Your data,
your call.

Introduction

Hyperstition Incorporated ("we", "us", or "our") operates the Deep Tech Week platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Platform.

Information we collect

Information you provide

Information you provide voluntarily, which may include the following. The minimum information required to use the Platform is an email address — everything else is optional.

• Account Information: Name, email address, profile photo
• Profile Data: Job title, company, bio, role, industry, interests, and networking preferences
• Social Links: LinkedIn, Twitter, and other social media profiles you choose to connect
• Event Data: Events you register for, attend, or host

Payment information is collected and processed by Stripe. We do not store your payment details on our servers.

Information collected automatically

• Check-in Data: Time and location of event check-ins
• Product Analytics: Pages visited, feature interactions, account status, and basic device/browser metadata used to understand and improve the Platform
• Operational Logs: Request metadata, error details, performance timings, and related account identifiers when needed to debug, secure, and operate the Platform

Information from third parties

• Luma Integration: Most DTW-affiliated events are ticketed and registered through Luma, and we only collect registration information from events that use our integrated Luma calendar. When you register for a DTW-affiliated event on Luma, we receive the registration record so that hosts can manage their event and so that we can attribute attendance to a conference. Some hosts instead run their events on external services (such as Partiful or Eventbrite); for those events we receive no attendee data (see §04). Luma remains the source of truth for the ticketing relationship on integrated events and continues to operate under Luma's own privacy policy. At registration we also tell you that the event's hosts can see your email address and may invite you to future events, which you can turn off in your Luma account settings.

If you attend an event without a DTW account

Many people register for DTW-affiliated events on Luma without ever creating a Deep Tech Week account. If that's you, your experience is intentionally equivalent to using Luma alone. Specifically:

• We do not email you directly. All ticketing, registration confirmations, schedule changes, host announcements, and event-day logistics reach you through Luma, governed by Luma's communication preferences and unsubscribe controls. Because Deep Tech Week co-hosts every event on its calendar, the host may also invite you, through Luma's invite system, to future Deep Tech Week events related to ones you have attended; these invitations are delivered by Luma with its standard unsubscribe controls, and you can opt out of future invitations at any time in your Luma account settings. Apart from these host invitations to DTW events, DTW does not send marketing or matchmaking emails to people who have not created a DTW profile.
• You are not displayed on the DTW Platform. Your name, email, company, and other personal details are not shown in attendee directories, networking surfaces, matchmaking, the social graph, recommendations, or any other public or member-facing view on the DTW website.
• You are only counted, never identified. Your registration may be included in aggregate event statistics — for example, total attendees at an event or conference — but never in a way that identifies you individually to other users or to the public.
• AI features ignore you. Our matchmaking and recommendation systems do not generate matches involving you and do not include your record in any user-facing ranking or suggestion.

If you've only registered through Luma, all of your data is processed and handled according to Luma's terms of service, including their email notifications for things like approvals, registrations, host blasts, and invitations to future events. Creating an account on the DTW website is the only way a person will receive emails directly from DTW — about people they should meet, their lineup for the week, or host notifications.

If you attend an external event not on the Luma calendar

Some events affiliated with Deep Tech Week are operated entirely externally — through a different ticketing platform (such as Partiful or Eventbrite), or as standalone events not integrated with the Luma calendar at all. In those cases:

• DTW collects no information on attendees. Registration, ticketing, attendee lists, and any communications are owned end-to-end by the external organizer and the platform they've chosen. None of that data flows into DTW.
• DTW routes traffic to the external event. Our role is limited to linking to the external event page from the conference schedule or partner listings, so that attendees can find and register through the organizer's chosen channel.
• The external organizer's privacy policy governs. Anything you share when registering for that event is covered by the external platform's and organizer's terms, not by this policy.

How we use your information

• Platform Operation: To provide, maintain, and improve our services
• Matchmaking: To match account holders with relevant events, people, and opportunities based on your profile and preferences — only if you voluntarily opt in to matchmaking features
• Communication: To send notifications about events, matches, and Platform updates directly to people who have created a DTW account. Ticketing, registration, event-day communications, and host invitations to future related DTW events are delivered through Luma to event attendees — with Luma's unsubscribe controls — rather than directly by DTW.
• Recommendations: To calculate match scores and provide personalized event recommendations, for account holders who have opted in to matchmaking
• Event Management: To help hosts evaluate applicants and manage their events
• Analytics and Observability: To understand how users interact with our Platform, measure feature usage, troubleshoot errors, monitor performance, and improve the experience. Aggregate counts may include people who registered through Luma without creating a DTW account, but never identify them individually.
• Safety: To detect and prevent fraud, abuse, and policy violations
• Legal Compliance: To comply with applicable laws and regulations

Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Legitimate interests — to operate and improve the Platform, to keep our community safe, and, as the host of the events you attend, to invite you to future Deep Tech Week events related to ones you have attended. You can object to this at any time (see §11), and every invitation carries an opt-out.
• Consent — for optional features you switch on, such as matchmaking, and for any processing that legally requires it. You can withdraw consent at any time.
• Contract — to provide the services you register or sign up for.
• Legal obligation — where we must process data to comply with the law.

Profile visibility and sharing (account holders)

The rules in this section apply only to people who have created a DTW account. People who registered through Luma without a DTW account are covered by §03 above and are not displayed on the Platform.

What others can see

• Public Profile: Only your first name, role (e.g. Founder, Investor), and industry (e.g. Aerospace, Computing) are public by default. Your full name, organization, and specific title can be made public, but default to being visible only to people who attended the same event as you.
• Co-Attendees: People attending the same event or conference can see your full name, organization, title, headline, photo, role, and industry tags. You can adjust which fields are visible to co-attendees in your Privacy Settings.
• Event Hosts: When you apply to events, hosts can see your full profile including name, organization, role, industry, interests, what you're looking for, what you're offering, and other relevant profile information.
• Matched Users: When both users opt in for a match, they can see each other's information that they've chosen to make visible, which may include email and phone number. Users can also choose to only communicate within the Platform.
• Connections: Your mutual connections can see fields you've set to "Connections" visibility, such as social links and event history.

What stays private

• Internal Scores: Match scores and internal analytics are never shown to other users
• Email Address: Your email is not visible to other users unless you choose to share it
• Browsing Activity: Which profiles you view and events you browse is not shared
• Internal Matching: Your full profile data (including fields set to private) may be used internally by our matching algorithms to calculate compatibility scores and recommendations. However, only fields matching your visibility settings are ever displayed to other users.

Invisible mode

You can choose to be completely invisible on the platform. When invisible, you will not appear in any matchmaking, social graph, networking, or recommendation results, and these features will be disabled for you. Your profile may still be used internally for platform analytics (for example, aggregate counts of how many people attended an event), but will not be displayed to other users. You can enable or disable invisible mode at any time in your Privacy Settings.

How we share your information

We share your information only in the following circumstances:

• With Event Hosts: When you apply to or attend an event, the host of that event can see your profile information so they can manage their event and evaluate applicants. Hosts agree to use that information solely for running their event.
• With Matched Users: When our matching algorithm identifies a potential connection and both account holders have opted in, each can see the profile fields the other has chosen to make visible.
• With Sub-processors: Limited to the named service providers in §09 (such as Supabase for hosting and Stripe for payments) who process data on our behalf under written agreements; Luma's distinct role is described in §09.
• For Legal Reasons: When required by law, subpoena, or to protect our rights.

We do not sell your personal information to third parties. We do not share attendee email addresses with any third party other than the named sub-processors in §09, and — except for a host's access to the guests of their own DTW event, described below — we do not provide attendee contact information to event sponsors, partners, or marketers — period.

How hosts and sponsors reach attendees

Event hosts can see attendee information for their own events in accordance with the typical Luma privacy policies that govern event organizers.

Deep Tech Week runs a shared event calendar, and DTW co-hosts every event on it. A host running an event on the DTW calendar may invite past DTW attendees to their event through Luma's invite system. When a host sends an invitation, Luma shows that host the invitee's name and email as part of their own event's guest list — the same way any Luma host sees the guests of their event. Hosts may use this access only to invite people to, and run, their DTW event; they may not export, store, or reuse attendee contact information for any other purpose. You are told at registration that event hosts can see your email and may invite you to future events, and you can opt out of future invitations at any time through your Luma account settings or, if you have a DTW account, your DTW notification settings.

DTW event sponsors are not able to purchase email lists or contact information for attendees of events they sponsor. Sponsors are limited to inviting attendees to future events through Luma's invite system, and to messaging via the DTW Platform — which is only available to attendees who have a DTW profile and is bound by that attendee's privacy and notification settings.

