Privacy

This describes what Cedar Grove Labs collects, why, and what you can ask us to do about it. It covers cedargrovelabs.com and the investor portal.

The public site#

We measure traffic with PostHog, configured so the public site keeps nothing on your device: no analytics cookies, and no identifier that survives the tab being closed. A visit is a session, not a person. We see pages viewed, referrer, approximate region and device type. We do not run advertising trackers, and we do not sell or share what we collect.

If you subscribe to the changelog digest, we store the email address you give us and a record of when you confirmed it, so we can send it and prove you asked for it. Every digest has an unsubscribe link, and unsubscribing deletes the subscription.

The investor portal#

The portal is for approved investors, so it necessarily knows who you are.

What you give us. When you request access: your name, email, firm and anything you write in the note. If you invest: the details that transaction requires, which may include legal name, address, phone, entity details and a tax identifier. Wire instructions are encrypted before they are stored.

What we record as you use it. Which companies you follow, which updates you open, which documents and decks you open and how far you read them, and when you sign in. Deck reading is recorded page by page. We do this because knowing what investors actually read is the point of the portal, and because we are accountable for who saw which materials. Signed-in sessions use a cookie and local storage to keep you signed in and to attribute this activity to your account.

Email. We send investor updates and account email through Resend, and record delivery, opens, clicks, bounces and complaints so we know what arrived.

Who else touches it#

We use service providers rather than running everything ourselves. In each case they process data on our instructions:

• Vercel — hosting
• Neon — the database
• WorkOS — sign-in
• Resend — email delivery
• PostHog — analytics
• Cloudflare / Vercel Blob — file and video storage

How long we keep it#

Investor records last as long as the relationship, and afterwards for as long as we are required to keep records of it. Analytics are retained in aggregate. Digest subscriptions last until you unsubscribe.

Your choices#

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or withdraw from the portal, by writing to hello@cedargrovelabs.com. We will act on it unless we are legally required to keep something, and we will tell you if that is the case. You can stop investor email by unfollowing companies in the portal or by using the unsubscribe link.

Changes#

If this changes materially we will say so on this page and, for anything affecting investors, by email.

Questions: hello@cedargrovelabs.com