Privacy Policy

Last updated: 20 April 2026

This Privacy Policy explains how Alfa Technology Recruitment Ltd ("Prometheus", "we", "us", "our") collects, uses, shares, and protects your personal data when you use the Prometheus mobile application, the website at enterprometheus.com, and any related services (the "Service").

We are the controller of your personal data for the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. We are registered in England and Wales under company number 14231768, with registered office at Flat 7, Batik Court, 1 Rayon Close, London SM6 7FY.

1. Who this Policy Applies To

This Policy applies to anyone who creates an account, signs up for the waitlist, visits the website, or otherwise interacts with the Service. If you are under 18, you may not use the Service and we do not knowingly collect data from you; if you believe we have, please contact us and we will delete it promptly.

2. Personal Data We Collect

We collect the following categories of personal data:

(a) Account and profile data — When you sign up with LinkedIn, we receive your name, email address, profile photograph, LinkedIn profile URL, and any publicly available professional information you permit LinkedIn to share. You may then add to your profile your role, company, a short pitch, your current fundraising stage, a link to your pitch deck, and a list of investors you are willing to introduce to other members.

(b) Member activity data — Swipes (right or left) on other members, matches formed, direct-message metadata, intro proposals (including investor names), intro acceptances, declines and "mark as sent" events, and the count and timing of direct messages initiated per billing period.

(c) Communications — The content of messages you send to other members, messages you send to the Prometheus AI agent, and any reports you submit about other members (which include the chat log between you and the reported member).

(d) Subscription and billing data — Your subscription tier, subscription status, renewal date, and the identifier Apple supplies to link your Apple ID to your Prometheus account. Your payment card details are held by Apple and are not received or stored by Prometheus.

(e) Device and technical data — IP address, device type, operating-system version, app version, push-notification tokens (where you have enabled notifications), crash logs, and approximate timestamps of sessions.

(f) Waitlist data — Email addresses submitted through the waitlist form and a record of which page the submission came from. Waitlist submissions are hosted by Typeform.

(g) AI-agent data — The content of your chats and voice/video calls with the Prometheus AI agent. Voice and video sessions are processed in real time by Tavus; chat prompts are processed by Google Gemini. We do not retain voice or video recordings by default.

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases under UK GDPR Article 6:

• Providing and operating the Service — to authenticate you, show you other members, record matches, deliver messages, manage subscriptions, and deliver the AI agent. Legal basis: performance of a contract (Article 6(1)(b)).
• Enforcing our rules and keeping the network safe — to investigate reports, detect abuse, enforce the reciprocity rule in our Terms, and remove members who breach those rules. Legal basis: legitimate interests (Article 6(1)(f)) in maintaining the integrity of the network.
• Improving the Service — to understand how members use features, fix bugs, and improve matching quality. Legal basis: legitimate interests.
• Sending transactional and operational messages — to send confirmation emails, push notifications about matches and messages, and security notices. Legal basis: performance of a contract and legitimate interests.
• Handling waitlist interest — to contact you when membership opens. Legal basis: consent (Article 6(1)(a)), which you can withdraw at any time by replying "unsubscribe" to any waitlist email.
• Complying with legal obligations — including tax, accounting, and responding to lawful requests from authorities. Legal basis: legal obligation (Article 6(1)(c)).

4. Who We Share Your Data With

We share your personal data only in the ways described below:

(a) Other members of the Service. Your profile (name, photo, role, company, pitch, stage, investor inventory, deck link) is visible to other members when you appear in their discovery feed or when you match with them. Messages you send to another member are visible to that member.

(b) Sub-processors. We use the following third-party service providers to operate the Service. Each has access only to the personal data needed to perform its function, and each is bound by contractual obligations to protect it:

(c) Legal and regulatory recipients. We may disclose your data to law-enforcement bodies, regulators, or courts where we are required by law to do so, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Prometheus, our members, or the public.

(d) Business transfers. If Prometheus is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same obligations set out in this Policy.

We do not sell your personal data, and we do not share it with advertising networks for targeted advertising.

5. International Transfers

Several of our sub-processors are based in, or process data in, the United States. Where personal data is transferred outside the United Kingdom or European Economic Area, we rely on one of the following transfer mechanisms as required by UK GDPR:

• UK adequacy regulations, where available;
• the UK International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses (SCCs) supplemented by the UK Addendum; or
• certified frameworks such as the UK-US Data Bridge, where the recipient is certified under it.

You may contact us at alfie@welovealfa.com for a copy of the safeguards applicable to a specific transfer.

6. How Long We Keep Your Data

We retain your personal data only for as long as we need it for the purposes set out in this Policy:

• Account and profile data — for the life of your account. When you delete your account, your profile, matches, intro history, and messages are deleted within 30 days, except where we need to retain limited records for legal, accounting, or dispute-resolution purposes.
• Subscription and billing records — up to 6 years after the end of the relevant financial year, as required by UK accounting law.
• Report submissions and investigation records — up to 2 years after the report is resolved, to support repeat-behaviour investigations.
• Waitlist emails — until the app launches plus 12 months, or until you unsubscribe, whichever is earlier.
• Technical logs — typically 30–90 days.

7. Your Rights

Under the UK GDPR you have the following rights in relation to your personal data. You can exercise any of them by emailing alfie@welovealfa.com. We will respond within one month.

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data in certain circumstances (you can also delete your account in-app at any time).
• Restriction — ask us to limit how we use your data.
• Objection — object to processing we carry out on the basis of legitimate interests.
• Portability — receive a copy of data you provided to us in a machine-readable format.
• Withdraw consent — where we process data on the basis of consent, you may withdraw it at any time.
• Complain to a supervisory authority — you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would, however, appreciate the chance to address your concern before you approach the ICO.

8. Automated Decision-Making and Profiling

The Service uses profile information and swipe activity to order the discovery feed and to propose matches. These operations do not produce legal or similarly significant effects on you within the meaning of UK GDPR Article 22 and are not used to take decisions on your behalf. The AI agent generates responses based on your prompts and profile, but does not make decisions that have legal effect on you.

9. Cookies and Tracking

The Prometheus mobile application does not use cookies. The website at enterprometheus.com uses only cookies strictly necessary for the site to function, plus third-party cookies set by embedded Typeform forms when you open the Apply-now form. You can read the full disclosure in our Cookie Policy.

10. Security

We use administrative, technical, and physical safeguards to protect your personal data, including encrypted connections (TLS), encryption of data at rest where applicable, access controls on our databases, and a least-privilege model for internal access. No system is perfectly secure, however, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the ICO in accordance with our legal obligations.

11. Links to Third-Party Sites

The Service may link to third-party websites (for example, pitch decks hosted on DocSend, LinkedIn profiles, or investor websites). We are not responsible for the privacy practices of those sites, and you should review their own privacy policies.

12. Changes to This Policy

We may update this Policy from time to time. If the changes are material, we will notify you by email or via an in-app notice a reasonable time in advance. The "Last updated" date at the top of this Policy indicates when it was last revised.

13. Contact Us

If you have any questions about this Policy or how we handle your personal data, please contact:

Alfa Technology Recruitment Ltd
Registered office: Flat 7, Batik Court, 1 Rayon Close, London SM6 7FY, United Kingdom
Company Number: 14231768 (registered in England and Wales)
Email: alfie@welovealfa.com

© 2026 Alfa Technology Recruitment Ltd. All rights reserved.