Skip to document
EvalLens × Yellow← Back to the event

EVENT DOCUMENTS · VERSION 2.3

Event Privacy Notice

How Pitch Gauntlet: Madrid Edition handles your materials, personal information and optional choices.

Contents

Version 2.3 · 5 October 2026

Summary

EvalLens uses your Google sign-in details, application and submitted deck to administer this programme, prepare your private report and select live Teams. By submitting under the Event Terms, your deck may be published by EvalLens and Yellow Global Limited whether or not you are selected for the live programme. If you join the live programme, the designated submitted deck, pitch and Q&A are broadcast and recorded. Your analytical report is not automatically published. Newsletters, investor introductions, personal testimonials, approval of private report excerpts and contribution to EvalLens model training have separate choices. Entry and public-deck permission do not opt you into training. Only selected authorized deck content or cleaned pitch text is eligible; raw video/audio and private reports are not automatically included. Google Analytics on the Event page runs only if you allow it in the cookie banner. Contact privacy@evallens.io for privacy questions or requests.

This notice applies when presented with the Event application. It supplements the platform Privacy Policy; it does not retroactively authorize new uses of earlier private submissions.

1. Who is responsible

The controller for EvalLens's application and Event administration is Individual Entrepreneur Yaroslav Volovyi, identification number 305676649, registered in Georgia. Address: Gotua Street N26, Floor 10, Flat N37, Saburtalo District, Tbilisi, Georgia. Privacy contact: privacy@evallens.io. Participation contact: legal@evallens.io.

Yellow is the promotional and prize partner. The named Yellow recipient for public-material and personal-testimonial permissions is Yellow Global Limited, identified in Yellow Capital's website policy. This is a public website identification, not verification that the company is the prize-service provider. When it determines its own promotional publications and their purposes, it is responsible for that processing and rights requests under the applicable controller rules. This status does not give Yellow general access to applications or contacts. A Yellow-affiliated person appointed as a judge receives only the materials needed for that role under the same access and confidentiality rules as other judges. Sponsor placement does not purchase the applicant database.

R2Copilot supplies the confirmed award of 100,000,000 AI usage tokens per month for six months to each of the five highest-ranked live Teams, subject to a registered legal entity, company website and company-domain email. These conditions concern this prize, not the report or general application. Routine onboarding information is limited to company identity, website, company-domain contact and verified winning status; no private deck or report is included automatically.

Before an approved prize-related disclosure, the winner receives the service provider's legal identity, privacy notice and the exact information to be transferred. A provider processing information for its own onboarding and service purposes is responsible for that processing under its disclosed notice. A brand name or the contact of a coordinator does not identify that legal provider. Yellow coordination: Pedro, pedro@yellow.com; official Yellow Capital contact form.

The villa gathering is arranged separately through Pedro's side, not operated by EvalLens. The actual local host must identify itself and explain its own guest-registration, safety and recording processing before collecting on-site attendee information. Event application does not automatically transmit the applicant database to the host. If EvalLens itself handles a particular on-site data flow, its role and the sharing basis must be disclosed before that flow begins.

For any processing jointly determined by EvalLens and a partner, responsibilities must reflect their actual decisions and activities. An appropriate arrangement and any required summary of joint responsibilities must be made available before that joint processing. Separate-party wording does not displace joint responsibility where the facts and law establish it.

2. Information and sources

We receive basic profile information, such as name and email, when you sign in through Google. We collect your contact name, business email and role; the contracting participant's identity; project name, description, stage, URL and logo; your English PDF deck; application answers; correspondence; accepted terms version and time; and your optional choices and their history.

We generate validation and programme statuses, AI-assisted reports, first-pass assessments and selection records. For a separate training opt-in, we also record the authorized asset/version, rights holder, the actual person's choice and its history, permitted scope, dataset/run/model linkage and any withdrawal/remediation record. Selected source content may be redacted, extracted and annotated into internal training, validation and test examples; this is not automatic for all applications. Live Teams also provide revised decks, speaker details and technical-check information; the programme produces judge scores, pitch and Q&A recordings, image and voice. The platform also processes technical data such as IP address, browser information and security logs as explained in its main policy.

Information may come from the applicant, another authorized Team representative, Google, judges or Event personnel. If you submit another person's information, ensure you are entitled to do so and give that person this notice. Do not include credentials, trade secrets, unnecessary personal information or sensitive personal data. We do not request special-category data or identity documents from every applicant.

3. Purposes and legal bases

Where GDPR applies, the following bases govern the described activities. A content licence under the Participation Terms is separate from the legal basis for processing personal data.

PurposeBasis and limits

Authenticate, process an application, provide the report and necessary programme correspondence

Performance of our agreement where you contract personally; legitimate interests in administering the corporate Team's requested participation where you represent a company

Review decks, prepare assessments, select Teams and administer scoring

The same contract or corporate-representative legitimate-interest basis; human organizers decide admission and verify the final result

Secure accounts, prevent manipulation and investigate technical issues

Legitimate interests in protecting participants and operating a secure and fair programme

Measure how visitors find and use the Event page with Google Analytics

Your consent, given in the cookie banner before any analytics runs; you can withdraw it at any time via Cookie settings in the page footer

Display project identity and document participation/results

Legitimate interests in identifying participating projects and documenting the competition, limited to relevant professional information; the Terms provide the project-material licence

Publish a submitted deck or use it for promotion, including a non-live Team

The project-content licence is granted at submission. It does not authorize unrestricted personal-data marketing; identifiable people require the applicable personal permission or another documented lawful basis before publication. Otherwise their details must be omitted or redacted

Broadcast and retain an identifiable speaker's image, voice and live contribution

The speaker's specific recorded permission and consent to the disclosed live/recording use; this is obtained from that person, not inferred from a colleague's application

Send requested introduction proposals and share an approved introduction

Specific consent: permission to propose introductions is separate from approval of a named recipient and the exact information shared

EvalLens newsletter

Separate optional email consent; refusal has no effect on the report, selection or prizes

Publish real testimonials and approved report material

Separate personal consent naming EvalLens and Yellow Global Limited, content, purposes and periods. Feedback must be supplied for testimonial use; a private report requires precise-material approval

Optional development, training, fine-tuning and evaluation of EvalLens pitch-analysis models

Separate, informed, optional consent for the actual individual's own personal data in the specifically selected material; the Team's separate content licence covers project-material rights, not other people's data. Participation/report delivery is not the legal basis for this optional purpose. Third-party personal data is excluded before dataset admission; preparatory processing also needs a lawful basis.

Minimal training-permission and model-provenance evidence

Legitimate interests in demonstrating authorized continuing model use, respecting withdrawals and defending claims, subject to necessity, minimisation and annual review; this does not authorize continued training on withdrawn material.

Respect opt-outs and retain limited evidence to address disputes

Legitimate interests in preventing unwanted contact, demonstrating permissions and establishing or defending claims; legal obligations where applicable

Our legitimate interests do not override your rights. We limit data and recipients to the purpose, restrict private access, separate marketing and permit objections. You can request information about the applicable balancing assessment. No application or Google sign-in creates a newsletter subscription.

4. AI and human review

AI analyses submitted materials to generate reports, questions and a first-pass assessment. These outputs can be mistaken or incomplete and do not independently verify every external claim. Human organizers decide admission; the first-pass internal order is not the public final ranking.

For the live competition, the normal result is the equal-weight mean of one Unicorn total and each eligible human judge's total. The minimum human quorum, conflicts, score lock, error-review process and uniform human-only fallback for an AI outage are specified in section 4 of the Participation Terms. There is no AI-only winner. You may ask for a human review of a reported factual, technical or procedural error at legal@evallens.io; applicable statutory rights remain unaffected by the competition's correction window.

The ordinary submitted-content licence authorizes Event analysis and the specified publications, not model training. Section 6.1 of the Terms provides a separate optional training licence and personal choice specifically for EvalLens model development. There is no permission for independent training by an external AI provider or partner. This notice does not provide a warranty of an AI provider's technical implementation or a zero-retention guarantee. The AI Unicorn is an AI presenter and scorer, not a human judge or investment adviser; the Terms explain moderation, factual-error review and limits of reliance.

4.1 Optional EvalLens model training

EvalLens (Individual Entrepreneur Yaroslav Volovyi) is the controller for its optional model-development programme. Its purpose is to develop, train, fine-tune and evaluate models that understand startup pitches, assess project evidence and generate pitch feedback and preparation questions. It may commercialize the resulting models through its software, subscriptions and APIs. This purpose is separate from producing your Event report; refusal or withdrawal does not affect participation or any benefit.

Only the exact deck version or cleaned text transcript selected in the training choice may enter this programme. Authorized deck content includes text and project charts/diagrams, not personal photographs; a transcript includes the consenting speaker's selected pitch text and, only if selected, their own Q&A answers. Private analytical reports, actual jury scores, judges' comments, account/contact fields, support messages, raw recordings, voices/faces and other people's contributions are excluded. Relevant limited professional information about the actual consenting person may remain only within the clearly displayed scope; unnecessary identifiers, third-party personal data, sensitive data and confidential material must be removed before dataset use. Cleaning itself must have a lawful basis, and deletion of names is not proof of anonymity. A company representative does not consent for other individuals.

Your training choice identifies the material, rights holder and actual consenting person. A revised file or later transcript requires its own recorded authorization; a general Event acceptance or earlier broadcast/publication permission cannot substitute for it. When the speaker differs from the applicant, the speaker grants any required rights and personal consent for their own text. Existing submissions are excluded unless fresh specific permission is obtained.

EvalLens may create internal extracted examples and annotations from permitted material for training, validation and testing, using disclosed processors acting only on its instructions. This contribution does not authorize sale/publication of the dataset, release of trained weights or reuse by a contractor for its independently used models. Actual recipients, relevant processing countries and transfer safeguards must be disclosed before the choice is enabled; a general reference to "our providers" is not a substitute for that information.

Source copies and derived examples may be used for new runs only until 31 October 2027, or earlier withdrawal. Continuing commercial operation of lawfully trained models can extend beyond that date only within section 6.1: no automatic right to retain personal data or reproduce protected source content. EvalLens must document an assessment of retention/extraction risks and address any continuing personal-data processing before continued use after consent ends. Models are not presumed anonymous. Where needed, affected deployment must be restricted or suspended and appropriate deletion, retraining or unlearning measures taken; this notice does not claim an implemented instant-unlearning capability.

Use the training preference control or privacy@evallens.io to withdraw or request action. Affected examples must be excluded from new runs and pending jobs, processors notified and relevant datasets/models traced. Earlier lawful use is not made unlawful by withdrawal, but withdrawal cannot be bypassed by silently changing the legal basis or by treating learned parameters as automatically anonymous. The response explains source removal and any necessary model measures under the applicable rights and response deadlines.

5. What becomes public

The submitted deck may be published in full or as excerpts by EvalLens and Yellow Global Limited, used in Event coverage, presentations, press releases, case studies and promotional materials, whether or not the Team receives a live slot. This is disclosed before upload and acceptance. Remove confidential information, credentials and unnecessary personal data. The project-material licence does not authorize public use of another individual's image, data or endorsement without the applicable permission or lawful basis; such content must be omitted or redacted where needed.

For the live pitch, an accepted replacement supersedes the original submitted file. A separate public-deck upload is not required. Earlier versions are not used for new publications once superseded; copies already lawfully published may remain in the permitted archive. Submissions collected under a private-only notice require new authorization for public use.

Form contact details, account information, private support correspondence and analytical reports are not automatically public. A precise report excerpt or finding may be used after separate approval; a complete report needs approval covering the complete report. For the initial public roster, live Teams are listed; the deck licence does not require publication of every applicant. Controlled publication is subject to a review for apparent rights/privacy issues; a disputed asset may be held, redacted or removed while the issue is assessed. Rights complaints may be sent to legal@evallens.io or privacy@evallens.io.

