Your data,
your call.

Introduction

Hyperstition Incorporated ("we", "us", or "our") operates the Deep Tech Week platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Platform.

Information we collect

Information you provide

Information you provide voluntarily, which may include the following. The minimum information required to use the Platform is an email address — everything else is optional.

• Account Information: Name, email address, profile photo
• Profile Data: Job title, company, bio, role, industry, interests, and networking preferences
• Social Links: LinkedIn, Twitter, and other social media profiles you choose to connect
• Event Data: Events you register for, attend, or host

Payment information is collected and processed by Stripe. We do not store your payment details on our servers.

Information collected automatically

• Check-in Data: Time and location of event check-ins
• Product Analytics: Pages visited, feature interactions, account status, and basic device/browser metadata used to understand and improve the Platform
• Operational Logs: Request metadata, error details, performance timings, and related account identifiers when needed to debug, secure, and operate the Platform

Information from third parties

• Luma Integration: All DTW event ticketing and registration is operated through Luma. When you register for a DTW-affiliated event on Luma, we receive the registration record so that hosts can manage their event and so that we can attribute attendance to a conference. Luma remains the source of truth for that ticketing relationship and continues to operate under Luma's own privacy policy.

If you attend an event without a DTW account

Many people register for DTW-affiliated events on Luma without ever creating a Deep Tech Week account. If that's you, your experience is intentionally equivalent to using Luma alone. Specifically:

• We do not email you directly. All ticketing, registration confirmations, schedule changes, host announcements, and event-day logistics reach you through Luma, governed by Luma's communication preferences and unsubscribe controls. DTW does not send marketing or matchmaking emails to people who have not created a DTW profile.
• You are not displayed on the DTW Platform. Your name, email, company, and other personal details are not shown in attendee directories, networking surfaces, matchmaking, the social graph, recommendations, or any other public or member-facing view on the DTW website.
• You are only counted, never identified. Your registration may be included in aggregate event statistics — for example, total attendees at an event or conference — but never in a way that identifies you individually to other users or to the public.
• AI features ignore you. Our matchmaking and recommendation systems do not generate matches involving you and do not include your record in any user-facing ranking or suggestion.

If you've only registered through Luma, all of your data is processed and handled according to Luma's terms of service, including their email notifications for things like approvals, registrations, and host blasts. Creating an account on the DTW website is the only way a person will receive emails directly from DTW — about people they should meet, their lineup for the week, or host notifications.

If you attend an external event not on the Luma calendar

Some events affiliated with Deep Tech Week are operated entirely externally — through a different ticketing platform, or as standalone events not integrated with the Luma calendar at all. In those cases:

• DTW collects no information on attendees. Registration, ticketing, attendee lists, and any communications are owned end-to-end by the external organizer and the platform they've chosen. None of that data flows into DTW.
• DTW routes traffic to the external event. Our role is limited to linking to the external event page from the conference schedule or partner listings, so that attendees can find and register through the organizer's chosen channel.
• The external organizer's privacy policy governs. Anything you share when registering for that event is covered by the external platform's and organizer's terms, not by this policy.

How we use your information

• Platform Operation: To provide, maintain, and improve our services
• Matchmaking: To match account holders with relevant events, people, and opportunities based on your profile and preferences — only if you voluntarily opt in to matchmaking features
• Communication: To send notifications about events, matches, and Platform updates — only to people who have created a DTW account. Ticketing, registration, and event-day communications are sent by Luma, not by DTW.
• Recommendations: To calculate match scores and provide personalized event recommendations, for account holders who have opted in to matchmaking
• Event Management: To help hosts evaluate applicants and manage their events
• Analytics and Observability: To understand how users interact with our Platform, measure feature usage, troubleshoot errors, monitor performance, and improve the experience. Aggregate counts may include people who registered through Luma without creating a DTW account, but never identify them individually.
• Safety: To detect and prevent fraud, abuse, and policy violations
• Legal Compliance: To comply with applicable laws and regulations

Profile visibility and sharing (account holders)

The rules in this section apply only to people who have created a DTW account. People who registered through Luma without a DTW account are covered by §03 above and are not displayed on the Platform.

What others can see

• Public Profile: Only your first name, role (e.g. Founder, Investor), and industry (e.g. Aerospace, Computing) are public by default. Your full name, organization, and specific title can be made public, but default to being visible only to people who attended the same event as you.
• Co-Attendees: People attending the same event or conference can see your full name, organization, title, headline, photo, role, and industry tags. You can adjust which fields are visible to co-attendees in your Privacy Settings.
• Event Hosts: When you apply to events, hosts can see your full profile including name, organization, role, industry, interests, what you're looking for, what you're offering, and other relevant profile information.
• Matched Users: When both users opt in for a match, they can see each other's information that they've chosen to make visible, which may include email and phone number. Users can also choose to only communicate within the Platform.
• Connections: Your mutual connections can see fields you've set to "Connections" visibility, such as social links and event history.

