Legal
Privacy Policy
Last updated: March 17, 2026
At Amunt ("we", "our" or "the Platform"), we treat the privacy and security of personal and corporate data with the highest level of seriousness. This Privacy Policy explains how we collect, use, protect, and share your information when you use our website and our equity management platform.
This policy fully complies with Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD).
1. Data Controller
The controller responsible for processing your personal data is:
- Legal name:
- Amunt Software S.L.
- Tax ID:
- B-24773137
- Registered address:
- Calle Diputacio, 276, P. 1 Pta. 1. 08009, Barcelona, España
- Contact email:
- info@amunt.app
2. What data do we collect?
To provide you with a precise tool for managing your cap table and legal processes, we need to collect the following categories of data:
- Waitlist and Marketing Data: Email address and company name provided through the pre-registration form.
- Account and Profile Data: Full name, email address, password (encrypted), role, and user type (Founder, Investor, Advisor).
- Corporate and Financial Data: Cap table structure, company valuations, holdings, stock option instruments (Phantom Shares), investment agreements, and legal documents (SHAs, NDAs). In these cases, Amunt will often act as a data processor for third-party data that you upload to the platform.
- Technical Data: IP address, browser type, device data, and activity logs to ensure security and generate the audit trail.
3. Purpose of Processing
- Service Delivery: Operating the software, calculating dilution, running the exit simulator, and automatically generating legal documents.
- Security and Audit: Maintaining immutable audit trails for due diligence workflows and preventing fraud or unauthorized access.
- Transactional Communications: Sending critical notifications such as sign-ins, pending signatures, and password resets through secure providers.
- Product Improvement: Analyzing anonymized usage data to improve platform performance and design.
- Marketing Communications: Sending beta updates or new feature announcements only if you have provided explicit consent, for example, by joining the waitlist.
4. Legal Basis
- Performance of a contract: To provide Amunt services to you under our Terms and Conditions.
- Explicit consent: For waitlist subscriptions and newsletter communications.
- Legitimate interest: To ensure network security, prevent fraud, and improve the software architecture.
- Legal obligation: To comply with tax regulations and requests from competent authorities.
5. Data Sharing and Subprocessors
We never sell your data to third parties. We only share information with first-tier strategic infrastructure providers that are strictly necessary to operate Amunt. We require all of them to comply with GDPR:
- Storage and Hosting: Vercel + Cloudflare (servers located within the European Union).
- Transactional Email and Authentication: Resend (for critical access emails and system alerts).
- Marketing and Waitlist: Loops.so (for marketing communications and waitlist management).
If any of these providers transfers data outside the European Economic Area (EEA), we ensure that Standard Contractual Clauses (SCCs) approved by the European Commission are in place.
6. Security and Data Retention
We apply bank-grade security measures. All sensitive information is transmitted and stored using end-to-end encryption.
We will retain your personal and corporate data while your account remains active. If you choose to close your account, we will delete or anonymize your data, except where we are legally required to retain it, such as electronic signature records or invoicing data, for the applicable statutory limitation period.
7. Your Rights
Under GDPR, you have the right to exercise full control over your data. You may request:
- Access: To know what data we hold about you.
- Rectification: To correct inaccurate or incomplete data.
- Erasure (Right to be forgotten): To delete your data when it is no longer necessary.
- Restriction and Objection: To restrict certain data processing activities, for example, unsubscribing from email communications.
- Portability: To receive your data in a structured, machine-readable format (CSV/Excel).
To exercise these rights, simply email info@amunt.app and specify the right you wish to exercise. You also have the right to lodge a complaint with the Catalan Data Protection Authority (APDCAT) or the Spanish Data Protection Agency (AEPD) if you believe we have not handled your data correctly.
8. Changes to this Policy
We reserve the right to update this Privacy Policy to reflect changes in the platform architecture or new legal obligations. We will notify you of any material changes through the email address associated with your account.
Your Digital Copilot: From Pre-Seed to Exit
Join the waitlist and be among the first to experience the future of equity management.