Legal
Privacy Policy
Last updated: 3 August 2026
1. Who we are
This website, www.together-alone.com (the "Website"), is operated by Together Alone Ventures OÜ, a private limited company incorporated in Estonia (registry code 17288376), with its registered office at Tartu mnt 67/1-13b, Kesklinna linnaosa, Tallinn 10115, Harju maakond, Estonia. On the Website we operate under the name TogetherAlone Ventures. In this policy, "TAV", "we", "us" and "our" mean Together Alone Ventures OÜ. We are the data controller for personal data collected through the Website, within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus). Contact for privacy matters: hello@together-alone.com.
2. Scope, and what this policy does not cover
This policy covers the personal data we process when you visit the Website, contact us through it, or otherwise communicate with us about our work. It does not cover our products, which run on separate websites and applications under their own terms and privacy notices when made available: Zombie Delete (including the MKT Delete and ZKP Delete tiers); and Bonded (including the Bonded App and the Bonded Token, the Relational Soulbound Token accessed through the Bonded API, at www.bonded2.com). If you use any of those products, the notice published for that product governs that use, not this policy. Where TAV processes personal data on behalf of a business customer of a product, TAV acts as a processor under a separate data processing agreement and the customer is the controller.
3. The personal data we collect through the Website
(a) Information you give us. When you complete a contact or enquiry form, or email us at hello@together-alone.com, we collect your name, your email address, any company or organisation name you provide, and the content of your message. If you ask to join a waiting list, request access to a data room, or register interest in a product, we collect the details you submit for that purpose. (b) Information handled automatically. We do not use analytics, advertising, or other tracking, we do not set cookies, and we do not keep server logs. The Website is delivered through the Internet Computer, a decentralised network. To route and display the pages, transient technical data such as your IP address is processed by the network, but we do not store it. (c) We do not intentionally collect special categories of personal data (such as data revealing health, ethnicity, or political opinions) through the Website, and we ask that you do not send such data to us through it. Any relationship or immigration-related data handled by the Bonded App is dealt with under the Bonded privacy notice, not here.
4. Why we process your data, and our legal bases
We process your personal data on the following legal bases under Article 6(1) GDPR: • To respond to your enquiry and correspond with you. Legal basis: our legitimate interests in answering people who contact us, and, where you are entering into a contract or a pre-contractual discussion, the taking of steps at your request before entering into a contract (Article 6(1)(f) and (b)). • To deliver and secure the Website. Legal basis: our legitimate interests in running a functional, secure website (Article 6(1)(f)). • To comply with our legal obligations, and to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation (Article 6(1)(c)) and our legitimate interests (Article 6(1)(f)). Where we rely on legitimate interests, we have weighed them against your rights and freedoms and consider that our processing does not override them. You may object to this processing (see section 9).
5. Who we share your data with
We do not sell your personal data. We share it only with: • Proton (Proton Mail), operated by Proton AG in Switzerland, which handles our email. When you email us, or when we correspond with you, your message is processed through Proton on our behalf. • The Internet Computer, the decentralised network of independently operated nodes through which the Website is delivered. We do not store personal data on this network. • Professional advisers such as lawyers and accountants where necessary, and, to the extent required, public authorities, regulators, or courts. • A successor entity, in the event of a reorganisation, merger, or sale of the business or its assets.
6. International transfers
Our email is handled by Proton, based in Switzerland. Switzerland benefits from a European Commission adequacy decision, so no additional safeguards are required for that correspondence. The Website is delivered through the Internet Computer, a decentralised network whose nodes may be located inside and outside the European Economic Area. We do not store personal data on this network; only the transient technical data needed to route and display the Website is processed. You may ask us for more information using the contact details below. If your organisation requires processing to be restricted to nodes in specific jurisdictions only, sovereign and region-constrained deployments are possible. Please get in touch using the contact details below.
7. How long we keep your data
We keep no server logs and store no personal data on the Website itself. Email correspondence you send us is kept in our Proton mailbox only for as long as we need it to deal with your enquiry and any follow-up, and is then deleted.
8. Cookies
The Website does not use cookies, and does not use analytics, advertising, or other tracking technologies. Because no non-essential cookies or similar technologies are used, no cookie consent banner is required.
9. Your rights
Under the GDPR and the Estonian Personal Data Protection Act, you have the right to: access your personal data; have inaccurate data rectified; have your data erased in certain circumstances; restrict our processing; object to processing based on legitimate interests; receive your data in a portable format where processing is based on consent or contract and carried out by automated means; and, where processing is based on consent, withdraw that consent at any time without affecting processing already carried out. To exercise any of these rights, contact us at hello@together-alone.com. We will respond within one month, as required by law. There is normally no charge. You also have the right to lodge a complaint with the Estonian supervisory authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) Tatari 39, 10134 Tallinn, Estonia Website: www.aki.ee Email: info@aki.ee We encourage you to contact us first so that we have the opportunity to resolve your concern. In practice, we design our systems so that we do not retain personal data at all. These rights are stated for completeness and apply in the unlikely event that personal data is nonetheless held by us.
10. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, as required by Article 32 GDPR. Although no method of transmission over the internet or of electronic storage is completely secure, we work to protect your data and to notify you and the Inspectorate of any breach where the law requires it.
11. Automated decision-making
We do not carry out automated decision-making that produces legal or similarly significant effects on you through the Website.
12. Children
The Website is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal data from children through it.
13. Changes to this policy
We may update this policy from time to time. The current version is always the one published on the Website, with the "last updated" date at the top. Where changes are significant, we will take reasonable steps to bring them to your attention.
14. Contact
Questions about this policy or your personal data: hello@together-alone.com, or by post to the registered office in section 1.