Legal document
What data we collect, why we use it, who we share it with, and what rights you have over it.
1. Applicable legal framework
No comprehensive law yet
A bill is before Congress (pushed by the IAIP, inspired by the European model) but hasn't passed yet. In the meantime, we voluntarily adopt EU GDPR principles as our own standard — not because Honduran law requires it today, but as best practice, since we serve EU users directly.
2. What data we collect
| Category | Data | From whom |
|---|---|---|
| Basic registration | Name, email | Predictor, Founder, Investor |
| Startup data | Business metrics, financials, founder video | Founder |
| KYC verification | ID document, biometrics, via Sumsub | Predictor, Founder |
| Payment data | Processed by Synctera / dLocal — we never store your full card | Everyone |
| Anti-bot | Technical verification (Cloudflare Turnstile) | Everyone |
| Delivery and engagement (via Resend) | All registered users |
Sensitive data, handled separately
KYC data is sensitive data. It's used exclusively to enable payout of winnings — never for marketing, never shared outside that purpose.
3. Why we use your data
4. Who we share your data with
| Provider | Role |
|---|---|
| Supabase | Primary database |
| Sumsub | Identity verification (KYC) |
| Synctera / dLocal | Payment processing |
| Resend | Email delivery |
| Cloudflare | Anti-bot verification (Turnstile) |
We never sell your personal data to third parties for advertising, under any circumstances.
5. Cookies and similar technologies
We use Cloudflare Turnstile as anti-bot verification when submitting forms — a technically necessary cookie for the site to function, not an advertising tracker. We don't use analytics or marketing pixels today. If we add any in the future, this policy will be updated before we activate them.
6. International data transfers
Platia Capital S.A. operates from Honduras, but several providers (Supabase, Resend, Synctera, Sumsub, Cloudflare) process data in the US or other jurisdictions. If you're an EU user, your data may transfer outside the European Economic Area under each provider's standard contractual safeguards.
Pending legal review
Confirming whether an EU representative must be designated under GDPR Article 27, given we serve EU users without an EU establishment.
7. Your rights
Regardless of your jurisdiction, we recognize: access, rectification, erasure, objection, and portability of your data. To exercise them, write to contact@investgroup.platiacapital.com.
BetaMarket™ is not directed at anyone under 18. Also see our Terms of Service.