What stays private

• Internal Scores: Match scores and internal analytics are never shown to other users
• Email Address: Your email is not visible to other users unless you choose to share it
• Browsing Activity: Which profiles you view and events you browse is not shared
• Internal Matching: Your full profile data (including fields set to private) may be used internally by our matching algorithms to calculate compatibility scores and recommendations. However, only fields matching your visibility settings are ever displayed to other users.

Invisible mode

You can choose to be completely invisible on the platform. When invisible, you will not appear in any matchmaking, social graph, networking, or recommendation results, and these features will be disabled for you. Your profile may still be used internally for platform analytics (for example, aggregate counts of how many people attended an event), but will not be displayed to other users. You can enable or disable invisible mode at any time in your Privacy Settings.

How we share your information

We share your information only in the following circumstances:

• With Event Hosts: When you apply to or attend an event, the host of that event can see your profile information so they can manage their event and evaluate applicants. Hosts agree to use that information solely for running their event.
• With Matched Users: When our matching algorithm identifies a potential connection and both account holders have opted in, each can see the profile fields the other has chosen to make visible.
• With Sub-processors: Limited to the named service providers in §09 (such as Luma for ticketing, Supabase for hosting, Stripe for payments) who process data on our behalf under written agreements.
• For Legal Reasons: When required by law, subpoena, or to protect our rights.

We do not sell your personal information to third parties. We do not share attendee email addresses with any third party other than the named sub-processors in §09, and we do not provide attendee contact information to event sponsors, partners, or marketers — period.

How hosts and sponsors reach attendees

Event hosts can see attendee information for their own events in accordance with the typical Luma privacy policies that govern event organizers.

DTW event sponsors are not able to purchase email lists or contact information for attendees of events they sponsor. Sponsors are limited to inviting attendees to future events through Luma's invite system, and to messaging via the DTW Platform — which is only available to attendees who have a DTW profile and is bound by that attendee's privacy and notification settings.

AI and matching technology

We use machine learning, large language models, and vector embeddings to power our matching, recommendation, and event-classification features. The contract we hold ourselves to:

• Descriptive content only. AI features operate on descriptive fields you've provided — such as job title, company, bio, role, industry, interests, and what you're looking for. Names and email addresses are stripped from inputs before they reach any AI provider.
• Embeddings stay on the Platform. Profile embeddings are used solely for matching and recommendations within DTW.
• No training on your data. We do not allow third-party AI providers to train their models on your data, and we do not sell or otherwise hand off your data for model training.
• Deletion travels with your account. When you delete your account, we delete your embeddings along with the rest of your personal data.

Sub-processors and third-party services

We rely on a small number of trusted service providers to operate the Platform. Each is bound by a written agreement to process data only on our instructions, and we restrict what each one receives to what's needed for its function.

• Luma (Lu.ma) — event ticketing, registration, and event-related email communications. Source of truth for attendee registration data on most DTW events.
• Supabase — primary database, authentication, and file storage for the DTW Platform.
• Vercel — web hosting and serverless infrastructure for the DTW Platform.
• Stripe — payment processing for VIP passes and other paid offerings. Card details are handled directly by Stripe and never stored on our servers.
• Resend — transactional email delivery to DTW account holders (login links, match notifications, in-product alerts).
• AI providers — Anthropic, OpenAI, Google (Gemini), and xAI (Grok) for matching, classification, and content generation. As described in §08, names and email addresses are stripped from inputs before they reach these providers.
• Brandfetch — used to retrieve organization logos and brand assets from public sources.
• Google Maps Platform — used to render maps and resolve venue locations.
• PostHog — product analytics, pageview tracking, and feature usage measurement for the Platform.
• Axiom — operational logging and observability. Axiom receives production runtime logs forwarded through Vercel log drains.

We may add or change sub-processors as the Platform evolves. Material additions will be reflected in a future version of this page; you can request the current list at any time at deep-tech-week@hyperstition.tech.

Data retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: Upon account deletion, we delete or anonymize your personal data within 30 days, except as required for legal or business purposes
• Event History: Aggregated and anonymized event attendance data may be retained for analytics
• Financial Records: Transaction records are retained for 7 years for tax and legal compliance

Your rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications
• Restrict Processing: Request limits on how we use your data

To exercise these rights, contact us at deep-tech-week@hyperstition.tech.

Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Cookies and tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Understand how you use the Platform
• Improve our services

We use PostHog for product analytics, including pageviews, feature usage, and identified account-level analytics for signed-in users. We use Axiom for operational logs and debugging; Axiom receives structured server logs through Vercel rather than browser tracking code.

You can control cookies through your browser settings. Disabling cookies may limit some Platform functionality.

Children's privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

International data transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

California privacy rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us: