Privacy Policy

TakeX Ltd.
Last updated: 11 June 2026

1. Who we are and how to contact us

This Privacy Policy explains how TakeX Ltd. (TakeX, we, us, our) collects, uses, stores, shares, and protects your personal data when you use the TakeX platform at takex.ai, including the Ambrose AI assessment system, SIRA, and all related products and services (the Platform).

TakeX Ltd. is a company incorporated in England and Wales under company number 17016645, with its registered office at 128 City Road, London EC1V 2NX, United Kingdom. TakeX is the controller responsible for your personal data.

For any questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us at contact@takex.ai.

This Privacy Policy is issued by TakeX Ltd. From time to time, other companies in the TakeX group may process your personal data as our processors or service providers in connection with delivering the Platform. Where another TakeX group company becomes a controller of your data, we will let you know.

2. About this Privacy Policy

This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and with applicable e-privacy rules including the Privacy and Electronic Communications Regulations (PECR).

The Platform is provided exclusively to business users (founders, investors, accelerators, corporates, and other professional users) acting in the course of their business. This Privacy Policy nonetheless applies to the personal data of individuals associated with those business users (for example, the founders, directors, employees, investors, partners, or other individuals acting on behalf of a business), and to anyone who interacts with the Platform.

This Privacy Policy should be read together with our Terms of Use and, where applicable, our Cookie Policy and any supplemental terms displayed for specific products.

3. What personal data we collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

Identity Data — first name, last name, title, username, account type (founder, investor, evaluator, or other), and other similar identifiers.
Contact Data — email address, business address, telephone number, and country.
Business and Profile Data — company name, role, professional background, and profile information you provide.
Founder Submission Data — startup name, sector, stage, location, funding history and targets, team information, pitch deck, Ambrose assessment content, founder report content, supporting materials, and any other information you submit in the course of using founder-facing products (such as Ambrose).
Investor and Evaluator Submission Data — organisation name, investment thesis, sectors, stages, geographies of interest, typical investment size, and any other information you provide in the course of using investor-facing products.
SIRA Content Data — the content of your interactions with SIRA and the information that SIRA generates about you, including any FounderDNA or similar profile.
Financial Data — billing address and transaction history. Payment card details are processed by our third-party payment provider and are not stored by TakeX directly.
Technical Data — IP address, browser type and version, time zone setting, device type, operating system, login data, and other technology used to access the Platform.
Usage Data — pages visited, features used, click patterns, navigation paths, time spent on the Platform, and other information about how you interact with the Platform.
Marketing and Communications Data — your preferences for receiving marketing from us, communication preferences, feedback, survey responses, and the content of communications you send to us.

We also collect, use, and share aggregated and de-identified data (such as statistical or analytical data) that does not directly or indirectly identify you. We may use this kind of data for any purpose, including research, model training, benchmarking, analytics, and the development of new products and services.

4. How we collect your personal data

We collect your personal data in three main ways:

Directly from you — when you register an account, complete your profile, submit a pitch deck or other materials, use SIRA, make a purchase, contact us, complete a survey, or interact with the Platform.
Automatically through your use of the Platform — Technical Data and Usage Data are collected automatically as you interact with the Platform, including through cookies and similar technologies (see Cookies and tracking).
From third parties — payment processors (for transaction confirmations), analytics providers (for aggregated usage data), authentication providers (where you sign in via a third party), and publicly available sources (for verification purposes, where applicable).

5. How we use your personal data

5.1 Delivering the Platform to you

To create and manage your account, deliver the products you have signed up for or purchased, process pitch deck assessments through Ambrose, run SIRA interactions, generate reports and certifications, operate matching and introduction features, process payments, and provide customer support.

5.2 Improving the Platform and developing our technologies

To analyse usage, understand how the Platform is used, improve features and the user experience, and develop, train, evaluate, and improve TakeX’s proprietary systems, including the Ambrose framework, scoring models, classifiers, the matching algorithm, SIRA, and other TakeX technologies. Where we process personal data for these purposes, we use de-identified or aggregated data wherever possible. See AI processing, training, and matching (clause 7) for more detail.

