What we will not keep, even if you ask

RCA Pad does not store wallet keys, seed phrases, investor identity data, or client funds. We will not be your registrar of buyers. We will not be your custodian. A founder who wants to drop a CSV of contributors into the Sprint folder will be refused. That refusal is in the information-security posture: 2FA, role-based access, separate client workspaces, documented permissions, incident contact, deletion schedule.

Separation matters. Vellum’s folder is not Northline’s. Contractors see what the delivery lead permits. When the engagement ends, deletion follows a documented schedule rather than a vibe that “it’s in the old Drive.” If we cannot describe the schedule, we should not have taken the file.

Partners receive referrals, not the whole room. An intro to Helix is a scoped package the issuer agrees to send. We do not forward a diligence dump because it is convenient. Convenience is how rooms become group chats.

If a future workflow product exists, it will productise repeated jobs: intake, asset collection, campaign calendar, approval trail, partner tasks, creator brief approvals, reporting. It will not become a place to park other people’s money or other people’s identities. That is a different licence.