AI and matching technology

We use machine learning, large language models, and vector embeddings to power our matching, recommendation, and event-classification features. The contract we hold ourselves to:

• Descriptive content only. AI features operate on descriptive fields you've provided — such as job title, company, bio, role, industry, interests, and what you're looking for. Names and email addresses are stripped from inputs before they reach any AI provider. One narrow exception: Deep Tech Week’s own internal staff tooling, used by us to run the event, and only ever with the AI providers named in §09, may process guest lists that include names and email addresses.
• No third-party AI agent receives your contact details. Event hosts, sponsors, and organizations can connect their own AI assistants to Deep Tech Week. Those assistants never receive attendee names or email addresses. They can see how many people match a set of criteria and the mix of roles and industries among them, and they can prepare an invitation for a human to approve — but the recipient list itself is never disclosed to them, and nothing is sent unless a person approves it.
• Embeddings stay on the Platform. Profile embeddings are used solely for matching and recommendations within DTW.
• No training on your data. We do not allow third-party AI providers to train their models on your data, and we do not sell or otherwise hand off your data for model training.
• Deletion travels with your account. When you delete your account, we delete your embeddings along with the rest of your personal data.

Sub-processors and third-party services

We rely on a small number of trusted service providers to operate the Platform. Most act as our processors, bound by a written agreement to process data only on our instructions, and we restrict what each one receives to what's needed for its function. Luma is different in kind, and is described accordingly below.

• Luma (Lu.ma) — the platform on which DTW events are ticketed and registered, and through which event and invitation emails are delivered. Luma acts in two capacities: as our service provider for running DTW events, and as an independent platform with its own direct relationship with registrants under its own terms and privacy policy (see §02). It is the source of truth for attendee registration data on most DTW events.
• Supabase — primary database, authentication, and file storage for the DTW Platform.
• Vercel — web hosting and serverless infrastructure for the DTW Platform.
• Stripe — payment processing for VIP passes and other paid offerings. Card details are handled directly by Stripe and never stored on our servers.
• Resend — transactional email delivery to DTW account holders (login links, match notifications, in-product alerts).
• AI providers — Anthropic, OpenAI, Google (Gemini), and xAI (Grok) for matching, classification, and content generation. As described in §08, names and email addresses are stripped from inputs before they reach these providers, except in Deep Tech Week’s own internal staff tooling.
• Brandfetch — used to retrieve organization logos and brand assets from public sources.
• Google Maps Platform — used to render maps and resolve venue locations.
• PostHog — product analytics, pageview tracking, and feature usage measurement for the Platform.
• Axiom — operational logging and observability. Axiom receives production runtime logs forwarded through Vercel log drains.

We may add or change sub-processors as the Platform evolves. Material additions will be reflected in a future version of this page; you can request the current list at any time at deep-tech-week@hyperstition.tech.

Data retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: Upon account deletion, we delete or anonymize your personal data within 30 days, except as required for legal or business purposes
• Event attendees without a DTW account: We retain the registration record (such as name, email, organization, and the events you attended) to attribute attendance and to send host invitations to future related events, until you ask us to stop or to delete it. You can opt out of future invitations at any time, and you can request deletion by contacting us or through your Luma account.
• Event History: Aggregated and anonymized event attendance data may be retained for analytics
• Financial Records: Transaction records are retained for 7 years for tax and legal compliance

Your rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications
• Restrict Processing: Request limits on how we use your data
• Object: Object to processing based on our legitimate interests, and — at any time — to direct marketing, including invitations to future events
• Withdraw consent: Where we rely on your consent, withdraw it at any time
• Complain: If you are in the EEA or UK, lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office)

To exercise these rights, contact us at deep-tech-week@hyperstition.tech.

Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Cookies and tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Understand how you use the Platform
• Improve our services

We use PostHog for product analytics, including pageviews, feature usage, and identified account-level analytics for signed-in users. We use Axiom for operational logs and debugging; Axiom receives structured server logs through Vercel rather than browser tracking code.

You can control cookies through your browser settings. Disabling cookies may limit some Platform functionality.

Children's privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

International data transfers

Deep Tech Week is operated from the United States, and several of our service providers — including Luma, Supabase, Vercel, and Stripe — process data in the United States. If you are located in the EEA or UK, your information will be transferred to the United States and other countries. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or a provider's certification under an approved data-transfer framework.

California privacy rights

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information — we do not sell or share your personal information as those terms are defined under the CPRA
• Right to correct inaccurate personal information
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising privacy rights

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us: