Legal
Privacy Policy.
This policy explains what personal information Holonomy Systems Inc., a Delaware corporation ("Holonomy", "we", "us"), collects through this website, why we collect it, who we share it with, and the choices you have. We are the controller of that information. For any question or request, write to contact@holonomy.systems.
Information we collect
- Information you give us. When you submit the "Talk specs" (contact) or "Back us" (data room) form: your name, work email, organisation or fund, and the message or specifications you choose to provide. Please send only what you are comfortable sharing, and do not send confidential technical information through these forms.
- Submission metadata. With each form submission we store the IP address the request came from and your browser's user-agent string, alongside the submission itself. We use these only to detect and investigate abuse of the forms.
- Server logs. Our host records standard request logs (IP address, browser type, timestamp) for a short period, for security and reliability.
- Analytics. We use privacy-first, cookieless analytics that measure aggregate traffic (pages, referrers, country). They do not track you across sites and do not build a profile of you.
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
Cookies and browser storage
We set no cookies of our own, and store nothing in your browser. There is no cookie banner because there is nothing to consent to: our analytics are cookieless and identify no one. The one exception is the anti-spam check on our forms (Cloudflare Turnstile), which sets its own short-lived client-side state when you submit a form, and only then. If we ever add a tracking technology, we will ask for your consent first and update this policy.
How we use it
To respond to your enquiry, to evaluate a possible technical, commercial, or investment relationship, to keep the site and its forms secure, and to improve the site. We do not sell or share your personal information for advertising, and we do not use it for automated decision-making that produces legal or similarly significant effects.
Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we rely on our legitimate interests in responding to and following up on enquiries and in protecting the site from abuse, and on your consent where you have given it. You may object to processing based on legitimate interests, or withdraw consent, at any time.
Who we share it with
We share the minimum necessary with service providers who process data on our behalf:
- Cloudflare, Inc.: website hosting, CDN, security, cookieless analytics, the anti-spam check on our forms (Turnstile), and the database in which submissions are stored.
- Slack Technologies, LLC (a Salesforce company): a form submission also sends a notification to our internal Slack channel containing what you entered, so that we see it promptly.
- Google LLC (Google Workspace): our business email, from which any reply to you is sent.
We may also disclose information where required by law, to enforce our terms, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honour this policy.
International transfers
We are based in the United States, and our processors operate in the United States and other countries. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and, for the UK, the ICO's International Data Transfer Addendum, together with any additional safeguards they require. You may request a copy of the relevant transfer mechanism by writing to us.
How long we keep it
- Contact enquiries: up to 24 months after our last exchange with you, then deleted.
- Data-room and investor enquiries: until the relevant financing process concludes, then for up to 12 months for record-keeping, unless a longer period is required by law.
- Submission metadata (IP address, user-agent): up to 12 months, then deleted.
- Server logs: kept by our host on its standard short retention schedule.
Your rights
Subject to applicable law (including the GDPR, the UK GDPR, and the CCPA as amended by the CPRA), you may request access to, correction of, or deletion of your personal information, restrict or object to its processing, or receive it in a portable form. Because our analytics are cookieless and we neither sell nor share personal information, there is nothing to opt out of for sale or sharing, and we do not discriminate against anyone who exercises a right. To exercise any right, email contact@holonomy.systems. You may also lodge a complaint with your local supervisory authority.
Security
We use reputable providers, transport encryption (HTTPS), and access controls that limit who can read enquiry data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
Changes
We may update this policy. Material changes will be reflected in the effective date at the top, and where appropriate we will give additional notice.