Privacy Policy

TakeX Ltd.
Last Updated: 23 December 2025


1. Introduction

TakeX Ltd. ("TakeX," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform at takex.ai, the Ambrose AI assessment system, and related services (collectively, the "Platform").

TakeX Ltd. is a company incorporated in Hong Kong with its registered address at 1104, 11/F, Kai Tak Commercial Building, 317-319 Des Voeux Road Central, Hong Kong. Ambrose AI is a proprietary technology owned and operated by TakeX Ltd.

By using the Platform, you consent to the collection and use of your personal data as described in this Privacy Policy.


2. Data Controller

TakeX Ltd. is the data controller responsible for your personal data. For any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: contact@takex.ai

Address:
TakeX Ltd.
1104, 11/F, Kai Tak Commercial Building
317-319 Des Voeux Road Central
Hong Kong


3. Personal Data We Collect

3.1 Information You Provide

Account Registration:

  • Full name
  • Email address
  • Password (encrypted)
  • Account type (Founder or Investor & Evaluator)

Founder Profile Information:

  • Startup name and description
  • Industry/sector
  • Stage of development
  • Location/market
  • Team information
  • Funding history and targets
  • Pitch deck (PDF or presentation file)
  • Any other information included in your onboarding questionnaire

Investor & Evaluator Profile Information:

  • Name and contact details
  • Organization/firm name
  • Investment thesis (sectors, stages, geographies of interest)
  • Typical check size
  • Any other information included in your onboarding questionnaire

Payment Information:

  • Payment card details (processed and stored by our payment processors, not stored by TakeX directly)
  • Billing address
  • Transaction history

Communications:

  • Emails and messages you send to us
  • Feedback and survey responses
  • Support requests

3.2 Information Collected Automatically

Usage Data:

  • Pages visited and features used
  • Time spent on the Platform
  • Click patterns and navigation paths
  • Device type and browser information
  • IP address
  • Referring website

Cookies and Similar Technologies:

  • Session cookies (essential for Platform function)
  • Analytics cookies (to understand usage patterns)
  • Preference cookies (to remember your settings)

See Section 9 for more details on cookies.

3.3 Information from Third Parties

We may receive information from:

  • Payment processors (transaction confirmations)
  • Analytics providers (aggregated usage data)
  • Public sources (for verification purposes, where applicable)

4. How We Use Your Personal Data

We use your personal data for the following purposes:

4.1 Providing Platform Services

  • Creating and managing your account
  • Processing pitch deck assessments through Ambrose AI
  • Generating assessment reports and certificates
  • Facilitating introductions between founders and investors
  • Processing payments and refunds

4.2 Platform Improvement

  • Analyzing usage patterns to improve features
  • Training and improving the Ambrose AI assessment system
  • Developing new products and services
  • Conducting research and analytics

4.3 Communications

  • Sending service-related notifications
  • Responding to your inquiries and support requests
  • Sending marketing communications (with your consent)
  • Notifying you of changes to our services or policies

4.4 Safety and Security

  • Detecting and preventing fraud
  • Enforcing our Terms of Use
  • Protecting the security of the Platform
  • Complying with legal obligations

4.5 Legal Compliance

  • Complying with applicable laws and regulations
  • Responding to legal requests and court orders
  • Establishing, exercising, or defending legal claims

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing necessary to provide you with Platform services
  • Legitimate Interests: Processing for our legitimate business interests, such as improving the Platform and ensuring security
  • Consent: Processing based on your explicit consent, such as for marketing communications
  • Legal Obligation: Processing necessary to comply with applicable laws

6. How We Share Your Personal Data

6.1 Content Sharing on the Platform

For Founders:

When you submit your pitch deck for assessment and receive a Certificate of Readiness, your materials will be shared with investors and evaluators on the Platform as follows:

  • Pitch Decks: Your pitch deck will be visible to investors and evaluators browsing the Platform alongside your Certificate of Readiness result. This enables investors to immediately evaluate your opportunity.
  • Assessment Results: Investors may view your startup's basic information, pitch deck, and assessment result (Certificate of Readiness status and summary scores).
  • Full Assessment Reports: Your detailed Ambrose assessment report remains private and is not shared with investors unless you explicitly consent.
  • Curated Introductions: When you and an investor mutually agree to connect, we will facilitate the introduction and may share additional materials as appropriate.

By submitting your pitch deck for assessment, you acknowledge and consent to this sharing of your materials with qualified investors and evaluators on the Platform.

6.2 Affiliates and Related Entities

We may share your personal data and content with our affiliates, subsidiaries, and related entities for business purposes including:

  • Platform operations
  • Assessment services
  • Service improvements
  • Business development

6.3 Service Providers

We share personal data with third-party service providers who assist us in operating the Platform:

Provider TypePurposeData Shared
Cloud HostingData storage and processingAll Platform data
Payment ProcessorsPayment processingPayment and billing information
Email Service ProvidersTransactional and marketing emailsName and email address
Analytics ProvidersUsage analyticsAnonymized usage data

All service providers are contractually bound to protect your data and use it only for specified purposes.

6.4 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your data.

6.6 What We Do NOT Share

  • We do NOT sell your personal data to third parties
  • We do NOT share your full Ambrose assessment report with investors (only summary and pass/fail status), unless you explicitly consent
  • We do NOT share founder pitch decks with investors until the founder has received a Certificate of Readiness

7. Data Retention

7.1 Active Accounts

We retain your personal data for as long as your account remains active and as needed to provide you with Platform services.

7.2 Account Deletion

Upon account deletion request:

  • Your profile and account data will be removed from active systems within 30 days
  • Your pitch deck and assessment data will be removed from active systems within 30 days
  • We may retain certain data in backup systems for up to 12 months for security and legal compliance purposes

7.3 Extended Retention

We may retain certain data for longer periods where necessary to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements
  • Maintain security records

7.4 Anonymized Data

We may retain anonymized, aggregated data indefinitely for research and analytics purposes. This data cannot be used to identify you.


8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access limited to authorized personnel
  • Infrastructure Security: Hosted on secure servers with enterprise-grade security
  • Regular Audits: Periodic security reviews and assessments
  • Incident Response: Procedures for detecting and responding to data breaches

While we strive to protect your data, no method of transmission or storage is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.


9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

Cookie TypePurposeDuration
EssentialRequired for Platform functionality (authentication, security)Session
AnalyticsUnderstanding how users interact with the PlatformUp to 2 years
PreferencesRemembering your settings and choicesUp to 1 year

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

9.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals.


10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

10.1 Access

You have the right to request a copy of the personal data we hold about you.

10.2 Correction

You have the right to request correction of inaccurate or incomplete personal data.

10.3 Deletion

You have the right to request deletion of your personal data, subject to certain exceptions (e.g., legal retention requirements).

10.4 Data Portability

You have the right to request a copy of your data in a structured, machine-readable format.

10.5 Objection

You have the right to object to certain processing of your personal data, including processing for direct marketing.

10.6 Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

10.7 Exercising Your Rights

To exercise any of these rights, please contact us at contact@takex.ai. We will respond to your request within 40 days, as required by the Hong Kong Personal Data (Privacy) Ordinance (PDPO).


11. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. Our data is stored on secure cloud servers which may be located in various jurisdictions.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.


12. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe we have collected data from a child under 18, please contact us immediately.


13. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.


14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

  • Posting the updated policy on the Platform
  • Sending you an email notification
  • Displaying a prominent notice on the Platform

Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.


15. Hong Kong Privacy Ordinance

This Privacy Policy is designed to comply with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). In accordance with the PDPO:

  • We collect personal data only for lawful purposes directly related to our functions
  • We take reasonable steps to ensure data accuracy
  • We retain data no longer than necessary for the purpose of collection
  • We implement appropriate security measures
  • We are transparent about our data practices

16. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

TakeX Ltd.
1104, 11/F, Kai Tak Commercial Building
317-319 Des Voeux Road Central
Hong Kong

Email: contact@takex.ai

We will investigate and attempt to resolve any complaints regarding our use of personal data in accordance with this Privacy Policy.


This Privacy Policy is effective as of 23 December 2025.