How Raise Coordinator handles your data
Raise Coordinator is an invite-only workspace where a company and the people helping it coordinate a fundraise. It is operated by Bison Ventures. Last updated: September 8, 2026.
Your network stays yours
Connections you import — from Affinity, Happenstance, Google, or a LinkedIn/Google CSV — are visible only to you. Nobody on a raise (including its owners) can see your contacts. A raise learns about one specific relationship only when you explicitly choose to share that match. Disconnecting a source deletes its API key and every connection it brought in; re-uploading a file replaces the previous upload.
If you connect a Google account
We request read-only access to your contacts, use it solely to match the people you know against the investor firms on your raises, and store only names, email addresses, organizations, and titles. We never read your email messages, never share or sell contact data, and never send it to AI services. Google contact data is used only to show you your own potential paths into investor firms; no human at Raise Coordinator reads it except to debug a problem you report. When you disconnect, we revoke our access with Google and delete the token and every contact it brought in. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How we protect your data
All traffic to Raise Coordinator and between the app and its database uses TLS encryption. Data is encrypted at rest by our database provider (Neon, AES-256), and OAuth tokens and connector API keys are additionally encrypted by the application (AES-256-GCM) before they are stored, so a copy of the database alone cannot be used to reach your Google account. Secrets live in the hosting provider's encrypted configuration, not in code.
Access is controlled per person: every request is authenticated, contacts are scoped to the account that imported them, and raise content is scoped by membership and role. The service is invite-only, so there is no public sign-up. Operator access to production systems is limited to the people who run the service and is protected by multi-factor authentication. We review the code that touches contact data before it ships, and we log sign-ins and connector activity so unusual access can be investigated.
If we ever learn of a breach that affects your data, we will notify you by email without undue delay and no later than 72 hours after we confirm it, and tell you what was affected and what we are doing about it.
Raise data
What you enter about a raise (targets, notes, funnel status) is visible to that raise's members according to their role, and to the platform operator for support and product operations only. Connector API keys are encrypted at rest. We collect basic usage telemetry (sign-ins, features used) to run and improve the product; we don't sell data or share individual usage with third parties.
AI processing
Some features are powered by AI: investor research, list normalization, outreach-email drafting, and feedback triage send the relevant raise content (profile text, uploaded deck text, feedback) to Anthropic's Claude API for processing. Anthropic does not use this API data to train its models. Your personal network connections are never sent to AI services.
Where data lives and how long
The service runs on Vercel (hosting), Neon (database, US), Anthropic (AI processing), and Resend (email delivery). Data is retained while your account or raise is active; archived raises are kept so a company can reuse them for a future round. Google contact data is refreshed on each sync (each sync replaces the previous copy) and is deleted immediately when you disconnect Google or delete your account. Ask and we delete everything else within 30 days.
Questions or deletion
Email caleb@bison.vc to ask anything or to have your account and data deleted.