Privacy Policy

Effective Date: 24 February 2026

Moonshotnx (“Moonshot”, “we”, “us”, “our”) takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, disclose and protect information when you access or use our website, platform, application, investor systems, and related services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Your use of the Services is also governed by our Terms of Service. Capitalised terms not defined here have the meaning given in the Terms of Service.

If you require this Privacy Policy in an alternative format, please contact: privacy@moonshotcapital.com

What This Privacy Policy Covers

This Privacy Policy applies to personal data we collect when you:

• Create an account
• Apply for platform access
• Submit company information
• Use Pro services
• Participate in Investment Committee review
• Engage in investor activation
• Communicate with Moonshot

“Personal Data” means information that identifies, relates to, or can reasonably be linked to an identifiable individual.

This Privacy Policy does not apply to third parties we do not own or control.

Categories of Personal Data We Collect

Over the past 12 months, Moonshot may have collected the following categories of personal data:

1. Profile and Contact Information

Examples:
• Full name
• Email address
• Telephone number
• Physical address
• Role within company
• Login credentials

Shared with:
• Hosting providers
• Customer support vendors
• Identity verification providers

2. Founder and Company Submission Data

Examples:
• Company name and incorporation details
• Cap table and ownership information
• Financial models and projections
• Valuation assumptions
• Governance documentation
• Investor materials
• Uploaded documents

Shared with:
• Internal Investment Committee
• Designated service providers under confidentiality
• Legal and SPV formation partners where authorised

3. Payment Information

Examples:
• Billing name and address
• Last four digits of payment card
• Subscription payment history

Payment processing is handled by authorised third-party payment providers. Moonshot does not store full card details.

Shared with:
• Payment processors

4. Device and Usage Information

Examples:
• IP address
• Browser type
• Device type
• Operating system
• Log-in timestamps
• Platform activity logs

Shared with:
• Hosting providers
• Security and analytics vendors

5. Communications Data

Examples:
• Emails sent to Moonshot
• Messages within the platform
• Investor communications where Moonshot is involved
• Feedback submissions

Shared with:
• Internal teams
• Service providers assisting with communication infrastructure

Sources of Personal Data

We collect personal data from:

• You directly, when you register or submit information
• Your company, if you are listed as a director, founder or representative
• Automated technologies (cookies and analytics)
• Service providers assisting in platform operation

We do not purchase personal data from data brokers.

Purpose of Processing Personal Data

Moonshot collects and processes personal data for the following purposes:

1. Providing and Operating the Platform

• Account creation and management
• Capital readiness assessment
• Investment Committee review
• Ratings coordination
• Investor matching
• SPV structuring coordination
• Subscription billing

2. Capital Infrastructure and Underwriting

• Evaluating funding eligibility
• Conducting structural diagnostics
• Performing governance review
• Facilitating investor access
• Coordinating legal formation of SPVs

3. Communication

• Responding to enquiries
• Sending service updates
• Notifying users of structural changes
• Providing educational material

4. Legal and Compliance

• Compliance with regulatory requirements
• Fraud prevention
• Enforcement of contractual terms
• Risk monitoring

Moonshot does not sell personal data.

How We Share Personal Data

Moonshot may share personal data with:

Service Providers

Including:
• Cloud hosting providers
• Payment processors
• Security providers
• Analytics providers
• Legal and SPV formation partners

All service providers operate under contractual confidentiality obligations.

Investment Committee and Investor Access

Where a company progresses to investor activation:

• Relevant company data may be shared with authorised investors
• Disclosure occurs only after internal acceptance
• Sharing is mandate-matched and controlled

Legal Obligations

We may disclose personal data if required by law, court order, or regulatory authority.

Business Transfers

If Moonshot undergoes a merger, acquisition, restructuring, or asset sale, personal data may be transferred as part of that transaction.

Aggregated and De-Identified Data

Moonshot may generate anonymised or aggregated data for research, benchmarking, product improvement, or market insights.

Such data does not identify individuals.

Cookies and Tracking Technologies

Moonshot uses cookies and similar technologies to:

• Authenticate users
• Maintain session security
• Improve platform performance
• Analyse usage patterns

Types of cookies used:

• Essential cookies
• Functional cookies
• Performance and analytics cookies

Users may adjust cookie settings via their browser. Disabling certain cookies may impact platform functionality.

Data Security

Moonshot employs appropriate technical, organisational and administrative safeguards including:

• Encrypted transmission
• Access controls
• Secure hosting environments
• Role-based data access
• Multi-factor authentication where applicable

No system can guarantee absolute security. Users are responsible for safeguarding login credentials.

Data Retention

We retain personal data:

• For the duration of your active account
• As required to provide services
• As required by law
• As necessary to enforce agreements

We may retain anonymised data indefinitely.

Children’s Data

Moonshot does not knowingly collect personal data from individuals under the age of 18.

If we become aware of such collection, we will delete the data promptly.

International Users

Moonshot operates globally. Personal data may be transferred to and processed in jurisdictions outside your country of residence.

Where required, we rely on:

• Standard Contractual Clauses
• Data Processing Agreements
• Appropriate safeguards under applicable law

European and UK Data Subject Rights

If you are located in the European Union, United Kingdom, or similar jurisdictions, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

To exercise these rights, contact: privacy@moonshotcapital.com

Changes to This Policy

We may update this Privacy Policy periodically.

If changes are material, we will notify users via:

• Platform notification
• Email
• Website notice

Continued use of the Services after updates constitutes acceptance of the revised policy.

Contact Information

If you have questions regarding this Privacy Policy or our data practices:

Email: onboarding@moonshotcapital.com
Address: 169 Madison Avenue, New York, NY-10016