SPECTRUM

Privacy Policy

Last updated: 15 October 2026

SPECTRUM Scaling (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable data protection law.

Who We Are

SPECTRUM Scaling operates the website at spectrumscaling.com and the SPECTRUM platform, a private, invite-only platform for foodtech CEOs. For data protection purposes, we are the data controller. You can reach us at team@spectrumscaling.com.

What Data We Collect

We collect personal data you provide directly when you: request access through our sign-up form (your name, email address, company and region and, optionally, your company website and a phone number); contact us via email or our contact form (your name, email address, and the content of your message); sign in to the platform (your email address and authentication credentials); upload documents to your private dataroom or use our analysis tools (the documents and inputs you provide); or are invited by a member to their investor Q&A (your name, email address and the questions you ask). We do not collect sensitive personal data such as health information, political opinions, or financial account details.

How We Use Your Data

We use your personal data to: provide you with access to the SPECTRUM platform and its intelligence, analysis tools and dataroom; send you login credentials and service communications related to your account; respond to enquiries you submit via the contact form or email; and improve the quality and relevance of our research and platform. We process your data on the legal basis of legitimate interests (providing the service you requested) and, where applicable, your consent.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request deletion, we will remove your data within 30 days unless we are required to retain it by law.

Cookies

Our website uses cookies and browser local storage to maintain your login session and remember your preferences. On the public website we use one optional analytics cookie (Google Analytics) to understand how the site is used. It is only set after you accept it in the cookie banner, and you can withdraw consent at any time via the cookie settings link at the bottom of this page. We do not use advertising cookies or cross-site tracking.

Third-Party Services

We use the following services to operate our platform. Vercel: website hosting and deployment (servers in the United States and European Union, GDPR compliance through standard contractual clauses). Railway: hosting for our background processing workers. Supabase: secure database, authentication and file storage (data stored on servers in the European Union). Anthropic: AI processing of the documents and inputs you submit to our analysis tools; Anthropic does not train its models on this data. Voyage AI: text embeddings that power search across your own documents. AssemblyAI: transcription of meeting recordings you upload. Resend: transactional email delivery. Twilio: SMS notifications where you have provided a mobile number, unless you turn SMS notifications off in your settings. Google Analytics: optional website analytics, only with your consent. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to the platform is protected by password authentication and is limited to invited, approved members.

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights: Access: you can request a copy of the personal data we hold about you. Rectification: you can ask us to correct inaccurate or incomplete data. Erasure: you can ask us to delete your personal data (right to be forgotten). Portability: you can request your data in a structured, machine-readable format. Objection: you can object to processing based on legitimate interests. Restriction: you can request that we limit how we use your data while a dispute is resolved. To exercise any of these rights, contact us at team@spectrumscaling.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes to This Policy

We may update this privacy policy from time to time. We will publish the revised version on this page with an updated date. Material changes will be communicated by email where appropriate.

Contact

For any questions about this privacy policy or how we handle your data, please contact us at team@spectrumscaling.com.