Privacy policy

Last updated: 26 August 2026

Roots Ventures OS ("the Service") is a private operations tool built and operated by Ekalon Solutions for Roots Ventures Lp, a venture capital fund based in Mumbai, India. Access is restricted to fund personnel and specifically authorised users. This policy explains what data the Service accesses, how it is used, and the choices you have.

Information we access

When you sign in with Google, we receive your basic profile: name, email address, profile photo and workspace domain.

With your consent during sign-in, the Service is granted access to your Google Workspace: Gmail messages and attachments (including sending, labelling, archiving and moving messages to the bin), Google Drive files (including uploading, organising and deleting), Google Sheets (including editing), and Google Calendar events (including creating meetings with Google Meet links, rescheduling and cancelling). Actions that change your account — sending an email, editing a sheet, moving a file, creating or cancelling an event — happen only when you take that action in the app. The Service never sends, changes or deletes anything on its own, and it cannot permanently delete Gmail messages (bin only).

How we use it

The Service keeps a synchronised copy of your firm's working data on our servers so that your team can search it instantly, see it organised by deal and portfolio company, and receive automatic assistance. For authorised firm accounts, this synchronised copy includes: Gmail messages and attachments, Google Drive file listings, the contents of spreadsheets your firm marks as tracked, and calendar events. Synchronisation runs only for firm accounts on an approved workspace domain — never for other Google accounts.

The Service uses AI (Anthropic's Claude API, under commercial terms that do not permit the data to be used for training AI models) to assist with this data: new inbound emails are automatically categorised and summarised, with key figures extracted; inbound pitches create draft deal records; edits to tracked spreadsheets update portfolio metrics. AI output is always a suggestion inside the app — a draft reply is never sent, and no data leaves your account, without a person clicking to do it.

What we store

We store: your account profile (name, email, photo, role); the OAuth tokens needed to maintain your Google connection, encrypted at rest; the synchronised working data described above; AI outputs (email summaries and categories, extracted deal and portfolio datapoints, meeting summaries); and in-app records your team creates (meetings, notes, companies, notifications). All of it is held on access-controlled servers and used solely to provide the Service to your firm.

Access within your firm

Deals, portfolio companies, documents and trackers are shared across your firm's team. Members and firm administrators see their own mailbox and documents only. Platform super administrators can additionally open a colleague's mailbox or documents in read-only mode — they cannot send, delete or alter another person's mail or files — and every such visit is recorded in the activity log.

Google user data — Limited Use

Roots Ventures OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it except to provide the features described here, for security, or to comply with law. Humans do not read your data except with your consent, where necessary for security or abuse investigation, or where required by law.

Sharing

We do not sell personal data. The Service relies on a small set of processors: Google (Workspace APIs and sign-in), Anthropic (AI triage, only when you request it), and our hosting infrastructure. Each processes data only to provide the Service.

Retention and deletion

Disconnecting Google inside the Service deletes the stored tokens immediately and stops all synchronisation. You can also revoke the Service's access at any time from your Google account permissions. To have your account, its synchronised data and AI outputs deleted, email us and we will action it within 30 days. When a firm leaves the Service, all of its stored data is deleted.

Security

All traffic is encrypted in transit (HTTPS). Sign-in is limited to the Roots Ventures workspace domain and named authorised accounts, and API access requires an authenticated session.

Changes and contact

We will update this page if our practices change. Questions or requests: [email protected].