Privacy Officer. We will explain the likely consequences of withdrawal, which may include our inability to continue providing the Service.

Changes to our privacy policy

We post any changes to this policy on this page and update the "Last modified" date above. If we make material changes to how we treat your personal information, we will notify you by email to the address associated with your account and/or through a notice on the Service. You are responsible for keeping your contact information current and for reviewing this policy periodically.

Privacy Officer — contact information and challenging compliance

We welcome your questions, comments, and requests about this policy and our privacy practices. The person responsible for the protection of personal information (our "Privacy Officer") within the meaning of the Québec Privacy Act can be reached at:

Constantinos Ragas, President (Privacy Officer)
privacy@promythia.com

We have procedures to receive and respond to complaints or inquiries about our handling of personal information and our compliance with this policy and applicable privacy laws. If you are not satisfied with our response, you may be entitled to bring a complaint to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.