Privacy

Controller

Peers Management GmbH, Alte Steinhauserstrasse 19, 6330 Cham, Switzerland, is the controller for personal data processed on the Peers sites (peers.capital, peers.studio and peers.earth), Peers booking pages, the Peers iPhone app and their related services (member portal, deals, events, Peers Moments, and the team’s own tools such as Peers Mail and Peers Schedule). Contact: privacy@peers.management.

What we process and why

• Applications (name, email, LinkedIn, cities, investor profile, uploaded photo): to review your application and, if approved, run your member account. Legal basis: pre-contract steps and legitimate interest.
• LinkedIn enrichment: on submission we scrape publicly available LinkedIn profile data via Apify to build a review brief. You can request deletion of the enrichment at any time.
• Member portal: authentication session, preferences, activity, deal reactions, portfolio positions you enter yourself.
• Deals: for members only. If you opt in, your name and photo appear as an investor on deal pages; otherwise you appear as an anonymous Peers investor.
• Events: RSVP details, dietary needs, photo uploads. If you opt in to face recognition, we index your face vector via AWS Rekognition so you can find yourself in event galleries.
• Marketing / social use of your likeness: only if you have granted separate consent in the consent center.
• Peers Moments: honoree name/photo/birthday, contributor name/email/LinkedIn/video, creator account.
• Booking a call (Peers Schedule): your name, email, time zone, the time you pick and any note, to set up the call, put it in the host’s Google Calendar with a Google Meet link and send you the invitation. You can cancel from the link in your confirmation.
• Peers OS chat (portal, iPhone app and messages): your messages and its replies are kept with your account so the conversation can continue. Anthropic processes them to write the replies.
• AI features: we may generate summaries, briefs and consciousness facts from the content you and other members submit, using the Lovable AI Gateway (Google Gemini and OpenAI models) and Anthropic (Claude). Google account data is handled only as described under Google account data.
• Technical data: IP, browser and device info, and cookies strictly needed for the session.

Legal bases (GDPR Art. 6 & Art. 9 where applicable): performance of a service you asked for, your consent (uploads, face recognition, marketing use), and legitimate interest in running the product safely.

The Peers iPhone app

The app uses the same account and the same data as the member portal. In addition:

• Notifications: if you allow them, we keep your device's push token with your account so Apple can deliver our notifications. Signing out or deleting your account removes it.
• Camera and microphone: used only while you scan tickets at the door (Peers team) or record a birthday video for Peers Moments.
• Photos: we only see the photos you pick (for your profile or a Moment). Saving an event photo asks to add to your library and can't read it.
• Calendar: the app adds an event when you ask and can't read your calendar.
• Delete account and Erase everything work in the app as on the website; see Deleting your account or erasing your data below.

The app shows no advertising and doesn't track you across other apps or websites.

Google account data

Members of the Peers team can connect their Google accounts to the Peers website and app. Peers then asks Google for:

• Gmail: to show their email in Peers Mail, to archive, star, mark read, report spam or move to the bin when they ask, and to keep drafts and send the emails they send. Nothing is ever deleted for good and nothing is sent without them pressing Send.
• Contacts: the names and profile photos of people they email, to show who wrote.
• Calendar: which calendars they have and when they’re busy, to offer free times on their booking page and in replies that suggest a meeting; when an email carries an invitation, that event and their other events at the same time, to show conflicts and record their answer (Yes, Maybe or No); and to add a booked call to their calendar with a Google Meet link and the invitations. Event contents aren’t stored.

How we handle it:

• Emails are read from Gmail when they’re opened and aren’t copied into our database. We keep the connection (an encrypted token), the member’s Mail settings and their “How I write” profile, and for an email they assign to a teammate its Gmail thread ID and subject. For emails with people already in our CRM, the subject, a short preview (up to 500 characters), the date and who took part are saved to that person’s record, so the team knows when they were last in touch.
• AI drafts: when a member asks for a draft reply (or turns on automatic drafts for important email), the conversation, a few of their own sent emails, what Peers knows about the sender and, when the email asks to meet, their free times are sent to Anthropic (Claude API) to write it. Anthropic and our other AI provider receive Google user data only to produce the result the member asked for, under terms that don’t allow them to train models on it. The draft is saved in their Gmail for them to edit and send.
• Learning from email (off unless a member turns it on): when a contact already in our records writes to that member, the contact’s own words in that message (without quotes, signatures or forwarded parts) are sent to our AI provider (Lovable AI Gateway, a Google Gemini model) to pick out facts the contact states about themselves, such as a new role or city. Clear facts are saved to the contact’s record with the message’s ID and at most one sentence of the email; health details, deal terms and anything confidential are never kept. The member can stop it for any conversation.
• AI never sends an email, answers an invitation or changes a member’s mailbox on its own: the member confirms each action.
• Notifications: if a member allows them, the sender and subject of a new important email go to their iPhone through Apple’s push service.
• Google user data is never sold, never used for advertising and never used to develop, improve or train generalised AI or machine-learning models. People at Peers don’t read it unless the member asks us to (with the member’s consent, for example by assigning an email to a teammate), it’s needed for security, or the law requires it.
• Peers’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
• A member can disconnect an account at any time in Peers or at myaccount.google.com/connections.
• When a member disconnects a Google account in Peers, we revoke our access and delete its token and what we saved from that account (the subjects, previews and dates on contact records, assignments and draft records). Facts a contact stated about themselves stay on their record, each with its source, and can be removed one by one. While an account is connected, we keep those previews for up to 13 months after the latest message. A member can also ask privacy@peers.management to delete them at any time.

