Who is responsible

New Nordic Asset Management OÜ, the manager of Dark Star Ventures Fund I, is the controller for personal data submitted through this site. The fund is supervised by the Estonian Financial Supervision Authority (Finantsinspektsioon).

Reach us at privacy@darkstar.ee for anything on this page.

What we collect

• Company intake form: company name, website, country of registration, a description of what you build, stage, technology readiness level, the amount you are raising, deployment status, what you are looking for from us, an optional pitch deck (PDF or PowerPoint), links to a demo, and your name, email and optional Signal handle. Pitch decks are encrypted the same way as the rest of the submission and are opened only by the investment team.
• Enquiry form: your name, organisation, email, the reason you are contacting us, and your message.
• Both forms: a one-way hash of your IP address, your browser user agent, and the score returned by the bot check. We do not store your IP address itself.

Why we can process it

For company submissions, our legitimate interest in assessing investment opportunities, and yours in being assessed. You chose to send it.

For enquiries, your consent, given by submitting the form, and our legitimate interest in replying to you.

How it is stored

Every submission is encrypted with AES-256-GCM before it is written to storage, using a key held outside the storage system. Nobody browsing the bucket can read a submission.

Access is limited to the Darkstar investment team. We do not sell data, and we do not share it with third parties for marketing.

How long we keep it

• Company submissions: 24 months after we reach a decision, so we can recognise you if you come back with a later round.
• Enquiries: 12 months from your last contact with us.
• Anonymised, aggregated counts (how many submissions in a quarter, which capability areas) may be kept indefinitely. These cannot be traced back to you.

Bot protection

Both forms use Google reCAPTCHA v3 to tell people from automated abuse. Google receives your IP address and interaction signals, and may set a cookie. This is subject to Google’s privacy policy and terms of service. We only see the resulting score.

We also apply per-address rate limits and a hidden field that only automated clients tend to fill in.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to privacy@darkstar.ee and we will respond within 30 days.

If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).