If privacy is a core focus of your pitch, there should be a document with specifics about your promises around privacy, etc. There's nothing stating who you are and why I should trust you with my data.

If you really want to sell me on your privacy stance, you'll convince me (with something structurally binding) that once successful you're not going to sell out and have my data subject to new rules I didn't sign up for.

I this point I've been trained not to trust any company that's not charging me.