Privacy Policy
Last updated: July 2026
SmallPond VentureCo. ("SmallPond," "we," "us," or "our") operates smallpondventureco.com and the SmallPond client portal. This Privacy Policy explains what information we collect, how we use it, and what choices you have.
We take your privacy seriously. We collect only what we need, use it only as described here, and never sell it.
1. Information We Collect
From the SmallPond Snapshot (free intake survey on /start):
- Your answers to the survey questions (business type, challenges, goals)
- Your email address (provided voluntarily at the end of the survey)
- Whether you opted in to receive SmallPond insights and updates
From the contact form (/connect):
- Your name, email address, and message
- How you found SmallPond (optional)
- Your role or business type (optional)
From the client portal (/portal):
- Your name and email address (via Google OAuth or email login)
- Business information provided in the intake questionnaire
- Documents you upload (financial statements, business materials)
- NDA signing records (timestamp, signature)
- Engagement status and deliverables
Automatically collected:
- Basic usage data (pages visited, time on site) via analytics
- IP address and browser type (standard server logs, retained for 30 days)
2. How We Use Your Information
To deliver the Snapshot proposal: Your survey answers are used solely to generate a personalized starting-point proposal via the Anthropic Claude API. Your answers are sent to the Anthropic API for this purpose and are subject to Anthropic's privacy policy (anthropic.com/privacy). We do not store your survey answers beyond what is needed to generate and deliver your proposal.
To respond to your inquiry: Contact form submissions are used to respond to your message. We do not add you to any list without your explicit consent.
To deliver advisory engagements: Documents and information shared through the client portal are used exclusively to prepare and deliver your SmallPond Diagnostic or advisory engagement. They are not shared with third parties.
To send insights and updates (if you opted in): If you checked the opt-in box on the Snapshot, we may send you occasional emails with insights relevant to small business owners, acquirers, and founders. You can unsubscribe at any time.
We do not:
- Sell your information to anyone, ever
- Share your information with advertisers
- Use your information for any purpose not described here
3. How We Store and Protect Your Information
Email addresses and opt-in preferences are stored in our email platform and used only to send the proposal and, if opted in, occasional updates.
Survey answers are processed in real time to generate your proposal and are not stored after delivery.
Portal data is stored in Supabase, a secure cloud database, with access restricted to SmallPond and the authenticated client. Documents are stored in encrypted cloud storage and deleted upon request.
Payment information is never collected or stored by SmallPond. All payments are processed through third-party platforms subject to their own privacy policies.
4. Your Choices and Rights
Access: You may request a copy of the information we hold about you at any time.
Deletion: You may request deletion of your information at any time. We will delete or anonymize your data within 30 days, except where required by law or legitimate business necessity.
Opt-out: If you opted in to email updates, you may unsubscribe at any time via the unsubscribe link in any email or by contacting us directly.
Data portability: You may request your portal data in a portable format.
Contact: privacy@smallpondventureco.com
5. Cookies and Analytics
We use minimal analytics to understand how the site is used. We do not use advertising cookies or sell browsing data. You may decline non-essential cookies without affecting site functionality.
6. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Anthropic Claude API | Generate your Snapshot proposal | anthropic.com/legal/privacy |
| Supabase | Client portal database and file storage | supabase.com/privacy |
| Google OAuth | Portal login authentication | policies.google.com/privacy |
| Resend | Email delivery | resend.com/legal/privacy-policy |
| Documenso | NDA e-signing (current) | documenso.com/privacy |
| DocuSign | NDA e-signing (alternative) | docusign.com/privacy |
| HelloSign / Dropbox Sign | NDA e-signing (alternative) | sign.dropbox.com/about/privacy |
| Calendly | Call scheduling on /connect | calendly.com/legal/privacy-notice |
7. Children's Privacy
SmallPond services are intended for business owners and professionals. We do not knowingly collect information from anyone under 18.
8. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will note the updated date at the top of this page.
9. Contact
SmallPond VentureCo.
Atlanta, Georgia
privacy@smallpondventureco.com
smallpondventureco.com
This Privacy Policy is governed by the laws of the State of Georgia.