Privacy notice

Who we are

Continuum is a venture capital firm investing deal by deal in frontier technology. We are the data controller for personal information collected through this website.

For anything in this notice, write to belal@continuumvc.com or alan@continuumvc.com.

Information you give us

If you create an investor account we store your name, email address, the region you select, the eligibility category you self-certify, and a password. Passwords are never stored as you typed them: they are hashed with scrypt and a per-account random salt, so nobody at Continuum can read them.

The interest form and the founder intake open a message in your own email application. Nothing you type into them is sent to or stored by this website - we receive them as ordinary email, like any other message you send us.

If you use one of the chat assistants, your messages are processed to produce a reply. Do not put confidential or personal information into a chat window.

Information collected automatically

We use Vercel Analytics to understand which pages are read. It is privacy-preserving by design: it does not use cookies and does not build a profile of you across websites.

Our servers hold IP addresses briefly in memory to rate-limit requests, which is how we stop automated attempts to guess access keys. Hosting and error logs may contain an IP address and the page requested.

If you open a protected document link, we record that it was opened, which page was viewed and when, against the named recipient the link was issued to. Those links exist precisely so that confidential material is traceable to the person it was sent to - that is their purpose and it is stated on the viewer itself.

Cookies

This website sets no cookies. Not for analytics, not for advertising, not for sign-in.

That is why you have never seen a cookie banner here. If that changes, this notice changes with it and you will be asked for consent where the law requires it.

What we store on your device

We use your browser's local storage for things that should survive a reload. It stays on your device, we cannot read it remotely, and clearing your browser data removes it.

• Your language and light or dark theme choice
• Whether you have turned on spoken replies in the chat
• An open chat conversation, so it is still there if you reload
• If you use the investor portal: your signed-in session, display preferences, and notes recorded on your own device

Why we use it, and our lawful basis

• To give you an investor account and let you sign in - necessary to perform our agreement with you
• To check eligibility before showing investor material - our legal obligation under financial promotion rules
• To reply to you, and to run the firm's ordinary correspondence - our legitimate interests
• To keep the portal and confidential documents secure, including rate limiting and traceable document links - our legitimate interests in preventing unauthorised access and leaks
• To understand which pages are read - our legitimate interests in improving the site, using analytics that do not identify you

Who we share it with

We do not sell personal information and we do not share it for advertising. We use a small number of service providers who process data on our behalf:

• Sydecar, which administers the investment vehicles. If you invest, your subscription, identity verification, funding and tax documents are handled there under their own terms and privacy policy, not here.
• Vercel, which hosts the website and provides the database behind investor accounts, and its analytics.
• An AI provider, which processes chat messages to generate a reply.
• Resend, for email we send to investors, and ElevenLabs if you use the voice features.

We may also disclose information where the law requires it.

Where your information goes

Some of these providers process data outside the United Kingdom, including in the United States. Where that happens we rely on the safeguards those providers put in place for international transfers, such as standard contractual clauses.

How long we keep it

Account records are kept while the account is open and for a reasonable period afterwards, so that we can evidence who was given access to what.

Rate-limiting data is held for minutes. Analytics is aggregated and not tied to you. Email correspondence is kept as business records.

If you want your account removed, ask and we will remove it, subject to any records we must keep by law.

How we protect it

The site is served over HTTPS. Passwords are scrypt-hashed with a per-account salt. Portal access is restricted by per-person keys, and an authenticator code can be required in addition to the key.

Confidential documents are shown in a view-only viewer with the recipient's name and the time printed into the image itself, rather than offered as a downloadable file. We are honest about the limit of that: it makes a leak traceable to a named person, it does not make one impossible - nothing can stop someone photographing a screen.

No system is perfectly secure, and we do not claim otherwise.

Your rights

Under UK data protection law you can ask us for a copy of the personal information we hold about you, ask us to correct it or delete it, object to how we use it, or ask us to restrict that use. You can also ask us to send it to another provider.

Write to belal@continuumvc.com and we will respond within one month.

Complaints

If you think we have handled your information badly, please tell us first so that we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.