How we handle
your information.

Who we are

Tirla Ventures is an early-stage investment firm based in Bengaluru, India. We are currently completing our entity registration. Once that is done we'll publish the registered name and address here, and this page will be updated.

Until then, reach us at hello@tirla.vc for anything on this page.

What we collect

Only what you choose to give us. If you fill in the Tirla Open application, that's:

• About you — name, email, LinkedIn, where you're building from, and who you're building with
• About the company — its name and website, what you're building, what exists today, and a link to it
• Your thinking — your insight, why now, where this goes, the evidence behind it, and what you've learned recently
• About the round — your stage, whether you've raised before, how much you're raising, and what it buys you
• Anything else you choose to tell us
• A deck or one-pager, if you choose to upload one — the file itself, its name and its size. This is optional; the application works perfectly well without it.

We also record the moment you ticked the consent box, and which version of this page you agreed to, so that both of us have a clear record of what you said yes to.

If you email us directly about investing, the Tirla Circle, or Tirla Signals, we have whatever you put in that email.

Why we collect it

• To read and evaluate your application
• To reply to you, and to keep talking if we're interested
• To answer investor enquiries about the Tirla Circle
• To send Tirla Signals, our newsletter — only if you've asked for it, and you can stop any time

We don't use your details for anything else, and we don't sell them or share them for advertising. Ever.

Your pitch stays confidential

This isn't something the law requires us to say. We're saying it because it's the thing founders care about most.

We treat what you send us as confidential — your answers and any deck you upload alike. We read it inside the investment team and we don't pass it outside that team — not to other founders, not to our network, not to another investor — without asking you first.

Like most venture firms, we don't sign NDAs at first contact. That's not a trick; it's because we see a lot of adjacent ideas and can't responsibly promise otherwise. So send us enough to make the opportunity obvious, and hold back the part that only matters once we're actually in a conversation. If we go deeper together, we're glad to sign something then.

Who else sees it

As few people as possible. We use a short list of services, and this is all of it:

• Our database provider stores your application. We've chosen to keep that database on servers in India. The provider is a company registered outside India, so its staff could in principle access it for support reasons.
• Our file storage holds any deck you upload. It sits with the same provider as our database, in a private store with no public address: the file cannot be reached by guessing a link, and the application page itself has no permission to read anything back out of it. Only the investment team can open it, through a link that expires.
• Our email provider stores our inbox, including any mail you send us and any alert telling us a new application arrived. Their servers may be outside India.
• Our website host keeps the standard server logs every web server writes — IP address, browser, pages visited. We don't read these for anything except keeping the site up.
• A public code network serves one small software library that the application page needs in order to reach our database. It sees the IP address of anyone who opens that page. It sets no cookies, and it never receives your application.
• Google Analytics tells us how many people visit and which pages they look at. It receives your IP address, your device and browser, and the pages you viewed. Google's servers are outside India. It never receives your application — we only send it page views, never anything you type into the form.

Nobody else. We don't use advertising networks, data brokers or lead-generation tools, and we never sell your details. If we add another tool later, we'll name it here before we start using it.

How long we keep it

If we don't take things forward, we delete your application and the thread around it within 24 months, and any deck you uploaded is deleted with it. If we do invest, or we're in an active conversation, we keep it for as long as that relationship runs and as long as the law requires afterwards.

You can ask us to delete it sooner. See below.

Your rights

You can ask us to:

• Show you what we hold about you
• Correct anything that's wrong or out of date
• Delete what we hold
• Withdraw your consent — and withdrawing is as easy as giving it was. One line by email is enough, and you don't have to explain why.

When you withdraw consent, we delete what we hold unless the law requires us to keep it. We'll do our best to come back to you within a few working days.

Email hello@tirla.vc with "Privacy" in the subject line.

Questions and complaints

If something about your data bothers you, write to hello@tirla.vc and a member of the team will handle it personally. We'd much rather hear from you directly first.

If we don't resolve it to your satisfaction, you can complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

Keeping it safe

We're a small team and we keep the surface small on purpose. Applications travel over an encrypted connection and are stored encrypted. The database is configured so that the website can only add an application — the key published in this site's code cannot read a single existing record back. Reading applications requires a separate administrator login, held by the investment team, protected by strong unique passwords and two-factor authentication.

Uploaded decks are kept in a private store. The application page is given permission to write one single file and nothing else — it cannot list, read or overwrite anything, including what it just uploaded.

No one can promise perfect security. If a breach does affect your data, we'll notify the Data Protection Board without delay and file the detailed report required within 72 hours — and we'll tell you directly too.

Cookies and analytics

We use Google Analytics to understand how many people visit, which pages they read, and how many go on to apply. It sets cookies in your browser to recognise a returning visit, and it tells Google your IP address, device and the pages you viewed.

We use it to answer questions like "did anyone read the thesis before applying" — not to build a profile of you. We don't run advertising, we don't use remarketing or Google Ads features, and we never send Google anything you type into the application form.

If you'd rather not be counted, any browser's private mode works, as does an ad blocker or Google's own opt-out add-on. Nothing on this site stops working if you block it.

The application page also loads a software library from a public code network so it can save your application to our database. That network sees the IP address of anyone who opens the page, sets no cookies and does not track you.

Our fonts and graphics are built into the pages themselves rather than fetched from Google or anyone else.

Children

This site is meant for founders, investors and other adults doing business with us. It isn't intended for anyone under 18, and we don't knowingly collect information from children. If you believe a child has sent us something, write to us and we'll delete it.

Changes to this page

We'll update this page as Tirla grows — when our entity registration completes, and if we start using new tools. The date at the top always shows the current version. For anything significant, we'll email the people it affects.