Last updated: November 15, 2025  |  Effective date: November 15, 2025

KnownWeil Capital SAS ("KnownWeil," "we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at www.knownweil.com, contact us, submit investment inquiries, or otherwise interact with us.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data protection laws.

Please read this Privacy Policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use our website or services.

1. Who We Are

KnownWeil Capital SAS is a French simplified joint-stock company (societe par actions simplifiee) registered in France under SIREN number 887 654 321, with its registered office at 14 Avenue Montaigne, Suite 302, Paris 75008, France.

KnownWeil Capital is a venture capital investment firm investing in technology companies at the seed stage. We are regulated under applicable French financial services laws and registered with the Autorite des Marches Financiers (AMF).

For the purposes of the GDPR, KnownWeil Capital SAS acts as the data controller for personal data processed in connection with our website and investment activities described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal data that you voluntarily provide to us, including when you:

• Contact us through our website: Name, email address, company name, telephone number, and message content
• Submit an investment inquiry: Name, company name, email address, pitch deck URL or contents, financial information, and business description
• Subscribe to our newsletter or insights: Email address and name
• Apply for a position: Resume/CV, cover letter, employment history, educational background, and professional references
• Participate in events or webinars: Name, email address, company, and professional title
• Enter into a business relationship with us: Identity documents, financial information, and professional background information as required by applicable law

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information, including:

• Device information: Browser type and version, operating system, device type, screen resolution, and device identifiers
• Connection information: IP address, internet service provider, general geographic location (country, city), and referring URL
• Usage data: Pages visited, time spent on pages, links clicked, search terms used, and navigation paths through our website
• Cookie data: Preferences and session data stored in cookies, as described in our Cookie Policy

2.3 Information from Third Parties

We may receive personal data about you from third parties, including:

• Professional networks: LinkedIn and other professional networking platforms when you or your company is relevant to our investment focus
• Introductions: Information provided by mutual contacts who introduce founders, executives, or potential limited partners to our team
• Public sources: Information from regulatory filings, company registries, news sources, and other publicly available databases in connection with investment diligence
• Background check providers: For individuals entering into significant business relationships with us, information from authorized background check providers

3. How We Use Your Information

3.1 Investment Activity

We use personal data to conduct investment-related activities, including:

• Evaluating investment opportunities and conducting due diligence on founders and companies
• Managing relationships with current and potential portfolio companies
• Performing background verification checks required by applicable regulations
• Maintaining records of investment decisions and investor relations activities
• Communicating with portfolio company founders, executives, and employees

3.2 Website and Communications

• Responding to inquiries, requests, and messages submitted through our website
• Sending newsletters, research publications, and event invitations to subscribers
• Improving the content, functionality, and user experience of our website
• Analyzing website traffic and usage patterns to understand how visitors use our site
• Maintaining website security and preventing fraudulent activity

3.3 Legal and Compliance

• Complying with applicable laws, regulations, and legal obligations
• Complying with anti-money laundering (AML) and know-your-customer (KYC) requirements
• Responding to legal process, court orders, or regulatory requests
• Establishing, exercising, or defending legal claims
• Detecting and preventing fraud, abuse, and other harmful activities

3.4 Business Operations

• Managing administrative and operational aspects of our business
• Processing applications from prospective team members
• Conducting research on market trends and investment opportunities
• Communicating with limited partners regarding fund activities and performance

4. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under the following legal bases as specified in Article 6 of the GDPR:

Processing Activity	Legal Basis	GDPR Article
Responding to website inquiries and contact form submissions	Legitimate interests (responding to your communication request)	Art. 6(1)(f)
Investment due diligence on founders and companies	Legitimate interests (core business activity)	Art. 6(1)(f)
Sending newsletters and research to subscribers	Consent (given at subscription)	Art. 6(1)(a)
AML/KYC compliance checks	Legal obligation	Art. 6(1)(c)
Managing portfolio company relationships	Performance of contract; Legitimate interests	Art. 6(1)(b), (f)
Website analytics and performance optimization	Legitimate interests; Consent (for non-essential cookies)	Art. 6(1)(f), (a)
Responding to legal process or regulatory requests	Legal obligation; Legitimate interests	Art. 6(1)(c), (f)
Processing job applications	Pre-contractual measures; Consent	Art. 6(1)(b), (a)

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests; please see Section 11 for details.

5. Information Sharing and Disclosure

5.1 Service Providers

We share personal data with trusted service providers who assist us in operating our business, subject to data processing agreements that require them to protect your data:

• Cloud infrastructure providers: For secure hosting and storage of our systems and data (e.g., AWS, Google Cloud Platform)
• Email and communication platforms: For sending newsletters, investor updates, and operational communications (e.g., Mailchimp, SendGrid)
• Analytics providers: For understanding website usage (e.g., Google Analytics, where used with anonymization)
• CRM and portfolio management software: For managing our investor and portfolio company relationships
• Legal, accounting, and compliance advisors: Who require access to data in the course of providing professional services to us
• Background check providers: For conducting legally required identity verification and KYC checks

5.2 Business Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, personal data may be transferred as part of that transaction. We will notify you of any such change and your rights in connection with it.

5.3 Legal Requirements

We may disclose personal data when required by law or in good-faith belief that such action is necessary to:

• Comply with applicable laws, regulations, or legal process
• Respond to lawful requests from public authorities, including national security and law enforcement
• Protect the rights, property, or safety of KnownWeil Capital, our employees, our investors, or others
• Detect, prevent, or address fraud, security, or technical issues

5.4 We Do Not Sell Personal Data

KnownWeil Capital does not sell personal data to third parties. We do not share personal data with third parties for their direct marketing purposes without your explicit consent.

