Privacy policy

1. Who we are

Raisepoint is registered in the Netherlands under KVK number 42098784. For the personal data described here, Raisepoint is the data controller.

Questions about this policy, or a request about your own data, go to info@raisepoint.nl.

2. What we collect, and why

When you request access

The access request form asks for your name, your work email address and the firm you represent. We also record the IP address the request came from, and the date and time. We use this to decide whether to grant access, to contact you about that decision, and to stop the form being abused. The IP address is never shown to anyone outside our own operators and is used for nothing else.

If you are granted an account

We hold your email address, your name, the firm you belong to, your role in the product, and a one-way hash of your password - we never store the password itself and cannot read it. Signing in sets a session cookie, which is what keeps you signed in; it is strictly necessary for the service. Inside the app we also record how you use it - which pages and company profiles you open, what you search for and ask, and a replay of your session (typed text is masked; the deck pages and the admin area are never recorded). This is tied to your account, is processed by PostHog on servers in the EU, and is used only to improve the product. Actions taken by operators inside the admin area are written to an audit log.

Server logs

Our servers record ordinary technical information about requests - IP address, browser user-agent, the page or endpoint requested, and the time. This is what lets us keep the service available and investigate abuse.

If you email us

We keep the message and your address for as long as we need it to deal with what you wrote about, and as a record that we did.

3. What we do not do

This website sets no cookies. It collects anonymous usage statistics (pages viewed, where a visit came from) through PostHog, hosted in the EU, without a cookie, an identifier that survives the visit, or a session recording. It runs no advertising or tracking scripts. We do not build profiles of visitors, we do not sell or rent personal data, and we do not share it with anyone for their own marketing.

Two third parties do receive your IP address simply because your browser fetches files from them when this page loads: Google Fonts (fonts.googleapis.com, fonts.gstatic.com) for the typefaces, and the Tailwind CDN (cdn.tailwindcss.com) for the stylesheet engine. We send them nothing about you beyond what any web request necessarily carries.

4. Information about companies, and the people behind them

Raisepoint's product is intelligence on defence-sector companies, assembled from public sources: company registers, public procurement portals, companies' own websites, and published reporting. Some of that material names individuals - founders, directors, beneficial owners - in their professional capacity, and that is personal data too.

We process it on the basis of our legitimate interest, and the legitimate interest of our clients, in assessing companies they may invest in, buy from or partner with. We record where each item came from, we publish it only to a closed set of vetted professional users, and we do not use it to make automated decisions about individuals.

If you are named in our data and want it reviewed, corrected or removed, write to info@raisepoint.nl and we will look at it.

5. Legal bases

• Legitimate interest — evaluating access requests, keeping the service secure and available, and the company research described in section 4.
• Performance of a contract — operating your account and providing the service to your firm.
• Legal obligation — where we have to keep records or answer a lawful request.
• Consent — for anything else, and you can withdraw it at any time.

6. Who processes data on our behalf

We use a small number of service providers, each bound by a data processing agreement and each acting only on our instructions: our cloud hosting provider, which runs the site, the platform and the database; and our transactional email provider, which delivers the messages we send you about access and your account. Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses.

7. How long we keep it

• Access requests — kept while under review, and afterwards as a record of the decision, so that a rejected request is not silently resubmitted.
• Account data — for as long as the account exists, and a limited period afterwards for audit and dispute purposes.
• Server logs — a short period, sufficient for security and troubleshooting.

You can ask us to delete your account and the data attached to it at any time.

8. Your rights

Under the GDPR you can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use of it, and ask for it in a portable form. You can also object to processing we carry out on the basis of legitimate interest.

Write to info@raisepoint.nl. We answer within one month. We may need to check who you are first, so that we do not hand your data to somebody else.

9. Security

Traffic to this site and to the platform is encrypted in transit. Passwords are stored only as one-way hashes. Access to the platform is invite-led rather than open registration, operator actions are logged, and access to the underlying data is limited to the people who need it.

10. Complaints

If you think we have handled your data wrongly, tell us first - we would rather fix it. You also have the right to complain to the Dutch data protection authority (Autoriteit Persoonsgegevens), or to the authority of the country where you live or work.

11. Changes

If we change how we handle personal data, we change this page and move the date at the top. Material changes affecting people with accounts will also be sent by email.