Deleting your account or erasing your data

Both are on your preferences page and in the iPhone app's account sheet. You can also email privacy@peers.management and we do it for you.

• Delete account removes your sign-in: your sessions end, and the phones you get notifications on and your “tell me about the next round” requests go with it. Your Peers profile and history stay with the team (your application, investments, events, Moments, the portfolio you kept and your chat). If you sign in again with the same email, your profile comes back.
• Erase everything removes your profile (photo, bio, phone, address, birthday, socials and application answers), what we gathered about you from LinkedIn, the web and the press, your face match for event photos, the team's notes and comments about you, your notes, likes and reactions, the Moments videos and messages you made and your own birthday Moments page, your chat with Peers, the decks you viewed, your next-round alerts, your consent choices and their history, your invitations to events that haven't happened yet, the records of emails we sent you, your devices and notifications, any Google connection, your contact in our internal CRM (Notion), and then your sign-in. Before anything happens you see the full list for your account, and you confirm twice. It can't be undone.
• What Erase everything keeps: your investments (tickets, holdings, closing records, the documents tied to an investment and documents you signed with Peers Sign), your attendance at past events (guest-list entries and check-ins) and, if you're a referrer, who you referred. Your name and email stay only on those records; everything else that pointed to you points to nothing, or to a note that a profile was erased on that day. We keep these for legal and accounting reasons (the company and tax records of who invested what, and when) and for the history of our events.

Your consent center

Members can turn each of the following on or off at any time from /portal/preferences:

• Show me as an investor on public deal pages
• Allow face recognition on event photos
• Show event photos I appear in publicly
• Use my name / photo / quotes in marketing materials
• Use my name / photo / clips on Peers social channels
• Use my story in press or case studies
• Surface me as a possible intro to other peers
• Let me be included in Peers Moments birthday pages

Marketing, social, and press uses are off by default. Turning any consent off is effective going forward and, where technically possible, we remove past uses (face vectors deleted, tags hidden, deal page name anonymised within 24h).

Subprocessors

• Supabase — hosting, database, auth, storage
• Resend — transactional email
• OpenAI / Lovable AI Gateway — AI features (transcription, summarisation)
• Anthropic — Peers OS chat replies and Peers Mail drafts
• Google — Gmail, Contacts and Calendar for team members who connect their accounts; Google Meet links for booked calls
• Apple — notifications on the Peers iPhone app
• Apify — LinkedIn enrichment
• AWS Rekognition — face recognition on event photos (only if you consent)
• Notion — internal CRM sync
• Cloudflare / Vercel — CDN and edge delivery

Some subprocessors are outside the EU/EEA. Transfers rely on the EU Standard Contractual Clauses.

Retention

Account, deal, and Moments data are kept until you (or the creator, for Moments) delete them. Application data of declined applicants is kept for up to 12 months and then anonymised. Consent audit records are kept for as long as your profile exists so we can prove your choices under GDPR. Deleting your account keeps your profile; Erase everything removes it, except the investment and event attendance records described above.

Your rights

Under the GDPR (and UK GDPR / CCPA where applicable) you can request access, correction, deletion, restriction, portability, and object to processing. Email privacy@peers.management. You may also complain to your local supervisory authority.

Peers Moments

If you upload a video, image or note through Peers Moments you confirm that the content is yours to share, everyone identifiable in it consented to appear, and you're okay with us storing it and showing it to the honoree and the people they invite. You can revoke this at any time by emailing us — we'll delete your upload. Moment pages, uploads and account data are kept indefinitely until you delete them. The creator can delete their Moment from /moments/manage/…

Children

Peers is not intended for people under 16. Please don't submit information about minors without a parent or guardian's consent.

Changes

If we change this notice we'll update the date above and, for material changes, email active members.