Privacy Notice

Who we are

Setcoin Group Inc., a Delaware corporation operating from Zürich, Switzerland (“Setcoin”, “we”), runs setcoin.group and Setcoin Infrastructure OS: the Atlas, the Bankability Index, Setcoin Verify, the role workspaces for developers, lenders and capital partners, vendors and fund investors, and the pages of the funds Setcoin manages or advises. For the personal data described here, Setcoin is the controller. Contact: privacy@setcoin.group.

This notice is written to meet the EU and UK General Data Protection Regulation, the Swiss Federal Act on Data Protection and, for California residents, the CCPA/CPRA.

What we collect

We do not ask for, and ask you not to send, special-category data (health, political opinions, and similar).

Why we use it, and on what basis

• To provide your account and workspace — performance of our contract with you.
• To answer an enquiry, run a Verify check or review a project you submit — steps you asked us to take before entering a contract, and our contract with you.
• To register and follow up interest in a fund, including checking whether you are a qualified or professional investor — our legitimate interest in managing fund investor relations, and legal obligations that apply to fund marketing where relevant.
• To keep the service secure, prevent fraud and keep an audit trail of who opened confidential client files — legitimate interest and legal obligation.
• To send you product news — only with your consent, which you can withdraw at any time.

Public-record and professional data

The Atlas and Setcoin Verify are built from public registers: interconnection queues, permits, procurement notices, company registers, sanctions lists and regulatory filings. Their subject is projects and companies. Setcoin Verify checks companies, funds and investment vehicles, never private individuals.

For origination, we may hold the business contact details of people in professional decision-making roles (for example, a project director or head of procurement), taken from public professional sources. We do this under a documented legitimate-interests assessment. These details are kept outside our public systems, never published, used only to contact the person about their professional role, and deleted 12 months after collection unless a conversation is active. If we contact you, we tell you where your details came from. You can object at any time, and we will delete them and add you to a suppression list so you are not re-added.

Client files and confidentiality

Due-diligence reports, datarooms and verification results prepared for a client are visible only to the named accounts of that client and to authorised Setcoin staff. They are never published. Every view of a confidential file is logged.

Who we share it with

We do not sell personal data. We share it only with service providers who process it for us under contract — hosting and database (Supabase, Vercel), transactional email (Resend), website analytics with your consent (Google Analytics) — with professional advisers under confidentiality, with a fund’s administrator or manager where you asked to invest in that fund, and where the law requires it.

International transfers

Our providers may process data in the United States or elsewhere outside your country. Where the destination is not covered by an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (with the UK and Swiss addenda) or an equivalent safeguard.

How long we keep it

• Account data — while your account is open, and up to 24 months after it closes.
• Enquiries and investor interest — up to 36 months after the last contact.
• Client engagement records and their audit trail — as long as our contract and legal record-keeping duties require, typically 7 years.
• Professional contact data — 12 months from collection, unless a conversation is active.
• Security logs — up to 12 months.

Your rights

Depending on where you live, you can ask to access, correct, delete or port your data, restrict or object to our use of it, and withdraw consent. Californian residents can also ask what categories we collect and disclose; we do not sell or share personal information for cross-context advertising. Write to privacy@setcoin.group. We reply within one month. You can also complain to your data-protection authority, for example the Swiss FDPIC, the Luxembourg CNPD or the UK ICO.

Cookies

We use cookies that are needed for the site to work: a session cookie that keeps you signed in, and a short-lived cookie that secures email sign-in links. With your consent, we also use Google Analytics 4 to understand which pages are useful: it sets analytics cookies only after you choose “Accept analytics” in the banner, IP addresses are anonymised, and advertising features are switched off. If you decline, no analytics cookies are set and Google receives only cookieless, aggregate signals. You can change your choice at any time by clearing this site’s data in your browser. We do not use advertising cookies.

Security

Data is encrypted in transit, access to client files is restricted per account and logged, and database access is limited by row-level security policies. No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.

Changes and contact

We will post any change here with a new effective date, and email account holders about material changes. Questions: privacy@setcoin.group.