5.3 Communications

To send service-related communications (for example, account notifications, assessment results, payment confirmations, certification updates, and notices about changes to the Platform or these policies), to respond to your enquiries, and to send marketing communications where permitted (see Marketing communications below).

5.4 Safety, security, and fraud prevention

To detect, prevent, and respond to fraud, abuse, security incidents, and breaches of our Terms of Use; to enforce our agreements; and to protect the Platform, other users, and TakeX.

5.5 Legal and regulatory compliance

To comply with applicable laws and regulations (including sanctions, anti-money-laundering, tax, and data protection laws), to respond to lawful requests from public authorities, and to establish, exercise, or defend legal claims.

5.6 Business operations and transactions

For internal business administration, audit, financial reporting, corporate transactions (such as mergers, acquisitions, restructuring, or sales of assets), and the management of relationships with our affiliates and service providers.

6. Legal bases for processing

Under UK GDPR, we rely on one or more of the following legal bases when we process your personal data:

Performance of a contract — where processing is necessary to deliver the Platform to you, perform our obligations under the Terms of Use, or take steps at your request before entering into a contract.
Legitimate interests — where processing is necessary for our legitimate interests (such as improving the Platform, developing TakeX’s proprietary technologies, ensuring security, preventing fraud, and running our business efficiently) and those interests are not overridden by your rights and freedoms. Where we rely on legitimate interests, you can ask us for more information about the balancing test we have carried out.
Consent — where you have given us explicit consent for a specific purpose, such as receiving marketing communications or participating in the matching service. You may withdraw consent at any time, subject to the mechanics described elsewhere in this Privacy Policy.
Legal obligation — where processing is necessary to comply with a legal or regulatory obligation.

7. AI processing, training, and matching

Because the Platform is an AI-based service, we want to be transparent about how artificial intelligence is involved in the processing of your personal data.

7.1 How AI is used to deliver the Platform

Your submissions (including pitch decks submitted to Ambrose, SIRA conversations, and other content) are processed by artificial intelligence systems to generate assessments, scores, reports, certifications, recommendations, matching outcomes, and other outputs. This processing takes place automatically and forms part of the service you are using.

7.2 Third-party AI and cloud providers

The Platform uses third-party AI providers and cloud infrastructure providers to deliver its services. Your content may be processed by these providers under their own terms.

7.3 Use of your data to train and improve TakeX’s own systems

We may use your personal data, the content you submit, and the outputs generated by the Platform to develop, train, evaluate, and improve TakeX’s own proprietary systems (including the Ambrose framework, scoring models, classifiers, the matching algorithm, SIRA, and future TakeX products). Where we do so, we use de-identified or aggregated data wherever possible so that the data used for training cannot reasonably be linked back to you.

7.4 Matching and recommendations

Where a product includes matching, ranking, recommendation, or introduction features, we process your profile and submission data using TakeX’s proprietary matching algorithm to identify and surface potential matches between users (including but not limited to between founders and investors).

By using a product that includes matching, you consent to your data being processed for this purpose. You may withdraw your consent to future matching at any time by writing to contact@takex.ai or using any opt-out feature provided on the Platform. Withdrawal of consent:

Is not effective immediately and takes effect within a reasonable period after we have processed the request;
Applies only to matching, ranking, or recommendation activity carried out after the withdrawal takes effect; and
Does not unwind, reverse, or otherwise affect any matches, recommendations, or introductions already made, or any connections, communications, or arrangements arising from them.

7.5 SIRA confidentiality

Where you use SIRA, your interactions with SIRA and the content of those interactions are private to you and are not shared with other users on the Platform. We use SIRA interaction data to deliver the service to you and, in de-identified or aggregated form, to improve SIRA and TakeX’s other technologies, as described in clause 7.3.

8. Automated decision-making

Some features of the Platform involve automated decision-making, including:

Ambrose assessments — track allocation, scoring across evaluation pillars, and certification status are generated by AI-powered processing of the materials you submit.
Matching outputs — matches, rankings, and recommendations between users are produced by TakeX’s matching algorithm.

These outputs are intended to support your decision-making and the decision-making of other users. They are not binding determinations of your business prospects, your investment-worthiness, or any other matter. Investors and evaluators on the Platform make their own independent decisions and TakeX does not make decisions on their behalf.

Your rights in relation to automated decision-making are set out in clause 13 below. If you have concerns about any specific automated decision produced by the Platform, please contact us at contact@takex.ai.

9. How we share your personal data

We share your personal data only as described in this Privacy Policy.

9.1 Sharing with other users on the Platform

What we share with other users depends on the product or service you are using, as set out in our Terms of Use and on the Platform. The principal sharing arrangements are:

Certified founders. Where a founder submits materials for assessment and obtains certification through Ambrose or a similar product, a summary of the founder’s profile details, deck or summary materials, and certification result will be made available to investors and other evaluators on the Platform to enable them to review the opportunity. Full detailed reports remain private to the founder unless the founder chooses to share them.
Investors, accelerators, corporates, and other evaluators. Where an investor, accelerator, corporate, or other evaluator uses the Platform to assess materials they have submitted (which may include materials about a startup, founder, or other third party), the resulting assessment is provided to the user who submitted them. The submitting user is responsible for ensuring they have the rights and consents necessary to submit those materials.
SIRA users. Your SIRA interactions are not shared with other users on the Platform.

9.2 Other companies in the TakeX group

We may share your personal data with other companies in the TakeX group from time to time, where they act as our service providers or processors in delivering the Platform. In some cases, a TakeX group company may also become a joint or independent controller of your data — for example, if a product is jointly operated with that company, or if it provides services to you in its own name. Where this happens, we will let you know who the controller is and how your rights apply.

9.3 Third-party service providers

We share personal data with third-party service providers who help us operate the Platform, including:

Category	Purpose
Cloud hosting providers	Data storage, processing, and hosting infrastructure
AI providers	Processing of submitted content to generate AI outputs
Payment providers	Payment processing, billing, and tax handling
Email and communications providers	Transactional and marketing emails, customer support
Analytics providers	Aggregated usage analytics
Identity and authentication providers	Account verification and secure sign-in
Professional advisers	Legal, accounting, audit, tax, and insurance services

All service providers are contractually required to protect your personal data and to use it only for the purposes for which we have engaged them.

9.4 Legal and regulatory disclosures

We may disclose your personal data where required by law or in response to lawful requests by public authorities (including law enforcement, regulators, and courts), or where necessary to establish, exercise, or defend legal claims.

9.5 Business transfers

If TakeX (or a substantial part of its business or assets) is involved in a merger, acquisition, restructuring, sale, or similar transaction, your personal data may be transferred to the relevant counterparty as part of that transaction.

9.6 What we do not do

We do not sell your personal data to third parties. We do not share founder pitch decks with investors before certification (where certification is part of the product). We do not share your full Ambrose assessment report with investors unless you choose to share it.

10. International data transfers

We are based in the United Kingdom, but your personal data may be transferred to, stored in, or processed in countries outside the UK as part of operating the Platform, including by our group companies, cloud and AI providers, and other service providers.

When we transfer personal data outside the UK, we ensure an appropriate level of protection is in place by using one or more of the following safeguards:

Adequacy regulations — transfers to countries that have been determined by the UK Government to provide an adequate level of protection (currently including the EEA and certain other jurisdictions);
The International Data Transfer Agreement (IDTA) — UK-approved standard contractual terms that provide a similar level of protection to UK law;
The UK Addendum to the EU Standard Contractual Clauses — for transfers made under the European Commission’s standard contractual clauses with the UK Addendum applied; or
Other lawful transfer mechanisms permitted under UK GDPR.

To obtain a copy of the safeguards we use for international transfers, please contact us at contact@takex.ai.

11. Data security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. These include:

Encryption of data in transit (TLS/SSL) and at rest;
Role-based access controls limiting access to personnel with a legitimate business need;
Secure hosting on enterprise-grade infrastructure;
Regular security reviews and assessments;
Procedures for detecting, responding to, and reporting security incidents.

We limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know, and who are under a duty of confidentiality.

Where any unauthorised access, use, or disclosure of your data is caused by a third party acting against our reasonable security measures (for example, by criminal hacking, social engineering, or denial-of-service attack), and not by TakeX’s own gross negligence or wilful misconduct, we will notify you and the relevant regulator where required by law, but we will not be in breach of this Privacy Policy or our security obligations as a result of that event.

While we strive to protect your data, no method of transmission or storage is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately at contact@takex.ai.

12. Data retention

We retain your personal data only for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, whether we can achieve those purposes through other means, and any legal, regulatory, tax, accounting, or other applicable requirements.

12.1 Active accounts

We retain your personal data for as long as your account remains active and as needed to provide the Platform to you.

12.2 Account deletion

When you request deletion of your account, or your account is terminated:

Your profile and account data will be removed from active systems within a reasonable period (typically within 30 days);
Your submission data (such as pitch decks, SIRA content, and other materials) will be removed from active systems within a reasonable period (typically within 30 days);
Outputs already generated and delivered to you (such as reports and certificates) remain subject to the licence granted to you under our Terms of Use;
Any certification or credential previously granted may, in our sole discretion, be revoked, suspended, or maintained;
We may retain certain data in secure backup systems for a limited period (typically up to 12 months) for security, business continuity, and legal compliance purposes;
We may retain certain data for longer where required to comply with legal obligations, resolve disputes, enforce our agreements, or maintain security and audit records.

12.3 De-identified and aggregated data

We may retain de-identified and aggregated data indefinitely for research, analytics, model training, and the development of new products and services. This data cannot be used to identify you.

13. Your rights

You have a number of rights under UK GDPR in relation to your personal data:

Access — request a copy of the personal data we hold about you;
Correction — request that we correct any inaccurate or incomplete personal data;
Erasure — request that we delete your personal data in certain circumstances (also known as the “right to be forgotten”);
Restriction — request that we restrict the processing of your personal data in certain circumstances;
Objection — object to our processing of your personal data where we rely on legitimate interests (including profiling); and an absolute right to object to processing for direct marketing purposes;
Portability — request a copy of your personal data in a structured, commonly used, and machine-readable format, or that we transmit it to another controller, where this right applies;
Withdraw consent — where we process your data on the basis of consent, you have the right to withdraw consent at any time (without affecting the lawfulness of processing before the withdrawal);
Rights in relation to automated decision-making — as set out in clause 8.

13.1 Exercising your rights

To exercise any of these rights, please contact us at contact@takex.ai. We may need to request specific information from you to help us confirm your identity before responding to your request. This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it.

13.2 Response time

We will respond to legitimate requests within one month. If your request is particularly complex or you have made a number of requests, we may extend this period by up to a further two months, in which case we will keep you informed.

13.3 No fee

You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee, or refuse to comply with your request, if your request is clearly unfounded, repetitive, or excessive.

14. Marketing communications

We may send you marketing communications about TakeX products and services where you have given us consent or where another lawful basis applies.

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email we send you;
Updating your communication preferences in your account settings (where available); or
Contacting us at contact@takex.ai.

Opting out of marketing communications does not affect our ability to send you service-related and transactional communications (such as account notifications, assessment results, payment confirmations, and notices about changes to the Platform or these policies), which you cannot opt out of for as long as you use the Platform.

15. Cookies and tracking technologies

The Platform uses cookies and similar tracking technologies to operate, secure, and improve the Platform. For details about the cookies we use, their purposes, and how you can manage your preferences, please see our Cookie Policy.

You can also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

16. Third-party links

The Platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, content, or security of those third parties. When you leave the Platform, we encourage you to read the privacy policies of any third-party services you use.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, in the Platform, or in our business. The “Last updated” date at the top of this document indicates when the Privacy Policy was last changed.

If we make material changes, we will take reasonable steps to notify you, such as by email or by posting a notice on the Platform. Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Privacy Policy.

It is important that the personal data we hold about you remains accurate and current. Please keep us informed if your personal data changes during your relationship with us (for example, a new email address or company name).

18. Complaints

If you have any concerns about how we handle your personal data, please contact us first at contact@takex.ai so that we can try to resolve your concerns directly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection issues. You can contact the ICO at:

Website: www.ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

19. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

TakeX Ltd.
128 City Road, London EC1V 2NX, United Kingdom
Email: contact@takex.ai

This Privacy Policy is effective from 11 June 2026.