An individual can separately authorize EvalLens and Yellow Global Limited to use their feedback expressly submitted as a testimonial, their name and professional role, and any photo or recording they specifically authorize. This permits faithful quotation, shortening and translation within the disclosed scope without approving each reuse again; it does not permit fabricated praise, changed meaning or an endorsement never given. Another applicant cannot grant this permission on the author's behalf. Declining does not affect the report, selection or prizes.

Each live speaker separately confirms broadcast/recording permission after being shown the actual channels. Declining a live appearance does not remove the private report; a Team may nominate another speaker. Individuals can withdraw consent for future consent-based use through privacy@evallens.io. EvalLens coordinates requests affecting Yellow where required; each publisher acts on its controlled copies. Independent reposts cannot be guaranteed to disappear. Earlier lawful processing is not made unlawful by withdrawal.

6. Recipients and international processing

Authorized EvalLens personnel and appointed judges receive only the materials needed for their role. Private information is not shared with sponsors merely because they support the Event. A named investor receives only the profile, contact fields or deck version approved for that introduction; a private report requires separate approval.

Event processing may require authentication, hosting/storage, AI inference, transactional email and broadcasting providers. Before applications are accepted, the Event page must provide a current processing annex or linked platform notice identifying the actual recipients or sufficiently specific recipient categories, relevant processing countries, any intended transfers outside the EEA and the applicable transfer mechanism and access to safeguards. The platform provider list is a reference to be reconciled with the actual Event configuration, not evidence that named services, regions or safeguards are deployed. No transfer or new provider use is authorized merely by accepting these Terms, and no unknown safeguard is represented as implemented. Contact privacy@evallens.io for the disclosed arrangements.

If you allow analytics, Google Analytics 4 is provided by Google Ireland Limited. Google may process this data outside the EEA, including in the United States, under the safeguards in its data processing terms. Advertising features are not enabled for this measurement, and advertising consent signals stay denied.

Training processors need their own purpose-specific disclosure and contractual restrictions before receiving any training data. If that configuration is not ready, the training option must remain disabled while ordinary Event applications may proceed only if their separate release conditions are satisfied.

This recipient/transfer information is a publication dependency, not optional legal boilerplate. The required annex or notice must be complete and available before collecting Event applications; requests by email are not a substitute for the advance disclosure.

The final live invitation identifies the actual broadcast channels. A public broadcast is accessible internationally; external platforms also process visitor/account data under their own notices. Opening an external platform is distinct from agreeing to give EvalLens access to an address book or social account.

Yellow email subscription, if offered, requires a separately identified legal sender and its own notice and choice. Without that separate choice, no subscriber-data transfer occurs. A requested prize handover or investor introduction creates no marketing subscription. Information may also be disclosed where required by applicable law or valid legal process, limited to what is necessary.

7. Retention

The programme closes for retention purposes on 31 October 2026. Training has its own source-use deadline of 31 October 2027 and its own limited model/evidence rules below; it is not governed by the promotional/archival windows. The 24-month publication period and three-year archive both run from that date; the archive is not an additional three years after promotional use. Public-use assets are segregated from private analytical records. An unresolved individual prize or dispute does not extend everyone's retention period.

Information or useMaximum ordinary period

Private analytical deck copies, reports and raw evaluation records

Until 31 October 2027, with earlier deletion where required

Optional training-source copies and source-derived training, validation and test examples

Until 31 October 2027 or earlier withdrawal; no fresh runs after expiry, including with source-derived examples merely stripped of names. Restricted backups and lawful evidence exceptions do not authorize active reuse.

Resulting models and learned parameters

No fixed contractual end date for compliant commercial operation under Terms section 6.1; continued personal-data processing requires an applicable lawful basis, and expiry/withdrawal triggers assessment and necessary model measures. This is not source-dataset retention permission.

Minimal training permission, asset/version and remediation evidence

While necessary to evidence continuing authorized model use, with annual review, and up to three years after that use or a related dispute obligation ends; no full deck/transcript retained merely as evidence.

