Privacy Policy

Koru Capital, together with its affiliated general partner and management entities ("Koru," "we," "us," or "our"), respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit koru.vc (the "Site"), contact us, submit materials to us, or otherwise interact with us.

This Privacy Policy does not apply to information about investors in funds managed by Koru in their capacity as fund investors. That information is governed by the privacy notice delivered with fund subscription documents, consistent with Regulation S-P and the Gramm-Leach-Bliley Act.

1. The Information We Collect

Information you provide directly. When you contact us through the Site, email us, submit a pitch or company materials, subscribe to communications, or otherwise correspond with us, we collect the information you choose to provide. This may include your name, email address, phone number, company name and role, and the contents of your message or materials.

Information collected automatically. When you visit the Site, we and our service providers automatically collect certain information through cookies and similar technologies, including IP address, browser type, device information, operating system, referring URLs, pages viewed, and the dates and times of visits. We use HubSpot and may use other analytics and marketing tools that place cookies or similar identifiers on your device. See Section 5 (Cookies).

Information from other sources. We may receive information about you from publicly available sources (such as company websites, press coverage, and professional networking platforms), from data providers and databases used in our investment research, and from referrals and introductions made by third parties.

2. How We Use Personal Information

We use personal information to:

Operate, maintain, and improve the Site;
Respond to inquiries and communicate with you;
Evaluate investment opportunities and conduct diligence on companies and founders;
Maintain our contact and relationship management systems;
Send newsletters, updates, and other communications you have requested or that we believe may interest you (you may opt out at any time);
Comply with legal, regulatory, and contractual obligations; and
Protect the security and integrity of our Site, systems, and business.

3. How We Share Personal Information

We do not sell personal information. We may share personal information with:

Service providers that perform services on our behalf, such as website hosting, customer relationship management (including HubSpot), fund administration, email, analytics, cloud storage, and IT and security providers, in each case under obligations to protect the information;

Professional advisors, including lawyers, accountants, auditors, and consultants;

Co-investors and transaction counterparties, where relevant to evaluating or completing an investment, and consistent with any confidentiality obligations;

Regulators, courts, and law enforcement, where required by law, regulation, subpoena, or legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others; and

Successors in interest, in connection with any merger, reorganization, financing, or sale of all or part of our business.

4. Legal Bases (EU/UK Visitors)

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases: performance of or steps toward a contract; our legitimate interests in operating our business, evaluating investments, and communicating with contacts; compliance with legal obligations; and consent, where required (for example, for certain cookies or marketing). You may withdraw consent at any time.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies, including those set by HubSpot, to operate the Site, understand how visitors use it, and support our communications. You can manage cookies through your browser settings, and where required by law, through the consent tool presented on the Site. Disabling cookies may affect Site functionality. For more information about the cookies we use, contact us at the address below.

6. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

Access the personal information we hold about you;
Request correction of inaccurate information;
Request deletion of your information;
Object to or request restriction of certain processing;
Receive a copy of your information in a portable format;
Opt out of marketing communications at any time (via the unsubscribe link in our emails or by contacting us); and
Not receive discriminatory treatment for exercising your rights.

Residents of California and certain other U.S. states may have additional rights under applicable state privacy laws, including the right to know the categories of personal information collected and disclosed. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under California law.

To exercise any of these rights, contact us at contact@koru.vc. We may need to verify your identity before responding. If you are in the EU or UK, you may also lodge a complaint with your local supervisory authority.

7. Data Retention

We retain personal information for as long as needed for the purposes described in this Policy, including to maintain business records, comply with legal and regulatory obligations (including books-and-records requirements applicable to investment advisers), resolve disputes, and enforce agreements. Retention periods vary by record type.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

The Site is operated from the United States, and information we collect is processed in the United States. If you visit the Site from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.

10. Children

The Site is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Third-Party Links

The Site contains links to third-party websites, including portfolio company sites, LinkedIn, and YouTube. We are not responsible for the privacy practices of those sites, and this Policy does not apply to them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Material changes will be communicated as required by law.

13. Contact Us

Questions about this Privacy Policy or our data practices may be directed to:

contact@koru.vc

Effective Date: 7/16/2026