6. International Data Transfers

KnownWeil Capital is based in France and primarily processes personal data within the EEA. However, some of our service providers may process personal data outside the EEA, including in the United States and other countries that may not provide the same level of data protection as your home country.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs): The European Commission-approved model clauses for transfers to processors and controllers outside the EEA
• Adequacy decisions: Transfers to countries recognized by the European Commission as providing adequate data protection
• Binding Corporate Rules: For transfers within corporate groups that have adopted BCRs approved by a lead data protection authority

You may request information about the specific safeguards in place for any particular transfer by contacting our Data Protection Officer (see Section 16).

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Our retention periods are governed by the following principles:

• Investment inquiries not resulting in investment: 3 years from the date of the last communication
• Active portfolio company data: For the duration of our investment plus 7 years following exit or wind-down
• Newsletter subscribers: Until you unsubscribe, plus 30 days for administrative processing
• Legal and compliance records: As required by applicable AML, financial services, and tax regulations (typically 5-10 years)
• Website analytics data: 26 months from the date of collection (or shorter if you withdraw consent)
• Job application data: 2 years for unsuccessful applicants, unless you consent to longer retention for future opportunities
• Correspondence and communications: 5 years from the date of the last communication

When personal data is no longer required, we securely delete or anonymize it in accordance with our data destruction procedures.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: Data in transit is encrypted using TLS 1.2 or higher; sensitive data at rest is encrypted using AES-256
• Access controls: Access to personal data is restricted to team members with a legitimate need, and is controlled through role-based access management
• Authentication: Multi-factor authentication is required for all internal systems containing personal data
• Vendor security: We require all data processors to maintain appropriate security measures through contractual obligations
• Incident response: We maintain a data breach response plan and will notify affected individuals and relevant supervisory authorities within required timeframes in the event of a breach
• Security training: All team members receive regular data protection and security training

While we take all reasonable precautions, no data transmission or storage system is completely secure. If you become aware of any security vulnerability or breach, please notify us immediately at security@knownweil.com.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to provide functionality, analyze traffic, and improve your experience. For full details on the cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

You can withdraw your consent to non-essential cookies at any time through our cookie preference center or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

10. Your Privacy Rights

Depending on your location and applicable law, you have various rights regarding your personal data. We are committed to honoring these rights promptly and without charge (unless a request is manifestly unfounded or excessive). Please contact our Data Protection Officer to exercise any of the rights described below.

11. GDPR Rights (EU/UK Residents)

If you are located in the EEA or the United Kingdom, you have the following rights under the GDPR/UK GDPR:

Right of Access (Article 15)

You have the right to obtain confirmation of whether we process personal data about you, and if so, to receive a copy of that data along with information about the processing.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data and completion of incomplete personal data we hold about you.

Right to Erasure / Right to Be Forgotten (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing is unlawful. Exceptions apply where processing is necessary for legal compliance or the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have disputed or while a legitimate interests objection is being assessed.

Right to Data Portability (Article 20)

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests, including profiling, on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You also have the right to object at any time to processing for direct marketing purposes.

Right to Withdraw Consent (Article 7(3))

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the Commission Nationale de l'Informatique et des Libertes (CNIL) in France. You may also contact the supervisory authority in your country of residence or place of work. The CNIL can be contacted at:

CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. Website: www.cnil.fr

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know

You have the right to know what personal information we collect about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions including legal compliance, completion of transactions, and detection of security incidents.

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt-Out of Sale or Sharing

We do not sell personal information as defined by the CCPA. We do not share personal information for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information

To the extent we process sensitive personal information as defined by the CPRA (such as financial account information in connection with investment activities), you have the right to direct us to limit its use to that necessary to perform the services or provide goods reasonably expected by you.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, contact us at privacy@knownweil.com or by mail at the address below. We will respond to verifiable consumer requests within 45 days, with an extension of up to 90 days where reasonably necessary.

13. Children's Privacy

Our website and services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us immediately and we will take steps to delete such information as soon as practicable.

14. Third-Party Services and Links

Our website may contain links to third-party websites, and we may embed content from third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our website.

Third-party services that may process your data in connection with our website include LinkedIn (for professional networking features), Twitter/X (for social sharing), and Google Analytics (for website analytics). Each of these services has its own privacy policy governing their data practices.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When we make material changes, we will notify you by:

• Posting a notice on our website's homepage
• Updating the "Last updated" date at the top of this policy
• Sending an email notification to subscribers (for material changes affecting how we use subscriber data)

Your continued use of our website after the effective date of any changes constitutes your acknowledgment of the updated Privacy Policy.

16. Contact Information and Data Protection Officer

For questions, concerns, or to exercise your privacy rights, please contact us through any of the following channels:

Privacy Team

KnownWeil Capital SAS
Attn: Privacy Team
14 Avenue Montaigne, Suite 302
Paris 75008, France
Email: privacy@knownweil.com

Data Protection Officer

KnownWeil Capital has appointed a Data Protection Officer as required by the GDPR:
Email: dpo@knownweil.com
The DPO can also be reached at our registered address above, marked "Attn: Data Protection Officer."

EU Representative

As a French-registered entity, KnownWeil Capital SAS serves as its own EU representative. For matters related to EU data protection law, correspondence may be directed to our registered office at 14 Avenue Montaigne, Suite 302, Paris 75008, France.

UK Representative

For UK GDPR matters, KnownWeil Capital has appointed a UK representative:
KnownWeil Capital UK Representative
c/o KnownWeil Capital SAS Legal, 14 Avenue Montaigne, Suite 302, Paris 75008, France
Email: uk-gdpr@knownweil.com

We aim to respond to all privacy requests within 30 days of receipt. If your request requires additional time, we will notify you with an explanation and expected timeline.