New publication, distribution and promotional reuse of submitted decks, testimonials, approved report material and live recordings

24 months from programme closure, through 31 October 2028, within the content licence and applicable personal permissions

Existing public recording, results and recaps

Historical archive until 31 October 2029, reviewed annually; this does not permit new campaigns after the promotional period

Permission to receive new introduction proposals

Ninety days after programme closure, unless separately renewed

EvalLens newsletter contact

Until withdrawal or twenty-four months after the last affirmative subscription/renewal; opening emails does not renew consent

Minimal acceptance, permission and dispute evidence

Up to three years after the relevant obligation or permission ends, only while necessary and subject to applicable legal requirements

Suppression identifier

Only while necessary to enforce the opt-out in the relevant marketing system, with annual review

Google Analytics data, only with consent

Up to fourteen months in Google Analytics, then deleted automatically; the analytics cookies expire after up to two years or are deleted when you withdraw consent

Platform account, backups and security logs

The actual periods or determination criteria must be disclosed in the applicable platform notice/processing annex before collection; this Event notice does not assert an unverified ninety-day deletion or thirty-five-day backup cycle

At expiry we remove or effectively anonymize controlled records. Relevant evidence under a documented legal hold is segregated, access-restricted and removed when no longer needed. Keeping proof of acceptance does not justify retaining the entire deck or report. The specific training-evidence rule above is separate from ordinary Event evidence; each purpose must be justified independently. The limited ordinary Event evidence period is distinct from the public archive: a record necessary to evidence a permission ending on 31 October 2029 may be retained until 31 October 2032. This is not an extension of public use or a default period for all records. Restoring a backup must not reactivate withdrawn permissions or erased information. Testimonial and report-material permissions use the same publication end date of 31 October 2028 and archive end date of 31 October 2029, unless a separately granted permission is narrower. The independent prize provider's own retention is explained in its notice.

8. Communications, cookies and security

Necessary Event emails cover receipt, corrections, report delivery, selection, preparation, joining instructions, results and prize administration; they are not permission for unrelated advertising. Marketing emails identify their sender and offer a free unsubscribe without sign-in. You may also write to privacy@evallens.io. An opt-out stops queued marketing but does not prevent necessary correspondence about an ongoing application or prize.

Email permission does not authorize automated LinkedIn connections, Telegram/WhatsApp groups, telephone marketing or access to an address book. You may separately request a report discussion in a channel you choose.

The platform privacy/cookie policy describes authentication and security cookies. An Event acceptance or newsletter checkbox does not by itself authorize advertising tracking or optional embedded-platform cookies. Information and any required choices must be presented before such technologies operate.

With your consent, the Event page uses Google Analytics 4 to understand how visitors find and use it: page views, scrolling, outbound links, clicks on "Apply to pitch" and a received application. These events do not include your name, email or deck content. Analytics loads only after you choose "Allow analytics" in the cookie banner and then sets first-party cookies (_ga and ga followed by an identifier). If you decline, no analytics request is sent. You can change or withdraw your choice at any time via "Cookie settings" in the page footer; withdrawal stops measurement and deletes these cookies.

Private materials are intended only for the authorized roles and purposes described here. The Operator must apply technical and organizational measures appropriate to the actual processing risks and applicable law. No internet system can guarantee absolute security; this notice makes no claim of a completed security audit, a specific unverified configuration or error-free operation. Commercial liability limitations do not remove mandatory privacy, security, incident-response or rights-handling duties.

9. Your rights and contact

Depending on applicable law, you may request access, correction, erasure, restriction or portability; object to legitimate-interest processing and direct marketing; and withdraw consent. Contact privacy@evallens.io. We may request proportionate information needed to verify the requester. Where GDPR applies, we normally respond within one month; if its lawful extension conditions apply, we explain the extension and reasons within that first month.

You may complain to a competent supervisory authority, including the Spanish Data Protection Agency where relevant, or the authority for your habitual residence or workplace. Internal contact or the competition's error window does not replace statutory remedies. Another Team member's acceptance cannot waive your rights.

The application and live-speaker roles are for adults aged eighteen or over. Do not submit children's personal information or include them as speakers. Material changes to this notice are communicated before the new use begins; any new consent needed is obtained separately.