Last updated: July 13, 2026
This Data Policy supplements our Privacy Policy and provides detailed information about how A3 Capital collects, processes, and manages personal data on this website. This policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (India) and the UK/EU General Data Protection Regulation (GDPR).
A3 Capital (Mitcon AI & Deeptech Fund) is the Data Controller responsible for your personal data. For data protection enquiries: sriram@a3capital.in
| Category | Data Items | Source |
|---|---|---|
| Identity | Full name, email, LinkedIn URL | Provided by user |
| Investor Profile | Country, investor type, how heard, referrer | Provided by user |
| KYC Documents | ID proof, address proof, accreditation, source of funds | Uploaded by user |
| Startup Information | Startup name, description, pitch deck PDF | Provided by user |
| Technical | IP address, browser, timestamps, access logs | Automated collection |
| Compliance Records | R1–R5 register entries, NDA records, document access logs | Generated by system |
| Activity | Purpose | Legal Basis |
|---|---|---|
| Registration processing | Evaluate investor eligibility | Consent |
| Jurisdiction routing | Assign correct regulatory pathway | Legitimate interest |
| KYC verification | Regulatory compliance (SEBI, AML) | Legal obligation |
| Document access logging | Audit trail for fund materials | Legal obligation |
| Pitch deck evaluation | Assess startup for potential investment | Consent |
| Compliance register maintenance | SEBI AIF regulatory records | Legal obligation |
Consent is obtained at the point of data collection through explicit checkboxes. You must affirmatively check the consent box before your data is submitted. Consent can be withdrawn at any time by contacting sriram@a3capital.in. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
For data protection matters, contact: sriram@a3capital.in
In the event of a personal data breach, A3 Capital will notify the relevant data protection authority and affected individuals within 72 hours of becoming aware of the breach, in accordance with DPDP Act and GDPR requirements.
This website uses automated processing for jurisdiction routing (assigning investors to the correct regulatory pathway based on country of residence). This does not constitute automated decision-making with legal or significant effects. All investment eligibility decisions involve human review.
Data may be transferred to and processed in countries outside your jurisdiction of residence, including India, the United States, and EU/EEA countries. Appropriate safeguards (including Standard Contractual Clauses where required) are in place to ensure adequate protection of your data during international transfers.
If you have a complaint about how we handle your personal data: