Privacy Policy

Effective as of 06/18/2026

This Privacy Policy describes how Panther Hollow Strategies, LLC, operating as Panther Hollow Ventures (“we,” “us,” “our,” or the “Firm”), handles personal information that we collect through our digital properties that link to this Privacy Policy, including our website at pantherhollowventures.com and any associated subdomains (collectively, the “Service”), as well as through social media, our marketing activities, and other activities described in this Privacy Policy.

1. Personal Information We Collect

We adhere to the principle of data minimization, collecting only personal information reasonably necessary for our venture operations, accelerator administration, investor relations, and the delivery of the Alpha Daily newsletter. We collect personal information in the following categories:

Information you provide to us

• Contact data, such as your first and last name, email address, professional mailing address, professional title, and company name.
• Financial and project data, such as founder equity structures, technical whitepapers, tokenomics, and wallet addresses, provided when applying to our Canton Network accelerator program or engaging our administration services. Submitted project information is treated as high-confidentiality data and may be used for investment evaluation purposes.
• Investor data, such as accredited investor status, net worth representations, wire instructions, and tax identification information, provided in connection with fund subscription or investment engagement processes.
• Communications that you send us, such as questions, feedback, or inquiries submitted through our website or by email.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Automatic data collection

We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications, and other online services, such as:

• Device data, such as your computer’s or mobile device’s operating system type and version, browser type and version, screen resolution, device type, and IP address.
• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, and information about your activity on a page or screen.
• Communication interaction data, such as your interactions with our email or other communications — for example, whether you open and/or forward emails — which we may track through use of pixel tags embedded in our emails.

Cookies and similar technologies

Some of the automatic data collection described above is facilitated by the following technologies:

• Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites may include “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first-party” cookies that we place, and “third-party” cookies placed by our service providers (including Netlify and Vercel).
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

2. How We Use Your Personal Information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery

We may use your personal information to:

• Provide, operate, and improve the Service and our business.
• Communicate with you about the Service, including by sending announcements, updates, security alerts, and support and administrative messages.
• Communicate with you about events, programs, or accelerator activities in which you participate.
• Understand your needs and interests, and personalize your experience with the Service and our communications.
• Provide support for the Service, and respond to your requests, questions, and feedback.

Research and development

We may use your personal information for research and development purposes, including to analyze and improve the Service and our business. As part of these activities, we may create aggregated, de-identified, or otherwise anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

Cookies and tracking technologies

In addition to the other uses included in this section, we may use the automatic data collection technologies described in Section 1 for the following purposes:

• Technical operation: to allow the technical operation of the Service.
• Functionality: to enhance the performance and functionality of our services.
• Analytics: to help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails.

Compliance and protection

We may use your personal information to:

• Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
• Protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims).
• Audit our internal processes for compliance with legal and contractual requirements or our internal policies.
• Enforce the terms and conditions that govern the Service.
• Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.

Lawful basis (GDPR)

Where GDPR or UK GDPR applies, we process your personal information on the following lawful bases: performance of a contract (to fulfill obligations under accelerator or engagement agreements); legal obligation (to comply with AML, KYC, tax reporting, and securities law requirements); legitimate interests (to operate and improve our business, subject to your rights); and consent (for marketing communications such as the Alpha Daily newsletter, which you may withdraw at any time).

With your consent

In some cases, we may specifically ask for your consent to collect, use, or share your personal information, such as when required by law.

3. How We Share Your Personal Information

We do not sell personal data as defined under the California Consumer Privacy Act (CCPA) or any other applicable law. We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:

• Affiliates. Our affiliates and related entities, for purposes consistent with this Privacy Policy.
• Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, including hosting (Netlify, Vercel), workflow automation (Make.com), meeting intelligence (Fireflies.ai), relationship intelligence (Clay), data organization (Airtable), professional verification (LinkedIn), and secure document distribution (DocSend). All service providers are contractually bound to process data only under our instructions.
• Third parties designated by you. We may share your personal data with third parties where you have instructed us or provided your consent to do so.
• Professional advisors. Lawyers, auditors, accountants, and insurers, where necessary in the course of the professional services that they render to us.
• Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
• Business transferees. Acquirers and other relevant participants in business transactions (or negotiations of or due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of our business or assets.

4. Your Choices

Declining to provide information

We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Marketing communications

You may opt out of marketing communications, such as the Alpha Daily newsletter, by following the unsubscribe instructions contained in the email or by contacting us directly at the address in Section 13. Please note that you may continue to receive service-related and other non-marketing communications.

Cookies

Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly.

5. Other Sites and Services

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications, or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications, and online services you use.

6. Security

We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. These include access-controlled electronic systems, encryption for data at rest and in transit, multi-factor authentication for internal platforms, and regular security assessments.

Pursuant to the New York SHIELD Act (NY GBS § 899-bb), we maintain a comprehensive information security program that includes designated privacy oversight, employee training on data handling obligations, and continuous risk assessment of data flows and third-party processors. In the event of a security breach involving private information as defined under NY GBS § 899-aa, we will assess the incident within 72 hours of discovery and provide notification to affected individuals and relevant regulators in the most expedient time possible, and no later than the timeframes prescribed by applicable law.

However, security risk is inherent in all internet and information technologies, and we cannot guarantee the absolute security of your personal information.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. In accordance with standard investment management practices and applicable tax and regulatory requirements, we generally retain partner, investor, and client information for a minimum of six years following the termination of the relevant professional relationship.

Founder project data submitted through the accelerator application (including tokenomics, whitepapers, and equity structures) is retained for the duration of the evaluation period and, where an investment is made, for the life of the investment relationship plus six years. Where no investment is made, project data is retained for two years unless deletion is requested earlier pursuant to Section 9.

Data that no longer serves a legal or operational purpose is securely deleted or anonymized in a manner that prevents re-identification.

8. International Data Transfer

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and the UK International Data Transfer Addendum (IDTA) for transfers originating in the United Kingdom, to ensure that transferred data receives an equivalent level of protection regardless of geography. Where required, we conduct transfer impact assessments prior to such transfers.

9. Your Rights

We respect the data rights of individuals across all jurisdictions in which we operate. To exercise any of the rights described below, please contact us using the information in Section 13. We will respond to all verified requests within 30 days, or within any shorter period required by applicable law. We will not discriminate against you for exercising any of your rights.

EU/EEA residents — GDPR

If you are located in the European Economic Area, you have the right to access, rectify, or erase your personal data; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

UK residents — UK GDPR & Data Protection Act 2018

UK residents possess rights equivalent to those described above under the UK GDPR and the UK Data Protection Act 2018. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

California residents — CCPA & CPRA

California residents have the right to know what personal information is collected about them and how it is used; the right to request deletion of their personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of personal information. We do not sell personal data. To submit a California privacy rights request, contact us at the address in Section 13.

New York residents — NY SHIELD Act

New York residents are entitled to robust data security protections and timely notification of any unauthorized access to their private information, as described in Section 6.

10. Investment-Specific Privacy Notice (SEC Regulation S-P)

This notice is provided in accordance with SEC Regulation S-P (17 CFR Part 248) for prospective and actual investors of Panther Hollow Ventures.

We collect Nonpublic Personal Information (NPI) — including identification information, financial account details, wire instructions, and net worth representations — solely to facilitate fund operations and satisfy federal regulatory requirements. We maintain a fiduciary-level commitment to the confidentiality of all NPI and do not disclose NPI to non-affiliated third parties except as permitted or required by law, including disclosure to fund administrators, auditors, legal counsel, and other service providers necessary to service your investment.

Opt-Out Right: To the extent we share NPI with non-affiliated third parties in a manner that triggers an opt-out right under Regulation S-P, we will provide you with a separate notice and a reasonable opportunity to direct us not to make such disclosures. If you wish to limit the sharing of your NPI at any time, please contact us at the address in Section 13.

11. Children

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or by other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the effective date of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.

13. How to Contact Us

For questions or concerns regarding this Privacy Policy, or to exercise any of the data rights described in Section 9, please contact our Privacy Lead: legal@pantherhollowventures.com