Demo Day SAFE Privacy Policy

At a16z Capital Management, L.L.C. (“a16z”), we take your privacy seriously. Please read this Privacy Policy to learn how we treat Personal Data that we collect in relation to our Demo Day SAFE platform (available at demodaysafe.com) (the “Platform”), which allows you to generate documents from templates we make available on the Platform (each such document, a “Document”) and send such Documents to counterparties for signature. The Platform and any tools, features, and functionality offered on or through the Platform are collectively referred to as the “Services.” This Privacy Policy does not apply to Personal Data collected through your access to or use of the speedrun.a16z.com website or through any other interactions with a16z’s Speedrun, which are governed by the Privacy Policy available at speedrun.a16z.com/privacy-policy.

By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use, and share your information as described in this Privacy Policy.

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage. In addition, this Privacy Policy does not apply to information we collect about a16z’s own job candidates or employees.

Below lists the categories of Personal Data that we collect and have collected over the past 12 months:

• Contact Information (e.g., name, title, and email address)
• Counterparty Contact Information (e.g., name and email address of the investor or other counterparty you identify and their signatory)
• Startup Information (e.g., startup name, state of incorporation, your Speedrun cohort, and your title)
• SAFE Terms and Status (e.g., SAFE type, purchase amount, valuation cap, discount rate, and whether a SAFE has been sent, signed or funded)
• Signature Records (e.g., signing timestamps and associated IP addresses)
• Device/IP Data (e.g., IP address)
• Usage Analytics (e.g., through interactions with our Services)
• Geolocation Data (e.g., city, state, and IP-address-based location information)
• Other Identifying Information that You Voluntarily Provide (e.g., identifying information provided in your user profile on the Services or emails or other communications you send us)

Some information we collect through the Services relates to your company or to a transaction rather than to you individually. We describe it here because it is associated with your account and we handle it in accordance with this Privacy Policy, but information relating solely to an entity is not Personal Data.

We collect Personal Data about you from the following categories of sources:

You

• When you provide such information directly to us.
• When Personal Data about you is automatically collected in connection with your use of our Services (see the subsection titled “Information Collected Automatically” below).

Other Users of the Services

When a user of the Services provides us Personal Data about you, for example, when a startup enters the name and email address of an investor in order to generate a Document and send it for signature.

Third Parties

Vendors: For example, we may use analytics providers to analyze how you interact and engage with the Services, electronic signature providers to facilitate the signing of Documents, or third parties to help us provide you with user support. We may also receive Personal Data about you from our customer relationship management service providers.

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser and tell us how and when you visit and use our Services, to analyze trends, learn about our user base, and operate and improve our Services. Cookies are small pieces of data – usually text files – placed on your computer, tablet, phone, or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time.

We use the following types of Cookies:

Essential Cookies. Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.

Functional Cookies. Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time, and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).

Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services such as by collecting information about the number of visitors to the Services, what pages visitors view on our Services, and how long visitors are viewing pages on the Services. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising. In addition to our own Performance/Analytical Cookies, the Services may contain Performance/Analytical Cookies from third-party analytics services.

You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. In addition, to opt-out of Google Analytics, follow the instructions here. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work.

To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit www.allaboutcookies.org.

We process Personal Data to provide, operate, improve, understand, and personalize our Services. We also collect and use Personal Data for the following purposes:

• To meet or fulfill the reason you provided the information to us.
• To communicate with you about the Services, including Service announcements or updates.
• To generate, transmit, store, and record the Documents you create through the Services and their status.
• To provide support and assistance for the Services.
• To create and manage your account or other user profiles.
• To personalize website content and communications based on your preferences.
• To deliver emails and other communications.
• To respond to user inquiries and fulfill user requests.
• To contact investors and other counterparties identified through the Services about a16z’s programs, events, and other offerings.
• To improve and develop the Services, including testing, research, analysis, and product development.
• To protect against or deter fraudulent, illegal, or harmful actions and maintain the safety, security, and integrity of our Services.
• To comply with our legal or contractual obligations, resolve disputes, and enforce our Terms of Use.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• For any other business purpose stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act (the “CCPA”).

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice. We only use sensitive Personal Data as permitted by applicable laws, including the CCPA, or otherwise with your consent.

As noted in the list above, we may communicate with you if you’ve provided us the means to do so. For example, if you’ve given us your email address, we may send you promotional email offers or email you about your use of the Services. Also, we may receive a confirmation when you open an email from us, which helps us improve our Services. If you do not want to receive communications from us, please indicate your preference by emailing us at privacy@a16z.com.

We may use automated or algorithmic tools, including those offered by third-party service providers, to process your Personal Data as needed to help operate, provide, maintain, and improve the Services and support our internal processes.

We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build, and improve the Services and promote our business, provided that we will not share such data in a manner that could identify you. We will not attempt to re-identify any de-identified data, other than for the purposes of determining whether our de-identification processes satisfy the requirements of applicable laws.

We disclose and over the past 12 months have disclosed your Personal Data described above to the following categories of third parties:

Service Providers

Categories of Personal Data Shared: All categories of Personal Data.

Purposes for Sharing: These third-party service providers help us provide the Services and operate our business, including ad networks, email service providers, electronic signature providers, analytics providers, security and fraud prevention providers, automated or algorithmic providers, and hosting and other technology and communications providers, and staff augmentation and contract personnel. When we share your Personal Data with Service Providers, they may only use your Personal Data for specific purposes relating to assisting us with running our business.

Users of the Services

Categories of Personal Data Shared: Contact Information, Startup Information, and SAFE Terms and Status

Purposes for Sharing: We may share your Personal Data with investors or other users of the Services at your direction as needed to provide the Services, including to transmit Documents you generate for signature.

Successors to Our Business

Categories of Personal Data Shared: All categories of Personal Data.

Purposes for Sharing: Your Personal Data may also be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part).

We seek to protect your Personal Data from unauthorized access, use, and disclosure using appropriate physical, technical, organizational, and administrative security measures based on the type of Personal Data and how we are processing that data. For example, the Services use industry-standard Secure Sockets Layer (SSL) technology to allow for the encryption of Personal Data you provide to us. You should also help protect your data by appropriately selecting and protecting your password and/or another sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the Internet or storing data is completely secure. We cannot guarantee the complete security of any data you share with us, and except as expressly required by law, we are not responsible for the theft, destruction, loss or inadvertent disclosure of your information or content.

We retain Personal Data about you for as long as is reasonably necessary for the business purposes specified in this Privacy Policy, based on criteria such as if retention is necessary to maintain our relationship or provide you the Services, comply with our legal obligations, resolve disputes or collect fees owed, enforce our contractual agreements, protect our rights, property or business, or if retention is otherwise permitted or required by applicable law, rule, or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

We do not knowingly collect or solicit Personal Data about children under 13 years of age; if you are a child under the age of 13, please do not attempt to use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 13 years of age, we will delete that information as quickly as possible. If you believe that a child under 13 years of age may have provided Personal Data to us, please contact us at privacy@a16z.com.

If you are a California resident, you have the rights set forth in this section. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at privacy@a16z.com.

Access

You have the right to request certain information about our collection, use and disclosure of your Personal Data. In response, we will provide you with the following information:

• The categories of Personal Data that we have collected and disclosed about you.
• The categories of sources from which that Personal Data was collected.
• The business or commercial purpose for collecting your Personal Data.
• The categories of third parties with whom we have disclosed your Personal Data.
• The specific pieces of Personal Data that we have collected about you.

Deletion

You have the right to request that we delete the Personal Data that we have collected about you.

Correction

You have the right to request that we correct any inaccurate Personal Data that we maintain about you.

To exercise the rights described above, you must send us a request that (i) provides sufficient information to allow us to verify that you are either the person about whom we have collected Personal Data or are an agent authorized by that person, including without limitation your name and email address, and (ii) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We will only use Personal Data provided in a Valid Request to verify your identity and complete your request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is manifestly unfounded or excessive. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request using the following methods:

• Email us at: privacy@a16z.com
• Submit a form at this address

You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. We will not discriminate against you for exercising your rights under the CCPA.

We’re constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time, but we will alert you to any such changes by placing a notice on the Services, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at privacy@a16z.com.