Dērysk Privacy Policy

1. Introduction

Dērysk, LLC, an Iowa limited liability company ("Dērysk," "we," "us," or "our"), provides a platform that helps founders, entrepreneurs, mentors, educational institutions, programs, and other organizations evaluate ideas, gather evidence, manage programs, and reduce uncertainty in the development of ventures and other initiatives.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use Dērysk websites, applications, and services (collectively, the "Services").

Some organizations, including universities and entrepreneurship programs, use Dērysk to administer their own programs. When you participate in one of these programs, information you submit through Dērysk may also be available to authorized personnel associated with that organization or program.

Dērysk is a technology provider and is separate from the universities, programs, and other organizations that use the Services.

2. Information We Collect

Information you provide

Depending on how you use Dērysk, you may provide information such as:

• name;
• email address;
• account credentials and authentication information;
• profile information;
• educational institution, college or school, major, minor, graduation year, and other academic or program-related information;
• demographic information you choose or are asked to provide, such as gender;
• program applications and application responses;
• venture or organization names and descriptions;
• customer, market, product, service, pricing, and business-model information;
• revenue, customer-count, cost, financial, traction, and other business-performance information;
• research, evidence, assumptions, experiments, observations, conversations, decisions, and related venture-development information;
• mentor, advisor, or program interactions;
• feedback, support requests, and other communications; and
• other information you choose to submit through the Services.

Not every user will be asked to provide every type of information.

Information about ventures and organizations

Dērysk allows users to create and manage information relating to ventures, projects, businesses, and other initiatives.

This information may include business plans, ideas, research, customer information, financial estimates, strategies, evidence, assumptions, and other information that may be confidential or commercially sensitive.

You should only submit information that you are authorized to provide.

Information collected automatically

When you use the Services, we and our service providers may automatically collect technical information such as:

• IP address;
• browser and device information;
• operating system;
• pages and features accessed;
• dates and times of access;
• referring pages;
• authentication and session information;
• error and diagnostic information; and
• other information necessary to operate, secure, and improve the Services.

We may use cookies, local storage, and similar technologies to support authentication, security, preferences, and application functionality.

3. How We Use Information

We may use information to:

• provide and operate Dērysk;
• create and maintain accounts;
• authenticate users and protect accounts;
• provide venture-development and program-management functionality;
• process applications and program workflows;
• present information to authorized mentors, advisors, Program Directors, administrators, or other program personnel;
• maintain records of submissions, reviews, decisions, evidence, and program activity;
• communicate with users;
• provide support;
• maintain the security and integrity of the Services;
• diagnose errors and technical problems;
• improve the usability, reliability, and functionality of Dērysk;
• comply with legal obligations;
• enforce our Terms of Use; and
• protect Dērysk, our users, participating organizations, and others.

We may also use aggregated or de-identified information for analytics, research, product improvement, and other lawful purposes where the information cannot reasonably be used to identify an individual.

4. Educational and Program Information

Organizations such as universities, accelerators, entrepreneurship programs, and other institutions may use Dērysk to administer programs.

If you participate in such a program, authorized personnel associated with that program may be able to access information you submit in connection with it, including profile information, applications, venture information, program work, submissions, and related records.

Those organizations may have their own privacy notices, policies, legal obligations, and practices governing information they receive or maintain.

Dērysk does not control an organization's independent use of information outside the Services.

Where Dērysk processes information on behalf of an educational institution or other organization, additional contractual terms between Dērysk and that organization may apply.

Nothing in this Privacy Policy is intended to replace an educational institution's obligations under the Family Educational Rights and Privacy Act ("FERPA") or other applicable laws, nor should this Policy be interpreted as a representation that every category of information processed through Dērysk constitutes an education record under FERPA.

5. How We Share Information

We may disclose information in the following circumstances.

Participating organizations and authorized users

If you participate in a program through Dērysk, information related to that participation may be available to authorized personnel associated with the organization or program.

Access may depend on role and may include Program Directors, administrators, mentors, advisors, coaches, reviewers, or other authorized participants.

Service providers

We use third-party service providers to operate portions of Dērysk, including providers of infrastructure, hosting, databases, authentication, email delivery, monitoring, and other technology services.

These providers may process information as necessary to provide services to Dērysk and are subject to their respective contractual and legal obligations.

Legal and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
• investigate or prevent fraud, abuse, security incidents, or unlawful activity;
• enforce our agreements;
• protect the rights, property, or safety of Dērysk, our users, participating organizations, or others; or
• establish, exercise, or defend legal claims.

Business transactions

If Dērysk is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

With your direction or consent

We may disclose information when you direct us to do so or otherwise provide consent.

6. We Do Not Sell Personal Information

Dērysk does not sell personal information for monetary consideration.

We also do not use student application information or confidential venture information for third-party advertising.

7. Venture and User Content

You retain your rights in the content you submit to Dērysk, subject to the Terms of Use and any rights held by other individuals or organizations.

Dērysk does not claim ownership of your venture merely because information about it is stored through the Services.

We process user content as necessary to provide, secure, maintain, and improve the Services and as otherwise described in this Privacy Policy.

8. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Services;
• maintain program and application records;
• satisfy contractual obligations to participating organizations;
• maintain security and audit records;
• resolve disputes;
• enforce agreements; and
• comply with legal requirements.

Retention periods may vary depending on the type of information, the program or organization involved, account status, contractual requirements, and applicable law.

When information is no longer reasonably necessary, we may delete, anonymize, or de-identify it, subject to applicable obligations.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

No information system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their credentials and should notify us if they believe their account or information has been compromised.

10. Your Choices and Requests

Depending on your account, program, location, and applicable law, you may be able to:

• access or update certain profile information through Dērysk;
• request correction of inaccurate personal information;
• request information about personal information associated with your account;
• request deletion of certain personal information; or
• contact us with questions about our privacy practices.

Some information may need to be retained because of legal, security, contractual, institutional, program-record, or other legitimate requirements.

If information was submitted through a university or another participating organization, we may need to coordinate certain requests with that organization.

Privacy requests may be sent to privacy@derysk.ai.

We may take reasonable steps to verify the identity and authority of someone making a request.

11. Children

Dērysk is not designed for children under 13, and we do not knowingly solicit personal information directly from children under 13 without appropriate authorization.

Programs serving minors may be subject to additional requirements and agreements before using Dērysk.

12. Third-Party Services and Links

The Services may contain links to third-party websites or integrate with third-party services.

Dērysk is not responsible for the independent privacy practices of third parties. Their privacy policies and terms govern their services.

13. International Users

Dērysk is operated from the United States.

If you access the Services from outside the United States, your information may be processed in the United States or other locations where Dērysk or its service providers operate, subject to applicable legal and contractual requirements.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may provide notice through the Services, by email, or by another appropriate method.

The effective date at the top indicates when this Policy was most recently updated.

15. Contact Us

For questions or requests concerning this Privacy Policy or Dērysk's privacy practices, contact: