Privacy Policy
1. Who we are
Petrus Labs, LLC ("Petrus Labs," "we", "us") operates petrus.vc. We are the controller of the personal data described in this policy.
Registered address: 204B 2nd Ave Ste 318, San Mateo, CA 94401. Contact for privacy matters: privacy@petrus.vc.
2. Information we collect
Information you give us
When you submit our contact form, we collect the name, email address, and any other information you choose to include in your message, including company details or materials you send us about your business.
Information collected automatically
When you visit the site, we collect standard technical data through Google Analytics 4 and our hosting provider's logs: IP address, browser and device type, operating system, referring page, pages viewed, time on page, and approximate location derived from IP address.
We do not collect payment information, government identifiers, or special category data through this website.
3. Why we use it and our legal basis
Purpose: Responding to your enquiry and any follow-up correspondence
Legal basis (GDPR): Legitimate interest, or steps toward entering a relationship at your request
Purpose: Reviewing materials you send us about your company
Legal basis (GDPR): Legitimate interest in evaluating potential investments
Purpose: Measuring site traffic and improving the site
Legal basis (GDPR): Consent, where analytics cookies require it
Purpose: Protecting the site against abuse and securing our systems
Legal basis (GDPR): Legitimate interest
Purpose: Meeting legal, tax, and regulatory obligations
Legal basis (GDPR): Legal obligation
We do not sell personal information, and we do not use it for automated decision-making that produces legal effects.
4. Cookies and analytics
We use Google Analytics 4 to understand how visitors use the site. GA4 sets cookies that assign your browser a pseudonymous identifier and record your activity across pages.
Strictly necessary cookies are set to keep the site functioning and do not require consent. Analytics cookies are set only where you consent through our cookie banner. You can block cookies through your browser settings.
Google's own handling of this data is described at policies.google.com/privacy. You can opt out of Google Analytics across all sites using Google's browser add-on at tools.google.com/dlpage/gaoptout.
5. Materials you send us
If you send us a pitch deck, business plan, financial information, or similar materials, we treat them as confidential business information but we do not accept any obligation of confidentiality beyond what is set out in a signed agreement between us. Materials sent to us unsolicited may be reviewed by our team and retained as part of our deal records. Please do not send us information you consider highly sensitive before we have a written agreement in place.
If those materials contain personal data about other people, such as your co-founders or team, you confirm you have a lawful basis for sharing it with us, and this policy describes how we will handle it.
6. Who we share it with
We share personal data with service providers who process it on our behalf:
- Hosting and infrastructure: Webflow, Inc.
- Analytics: Google LLC (Google Analytics 4)
- Email and productivity: Google Workspace
- Form handling: Webflow, Inc.
- CRM or deal tracking: N/A
We may also disclose personal data to professional advisers, or where required by law, regulation, or legal process, or to establish or defend legal claims.
7. International transfers
Our service providers include organisations located outside the United States. Where we transfer personal data internationally, we rely on adequacy decisions, Standard Contractual Clauses, or another lawful transfer mechanism. You can request details of the mechanism used by contacting us.
8. How long we keep it
Data: Contact form submissions and correspondence
Retention: 24 months from last contact, unless an ongoing relationship exists
Data: Materials submitted about a company
Retention: 5 years, as part of our deal records
Data: Analytics data
Retention: Per GA4 retention setting, currently 14 months
Data: Server logs
Retention: 30 days
We keep data longer where a legal, tax, or regulatory obligation requires it.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to processing based on legitimate interests
- Restrict how we process your data
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
If you are in the EEA or UK: you may lodge a complaint with your local supervisory authority.
If you are a California resident: you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and request correction. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
To exercise any right, contact privacy@petrus.vc. We will respond within the timeframe required by applicable law, normally one month.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and vendor review. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.
11. Children
This site is not directed at anyone under 16, and we do not knowingly collect their personal data.
12. Changes to this policy
We may update this policy from time to time. We will post the revised version here and update the date at the top. Material changes will be signalled more prominently.
13. Contact
Tyson Mao
204B 2nd Ave Ste 318, San Mateo, CA 94401