Privacy Policy

1. Who We Are

Muvelo Finance ("we", "us", "our") is an independent international platform for funding intelligence and project development, founded and developed by Dr Ing.-Expert Mohamed Francis Luc (Doha, Qatar). Muvelo Finance is not legally affiliated with or operated by GreenTheris. The domain finance.greentheris.com is used as a temporary technical hosting address only.

Legal operating entity: Entité juridique exploitante à désigner avant l'ouverture commerciale. Contact details are listed at the end of this policy.

This policy applies to the Muvelo Finance platform (currently accessible at finance.greentheris.com) and all associated subdomains, mobile applications, and services (collectively, the "Platform").

2. Information We Collect

Information you provide directly

• Account information: name, email address, password (hashed — we never store it in plain text), company name, country, phone number (optional)
• Company profile: business description, sector, stage, funding amount sought, revenue figures, team size, website
• Funding requests: use of funds description, financial projections, supporting documents you upload
• Communications: messages sent through the platform to investors or our team, support requests
• Payment information: billing details processed directly by Stripe (we never see or store your full card number)

Information collected automatically

• Usage data: pages visited, features used, search queries, time spent, click patterns
• Technical data: IP address, browser type, operating system, device type, referring URL
• Cookies: session cookies (required for login), analytics cookies (require consent), preference cookies

Information from third parties

• Analytics providers: aggregated traffic data from Google Analytics 4
• Payment processors: transaction confirmation and subscription status from Stripe

3. How We Use Your Information

• Provide the service: match your company profile to relevant funders, generate funding documents, display your profile to investors (only with your consent)
• Account management: authenticate you, manage your subscription, process payments, send transactional emails
• Platform improvement: analyse usage patterns to improve matching accuracy and user experience
• Communications: send service announcements, product updates, and (with your consent) promotional emails — you may opt out at any time
• Safety and security: detect fraud, prevent abuse, enforce our Terms of Service
• Legal compliance: meet our obligations under applicable law

We do not: sell your data to third parties, share your financial data with investors without your explicit action, use your data for automated decisions that produce significant legal effects without human review.

4. Legal Basis for Processing (GDPR)

For users in the EU, EEA, and UK, we process your data under the following legal bases:

• Contract: providing the services you have subscribed to
• Legitimate interest: improving the platform, security monitoring, preventing fraud
• Consent: analytics cookies, marketing emails — you may withdraw consent at any time
• Legal obligation: tax records, fraud prevention

5. How We Share Your Information

We share your information only in these circumstances:

• With investors (your choice): when you submit a funding request or contact an investor through the platform, your company profile and the information you chose to include is shared with that investor
• Service providers: Stripe (payments), document generation service providers (query content only, no personal profile data), email service providers, cloud hosting
• Legal requirements: when required by law, court order, or to protect our legal rights
• Business transfers: in the event of a merger or acquisition, your data would be transferred to the acquiring entity, with prior notice to you

All our service providers are contractually obligated to protect your data and use it only for the services they provide to us.

6. Data Retention

• Active account: retained for the life of your account
• After account deletion: personal data deleted within 30 days; anonymised analytics data may be retained indefinitely
• Financial records: retained for 7 years for tax compliance
• Backup copies: purged from encrypted backups within 90 days of deletion request

7. Cookies

We use the following types of cookies:

• Essential cookies: required for login and session management — cannot be disabled
• Analytics cookies (GA4): help us understand how the platform is used — require your consent
• Marketing cookies (Meta Pixel, LinkedIn Insight): measure advertising effectiveness — require your consent

You can manage cookie preferences at any time via your browser settings or our cookie banner.

8. Data Security

• All data transmitted over HTTPS/TLS 1.2+
• Passwords hashed with bcrypt (cost factor 12)
• JWT tokens with short expiry and secure flags
• Database encrypted at rest on cloud infrastructure
• Daily automated backups with 30-day retention
• Rate limiting and intrusion detection on all API endpoints
• Regular security audits and penetration testing

No system is 100% secure. If you believe your account has been compromised, contact us immediately at security@finance.greentheris.com.

9. Your Rights

Depending on your jurisdiction, you have some or all of the following rights:

• Access: request a copy of all personal data we hold about you
• Rectification: correct inaccurate data
• Erasure: request deletion of your account and personal data
• Portability: receive your data in a machine-readable format
• Restriction: limit how we process your data in certain circumstances
• Objection: object to processing based on legitimate interest
• Withdraw consent: opt out of analytics and marketing at any time

To exercise any right, email privacy@finance.greentheris.com. We respond within 30 days (15 days for Nigerian NDPA requests).

10. International Transfers

We operate globally. Your data may be processed in countries outside your own. For EU/EEA users, transfers to non-adequate countries are protected by Standard Contractual Clauses (SCCs). For other users, we apply equivalent protections contractually.

11. Children

The Platform is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

12. Changes to This Policy

We will notify registered users by email of material changes to this policy at least 14 days before they take effect. Continued use after that date constitutes acceptance of the updated policy.