Privacy Policy

This Privacy Policy describes how XV LLC ("XV," "we," "us," or "our"), operator of Powdr, collects, uses, discloses, and retains information through getpowdr.com and related experiences (collectively, the "Services"). XV is based in Vermont, United States. References to "Powdr" describe the service or XV in its role as operator, as the context requires.

Powdr is currently a product-research proof of concept. Powdr Capital, Powdr Builder Offers, and investor discovery are in development and are not currently financial products, approvals, or commitments.

1. Scope and intended audience

The Services are intended for people located in the United States who are at least 18 years old. We do not knowingly market or offer the Services to people outside the United States. If you access the Services from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your location. Access from another country does not mean that Powdr is offered there. We will honor rights required by applicable law.

2. Notice at collection

Depending on how you use Powdr, we may collect the following categories of information:

• Identifiers and account information: name, email address, OAuth provider, provider account identifier, and authentication records supplied by Google, GitHub, or another sign-in provider you choose.
• Professional and profile information: your role, optional LinkedIn URL, optional public build URL, and whether your work is private.
• Assessment and research information: your answers about your experience, current work, stage, users, revenue history, goals, capital interest, any preferred credit-line size, and interest in a possible future Powdr product.
• Powdr-generated inferences: assessment score, builder archetype, profile tier, and evidence labels.
• Device and usage information: IP address, browser and device type, operating system, referring page, pages or features used, event names, timestamps, error logs, and similar security and performance information.
• Communications and preferences: messages you send us and whether you chose to receive Powdr updates or future partner-offer communications from Powdr.
• Legal acceptance records: the Terms and privacy-notice versions shown to you, the action used to accept them, the time of acceptance, and, when acceptance occurs in the assessment, the random assessment-session identifier.

We collect this information directly from you, automatically from your browser, from the authentication provider you select, and from service providers that help operate the Services. We use it for the purposes described below, including providing profiles, conducting product research, operating and securing the Services, communicating with you, evaluating potential partnerships, and presenting possible future opportunities.

3. Information you should not provide

Powdr does not ask for Social Security numbers, government identification, credit reports, bank or payment credentials, account balances, tax or medical records, private source code, API keys, passwords, private repository contents, or confidential third-party information. Do not submit these categories of information. Current OAuth connections are for authentication; Powdr does not request access to private GitHub repositories, X posting, or Microsoft organization data.

4. Assessments completed without an account

When you finish the assessment without creating an account, Powdr stores a pseudonymous research response. It contains your survey answers and Powdr's derived score, archetype, and tier, together with a random session identifier and the versioned legal-acceptance record created when you selected your first answer. The pseudonymous research record is designed not to contain your name, email, LinkedIn URL, public build URL, authentication provider, or marketing preference.

If you later claim the same assessment, Powdr may link it to your account to create your profile, measure claim conversion, and avoid double counting. Because an unclaimed response does not contain your direct account identifiers, we may be unable to locate it in response to an individual request unless you can provide enough information to identify the browser session. Unclaimed responses are automatically deleted under the retention schedule below.

Powdr uses unclaimed responses for internal research and aggregate reporting. Service providers may process them only as needed to operate, secure, and support Powdr.

5. How Powdr uses information

We may use the information described in this policy to:

• provide, maintain, personalize, and improve the Services;
• create and display your experimental Powdr Profile;
• authenticate accounts, prevent duplicate records, and protect the Services;
• study builder needs, assessment completion, profile conversion, cohort quality, and demand for possible future capital, benefits, and investor-discovery products;
• communicate about your account, the Services, research participation, and, when you opt in, Powdr updates and future partner offers sent by Powdr;
• evaluate and develop relationships with prospective lenders, financing providers, commercial-benefit partners, and venture investors;
• comply with law, enforce our Terms, and investigate fraud, abuse, or security issues;
• create aggregate research that can be used for product development, fundraising, market validation, and business planning.

Powdr's profiles, scores, archetypes, tiers, and evidence labels are deterministic product-research outputs. They are not credit decisions, underwriting, professional advice, or findings about your creditworthiness.

6. How Powdr discloses information

Service providers

We disclose information to vendors that provide hosting, database, authentication, deployment, analytics, email, customer support, security, and other operational services. Current core providers include Supabase, Vercel, GoatCounter, and the OAuth provider you choose. These providers may process information only as permitted by their contracts and applicable law.

Prospective investor, lending, financing, and commercial relationships

Powdr may disclose aggregate information to prospective venture investors, lenders, financing providers, and providers of commercial benefits for product research, partnership evaluation, fundraising, market validation, and business planning. Powdr does not currently disclose claimed-profile information to those recipients for these purposes.

Aggregate reporting and partnership discussions do not mean that Powdr or a third party has made an offer, approval, endorsement, investment decision, or commitment.

Aggregate and de-identified information

We may disclose aggregate or de-identified information for research, fundraising, market validation, and business planning. Powdr uses reasonable measures to prevent this information from being associated with an individual, publicly commits not to reidentify it, and requires recipients to refrain from reidentification where required by law.

Legal, safety, and business transactions

We may disclose information when we reasonably believe disclosure is required by law or is necessary to protect rights, safety, and security; investigate misuse; or respond to legal process. Information may also be disclosed in connection with a financing, merger, acquisition, reorganization, sale of assets, diligence process, or similar business transaction, subject to appropriate confidentiality and legal protections.

At your direction

We may disclose information when you ask us to, when you intentionally use a feature that requires disclosure, or when we provide a separate notice and obtain consent where required.

7. Sale, targeted advertising, and partner disclosures

Powdr does not sell personal information or share it for cross-context behavioral advertising. We do not use third-party advertising trackers or remarketing tools. If Powdr begins a practice subject to a sale, sharing, or targeted-advertising opt-out right, we will provide the notice and choice required by applicable law before the practice begins.

8. Cookies, local storage, and analytics

Powdr uses cookies and browser storage needed for authentication, session continuity, security, preferences, and preserving an assessment while you move through the experience. Your browser may let you block or delete these technologies, but doing so may prevent parts of the Services from working.

An incomplete assessment draft, including answers, optional profile links, communication preferences, and progress, remains usable for up to seven days after your latest activity so you can resume the experience. After that period, Powdr disregards the expired draft and deletes it from browser storage the next time the Services load. It is removed sooner when you claim your profile, start the assessment over, delete your account, or clear your browser data.

Powdr uses GoatCounter in its default aggregate configuration to understand traffic and use of selected public pages. Powdr sends a page path without query parameters, a page title, and, when available, only the origin of the referring site. On selected public calls to action, Powdr also sends a descriptive event name and may measure whether a signed-out assessment was started or completed after that selection. A short-lived source label may be kept in session storage for this aggregate attribution and is removed when the assessment is completed, expires, or the browser session ends. The label identifies the CTA placement, not the person using it. GoatCounter may also process browser and operating-system categories, language, screen size, and an approximate location derived from an IP address that GoatCounter does not store. Powdr does not send GoatCounter account identifiers, assessment answers, profile information, requested amounts, or activity from authenticated Powdr pages. GoatCounter does not use cookies, browser storage, or persistent tracking identifiers in this configuration. GoatCounter.com is operated in Ireland and hosts data with Hetzner in Finland and Germany. Powdr does not use analytics for advertising personalization or remarketing.

9. Email and communications

We may send transactional messages about authentication, security, account changes, and the Services. Powdr sends product updates, research invitations, launch news, or future partner offers only when you affirmatively opt in. You can withdraw that choice through Account & Privacy or an unsubscribe mechanism in the message. Opting out of marketing does not stop essential account or security communications.

10. Retention and account deletion

• Browser-stored assessment drafts: usable for up to seven days after your latest activity. Expired drafts are disregarded and deleted from browser storage the next time the Services load. Drafts are removed sooner when you claim your profile, start the assessment over, delete your account, or clear your browser data.
• Unclaimed research responses and signed-out analytics events: deleted no later than 24 months after collection.
• Active account and claimed-profile information: retained while your account is active and as reasonably needed to provide the Services.
• Account deletion: deleting your account removes the account, identity, contact information, OAuth link, user-provided profile links, preferences, and other account-owned records from active systems, including your saved assessment. Powdr does not copy that assessment into the pseudonymous research dataset when your account is deleted. Only the limited legal, security, backup, aggregate, and de-identified records described below may remain.
• Aggregate or de-identified information: may be retained indefinitely when it can no longer reasonably be linked to you and is maintained under Powdr's non-reidentification commitments.
• Legal acceptance and dispute records: the Terms and privacy-notice versions, acceptance timestamp, acceptance method and source, a one-way account reference or random-session identifier, your account-deletion instruction, deletion requests, dispute notices, and related correspondence may be retained for as long as reasonably necessary to establish an agreement, comply with law, and resolve or enforce disputes. Powdr does not retain your identity, profile information, or complete assessment answers in the detached legal acceptance ledger.

Limited information may remain longer in backups, security logs, or records required for legal compliance, fraud prevention, dispute resolution, or enforcement. We delete or de-identify it when the applicable reason ends. Backup copies are isolated from ordinary use and removed through normal backup rotation.

11. Security

Powdr uses administrative, technical, and organizational safeguards designed to protect information, including account-level access controls and server-side protection for privileged operations. No internet service is completely secure, and we cannot guarantee that information will never be accessed, lost, or altered without authorization. You are responsible for protecting access to your OAuth account and device.

12. Your privacy choices and rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; learn about categories collected or disclosed; opt out of certain sales, sharing, targeted advertising, or marketing; limit certain sensitive-information uses; and appeal a denied request. Powdr does not intentionally collect sensitive personal information for inferring characteristics.

To exercise a right, email   with the email address associated with your account and a description of your request. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may request proof of authorization. We will not discriminate against you for exercising an applicable privacy right.

13. Children

The Services are not directed to anyone under 18, and Powdr does not knowingly collect personal information from anyone under 18. If you believe a minor provided information, contact us so we can investigate and delete it where appropriate.

14. Third-party services and links

The Services may link to LinkedIn, public build pages, OAuth providers, or other third-party services. Powdr does not control those services, and this policy does not cover their practices. Review their privacy notices before providing information to them.

15. Changes to this policy

We may revise this policy as Powdr develops. We will post the updated policy here and change the effective date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent when required by law.

16. Contact

Questions, requests, and complaints may be sent to  .

XV LLC
145 Pine Haven Shores Rd. #1000A
Shelburne, Vermont 05482
United States
getpowdr.com