Privacy notice
Draft — pending counsel review. Draft of 28 September 2026.
This notice covers atlas-venturestudio.com and every page on its subdomains, including the offer pages we publish for experiments.
Who we are
This site is run by EIDG Ltd, doing business as Atlas Venture Studio ("we", "us"). EIDG Ltd is a company incorporated in the United States and is the controller of the personal information described here.
Contact: [email protected]
What we collect
- Applications. When you apply as a builder: your name, email address, a link to your
prototype, and what you tell us about your buyer, the problem and how you reach those buyers,
plus the campaign tags (such as
utm_source) on the link you arrived from. - Enquiries on an offer page. When you use the form on an offer page: your name, email address, company and message, plus the campaign tags and personal link code (see below) on the link you arrived from.
- Outreach records. When a partner contacts you about an offer: your name, company and, where the partner has it, your email address, with the dates and channel of contact, whether you replied and the agreed next step.
- Visits. For each page view: the page, the campaign tags and personal link code in its address, and the page you came from. To tell visits apart we store a visitor code derived from your IP address with a one-way function that changes every day. We never store your IP address. Visits from obvious automated agents are dropped.
Per-prospect links
Some offers are sent to named people by a partner. Each person receives a personal link with
a short code (for example ?r=p007). Visits and enquiries through a personal link are recorded
against that code, so we and the partner can tell whether that person opened the offer and
whether they responded. This per-prospect tracking ties page visits to a named person. If you
received a personal link and do not want it tracked, you can visit the site without the code, or
ask us to delete your records (see below).
Purposes and legal basis
We use this information to:
- review builder applications and reply to applicants;
- run offer tests: publish offer pages, measure who saw an offer and who responded, and decide whether a venture should continue;
- reply to enquiries, book calls and take deposits that you ask for;
- keep the site secure and prevent spam (for example, rate limits keyed on the daily visitor code).
Where a law that applies to us requires a legal basis, we rely on our legitimate interests in testing demand for new products and running the studio, on taking steps at your request when you apply, enquire, book or pay a deposit, and on consent where the law requires it. Partners who contact prospects are responsible for doing so lawfully, including under CAN-SPAM and TCPA.
Cookies and analytics
Our site sets no cookies on its public pages and loads no third-party analytics or advertising tools. Visit logging is first-party: the page sends one request to our own server, as described under "Visits".
Our hosting provider, DigitalOcean, delivers the site through Cloudflare's network. Cloudflare may
set one cookie, __cf_bm, to tell people from automated bots and protect the site from abuse. It
lasts about 30 minutes, is not used for analytics or advertising, and is strictly necessary for the
site to work securely.
The only other cookies belong to the studio's private console, which only the studio operator uses; they are strictly necessary to keep that sign-in secure.
Processors and where your data is held
We use these service providers to run the site. Our database and servers are in the United States (US East).
| Processor | What it does for us |
|---|---|
| Supabase | Database and console sign-in (US East) |
| DigitalOcean | Hosting for the site and its domain names (New York), delivered through Cloudflare's network |
| Resend | Sending email, such as sign-in links and notices to partners |
| Cal.com | Booking calls, when an offer invites you to book one |
| Stripe | Taking deposits through Stripe's own payment pages, when an offer asks for one |
When you book a call or pay a deposit you use Cal.com's or Stripe's own pages, and their privacy notices also apply.
What we never collect through offer tests
Offer pages and forms never ask for:
- health information;
- payment card details (card payments happen only on Stripe's own pages);
- information about minors.
Offers that would need any of these are not run as offer tests.
How long we keep it
- Enquiries, outreach records and visits for an experiment are deleted 24 months after the experiment closes.
- Visits to the studio's own pages are deleted on a rolling 24 months.
- Applications that we decline, or have not yet answered, are deleted 12 months after they arrived. An accepted application is kept with the experiment it led to and deleted with it.
- Records of hours worked, review decisions and published pages contain no personal information and are kept while the studio operates.
Your rights and deletion requests
You can ask us what personal information we hold about you, to correct it, or to delete it. Email [email protected] from the address you used, or tell us which address to look for. We find your records by email address across applications, enquiries and outreach records and delete them. Visits hold no email address or IP address and cannot be linked to you by email.
Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.
Changes
If we change this notice we will update it on this page and change the date at the top.