Your data,
handled honestly.

Who we are

FIKR Space is infrastructure for global entrepreneurship: one operating system spanning seven product pillars (FIKR OS, Hub, Cap, Money, Content, People, and Pitch), a programs ladder from Start to Scale, an AI foundation, and investor-facing surfaces including FIKR Pitch, Fund, the Investors Map, and Pitch Events. We are pre-launch and currently operating a founding-member cohort.

FIKR Space is operated by LG Ventures OÜ, a company founded in 2024 by Luis Gonçalves and operated from Tallinn, Estonia. As data controller, we determine the purposes and means of the processing described in this policy. In this policy, 'we', 'us' and 'our' refer to LG Ventures OÜ; 'you' and 'User' mean any individual who uses the Platform; and 'personal data' means any information relating to an identified or identifiable natural person.

— Data controller: LG Ventures OÜ

— Registered address: [REGISTERED ADDRESS]

— Company registration number: [COMPANY REGISTRATION NUMBER]

— Privacy contact: privacy@fikr.space  ·  Support: support@fikr.space

This policy should be read together with our Cookie Policy and our Terms of Service.

Scope of this policy

This policy applies to personal data we process about Users and visitors in connection with the Platform, including our website at https://fikr.space, user accounts, web forms, the newsletter, scorecards and assessments, uploaded pitch materials, and the products and programs we make available. It applies to Users worldwide.

Because we are based in the European Union and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian law, we apply GDPR-level protections to all Users regardless of where they are located. This policy does not cover the practices of third parties we do not control, including websites that may link to or from the Platform.

Information we collect

We collect the following categories of personal data:

(a) Account and profile information — when you register or join the founding-member cohort, such as your name, email address, password credentials, organisation details, role, and any profile information you provide.

(b) Information you submit via forms — the information you enter into web forms. Where a form involves marketing or optional processing, we capture your GDPR consent at the point of submission and record its time and scope.

(c) Newsletter subscription — your email address and subscription preferences, so we can send the communications you request.

(d) Scorecard and assessment responses — your responses, the resulting scores or outputs, and related metadata.

(e) Pitch decks and materials you upload — files you upload through FIKR Pitch and investor-facing surfaces, which may include personal data about you, your team, or third parties you choose to include.

(f) Usage, device and log data — product usage and analytics events, features accessed, IP address, browser and device type, operating system, and log and diagnostic data.

(g) Cookies and similar technologies — as described in our Cookie Policy.

You are not legally required to provide personal data, but some information is necessary to create an account or use certain features; if you do not provide it, we may be unable to provide those features.

How and why we use your information

We use personal data only for specified purposes and rely on one or more lawful bases under Article 6 of the GDPR for each purpose.

(a) Providing and operating the Services — managing your account, delivering the product pillars and programs, and storing your content. Lawful basis: performance of a contract (Art. 6(1)(b)).

(b) Processing scorecards, assessments and pitch materials — generating and storing outputs and making them available to you and, where you choose, to investor-facing surfaces. Lawful basis: performance of a contract (Art. 6(1)(b)); consent (Art. 6(1)(a)) for optional sharing.

(c) Sending the newsletter and marketing communications — where you have subscribed or opted in. Lawful basis: consent (Art. 6(1)(a)).

(d) Improving and securing the Platform — analytics, debugging, fraud prevention, and maintaining security and integrity. Lawful basis: legitimate interests (Art. 6(1)(f)), balanced against your rights.

(e) Billing and payments — administering free and paid plans and processing payments. Lawful basis: performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) for tax and accounting.

(f) Providing AI features — where you use AI on a bring-your-own-key (BYOK) basis or via metered Managed AI. Lawful basis: performance of a contract (Art. 6(1)(b)).

(g) Communicating with you — responding to support and sending service messages. Lawful basis: performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

(h) Complying with legal obligations — responding to lawful requests, keeping records, and enforcing our terms. Lawful basis: legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)).

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You may object to such processing as described in Section 09.

Consent

Where we rely on your consent — for example, for marketing communications, the newsletter, or optional processing indicated on a web form — we capture that consent at the point of form submission. We record what you consented to, and when, so we can demonstrate the basis for the processing.

Consent is always optional and freely given. You may withdraw it at any time: unsubscribe using the link in each newsletter email, or withdraw any consent by emailing privacy@fikr.space. Withdrawing consent does not affect the lawfulness of processing carried out beforehand, nor processing we carry out on a different lawful basis.

How we share your information

We do not sell your personal data. We share it only as described below.

(a) Service providers (processors) — trusted third parties who run the Platform on our behalf under contracts requiring them to protect personal data and process it only on our instructions. These include EU-hosted infrastructure via Supabase, email delivery providers, analytics providers, a third-party payment processor, and third-party AI providers who process Managed AI requests.

(b) AI providers — when you use Managed AI, the content of your requests is sent to third-party AI providers to generate a response. When you use BYOK, requests are processed under your own API key with the provider you have configured. We do not use your content to train third-party models except as permitted by our agreements and disclosed to you.

(c) Investor-facing surfaces — where you choose to share pitch materials through FIKR Pitch, the Investors Map, Pitch Events, or Fund, we make those materials available in line with your choices.

(d) Legal and safety disclosures — where required to comply with a legal obligation, respond to lawful requests, enforce our terms, or protect the rights and safety of FIKR Space, our Users, or others.

(e) Business transfers — in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.

We do not sell personal data and do not share it with third parties for their own independent marketing purposes.

International data transfers

We host personal data on EU-based infrastructure (Supabase, EU-hosted). Some processors — in particular certain third-party AI providers, email, and analytics providers — may process personal data outside the European Economic Area (EEA).

Where personal data leaves the EEA, we ensure an appropriate safeguard is in place, such as the European Commission's Standard Contractual Clauses (SCCs), or a transfer to a country the European Commission has recognised as providing an adequate level of protection. You may request more information about the safeguards we use by emailing privacy@fikr.space.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes in this policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

(a) Account and profile data — retained while your account is active and for a reasonable period afterwards.

(b) Content you submit (scorecards, assessments, pitch materials, form submissions) — retained while your account is active or until you ask us to delete it, subject to legal retention requirements.

(c) Newsletter data — retained until you unsubscribe or withdraw consent.

(d) Billing records — retained for the periods required by tax and accounting law.

(e) Usage, device and log data — retained for a limited period for security, analytics, and diagnostics.

When personal data is no longer needed, we delete or anonymise it. To request deletion, email privacy@fikr.space and we will action your request in line with Section 09 and applicable law.

Your rights under the GDPR

Subject to the conditions and exceptions in applicable law, you have the following rights in relation to your personal data:

(a) Access — to confirm whether we process your personal data and receive a copy of it.

(b) Rectification — to have inaccurate or incomplete data corrected.

(c) Erasure — to have your data deleted where there is no lawful reason to keep it.

(d) Restriction — to ask us to limit how we process your data in certain circumstances.

(e) Portability — to receive certain data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

(f) Objection — to object to processing based on our legitimate interests, and at any time to processing for direct marketing.

(g) Withdraw consent — at any time where we rely on it, without affecting processing carried out beforehand.

(h) Complain — to lodge a complaint with a supervisory authority, in particular the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or the authority in your country of residence or work.

To exercise any of these rights, email privacy@fikr.space. We do not currently offer self-service export or self-service erasure tools; our team will handle your request manually. We may need to verify your identity before acting, and we will respond within the timeframes required by law, normally within one month. Exercising your rights is free, though we may charge a reasonable fee or decline a request that is manifestly unfounded or excessive, as permitted by law.

Automated decision-making and AI

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Our AI features — whether used via BYOK or Managed AI — are designed to assist you, for example by generating drafts, analysis, or suggestions.

They support your work; they do not make binding decisions about you, and a human remains responsible for any decisions that matter. If this ever changes, we will update this policy and provide the information and safeguards required by the GDPR.

Children

The Services are not directed to children. You must be at least 16 years old (or 18 where applicable local law requires) to use the Platform. We do not knowingly collect personal data from children below the applicable age.

If you believe a child has provided us with personal data, please contact privacy@fikr.space and we will take appropriate steps to delete it.

Security

We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or alteration. These include EU-hosted infrastructure, access controls, encryption in transit, and processor agreements with our service providers.

No method of transmission or storage is completely secure, so while we work to protect your personal data we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact support@fikr.space.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or the Services. When we make material changes, we will update the 'Last updated' date above and, where appropriate, notify you through the Platform or by email.

We encourage you to review this policy periodically.

Contact

If you have any questions, concerns, or requests regarding this policy or your personal data, please contact us:

— Data controller: LG Ventures OÜ, [REGISTERED ADDRESS]

— Company registration number: [COMPANY REGISTRATION NUMBER]

— Privacy team: privacy@fikr.space  ·  General support: support@fikr.space

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the data protection authority in your country of residence or work. This document is a draft prepared for legal review and does not constitute certified legal advice.