Privacy Policy

1. Who we are

Aquarium is operated by Aquarium, LLC. When this page says “we”, it means that company. You can reach us at hello@entertheaquarium.com.

2. What we collect

Only what the product needs to work:

• Your account — email address and password, held by our authentication provider. We never see your password.
• Your profile — display name, and optionally a photo, short bio, location and links.
• What you write into the product — business profiles, checklist progress, business plans, milestones, credit-building notes, saved resources, messages to people you have matched with, and any feedback you send us.
• Role applications — if you apply as an investor, advertiser or affiliate partner, the answers on that application and the follow-up thread with our reviewers.
• Membership status — your plan, whether it is active, and identifiers that let us look your subscription up with our payment processor.
• Questions you ask the assistants — the text of the question, the answer, and a token count, so daily limits can be enforced.

3. Identity verification

Some roles require a one-time identity check. It runs entirely with a third-party verification provider, and this is what we want you to understand about it:

Aquarium never receives, stores, or has access to your government ID, your photograph, any biometric or facial-recognition data, your Social Security number, or your date of birth.

Our records hold three things: the name of the provider, the reference number of your verification session, and the outcome — passed, failed, or cancelled. If a check fails, we keep a short reason code so you can appeal it. That is the whole of it.

The documents themselves go to the provider and stay with the provider, under their privacy policy and retention schedule. Verification does not begin until you have given consent, and we record when you gave it and which version of this notice you saw.

4. How we use it

• To run the product — your businesses, your checklist, your matches, your messages.
• To personalise what you are shown. Which resources, funding programmes and checklist items you see is decided from what you told us about your business — its state, industry, stage and entity type.
• To let approved investors see businesses whose founders have opted into the deck.
• To take payment for a membership, and to tell you when a payment fails.
• To notify you about things that happen on your account.
• To keep the platform safe, and to review applications and reports.

We do not use your information to train machine-learning models, and we do not build advertising profiles.

5. Who can see your information on Aquarium

Member profiles are not public and are not searchable. Specifically:

• Your business profile reaches investors only while you have marked it active and visible to investors. You can withdraw it at any time.
• An investor becomes visible to you when they express interest in your business — so you can judge who is asking before you answer. Declining closes that again.
• Founders cannot browse, search or contact investors. There is no route in the product that allows it.
• Advertisers and affiliate partners can reach no member information at all. They see their own listing or referral link and nothing else.
• Feedback you send us is private between you and our team. There is no public suggestion board.

6. Who else processes it

We use a small number of service providers. Each receives only what it needs to do its job:

• Supabase — hosts the database, authentication, file storage and server functions. Data is stored in the United States.
• Cloudflare — serves the website.
• Stripe — processes payments, and where enabled, runs identity verification. Card details go to Stripe and never reach us.
• Mux — hosts and streams pitch videos.
• GoHighLevel — sends notification and lifecycle email. It receives your email address, display name and membership status.
• Anthropic — provides the model behind the assistants and the business plan writer. It receives the question you asked, the passages we retrieved for it, and (for plan drafting) the answers you wrote. It does not receive your account identifiers.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. Your choices

• Edit or delete anything you have written, from the page where you wrote it.
• Withdraw a business from the investor deck at any time, from the business itself.
• Choose which emails you get. In-app notifications are the record of what happened on your account and cannot be switched off; email is per-category and is entirely up to you.
• Ask us to delete your account. Email us and we will delete it, along with your businesses, applications, messages and verification record.
• Ask for a copy of what we hold about you.

Depending on where you live you may have further rights — to know, to correct, to delete, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising them. Write to us and we will honour them.

8. How long we keep it

For as long as your account exists. Delete the account and the records attached to it go with it. Two things outlive it deliberately: entries in our administrative audit log, which record that an action was taken and are kept so decisions stay reviewable, and records we are required to keep for tax or accounting purposes. Neither contains identity documents, because we never hold any.

9. Security

Access to data is enforced in the database itself, per row, rather than only in the application — so a page cannot show you something you are not entitled to see even if it asks. Passwords are handled by our authentication provider and never stored by us. Uploaded profile photos and business logos are public by design, because they appear on listings; nothing else is.

No system is perfectly secure, and we do not claim otherwise.

10. Children

Aquarium is for people running or funding a business and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, tell us and we will remove it.

11. Changes

If we change this policy we will update the effective date above, and if the change is significant we will tell you in the product before it takes effect.