“Private investment contracts are typically excluded from regulatory oversight because they are available only to "qualified purchasers" who self-certify that they do not require such protections.”