Privacy Notice

§1 · WHO WE ARE

Who is responsible for your information

Factory Zero Pte. Ltd. (in formation, Singapore). The registration number and registered address will be published here once the company is incorporated. It is responsible for the personal data described here. This notice covers factory0.ventures, including the control panel, and applies to requests about any venture, because every venture is a division of the same company.

Contact for anything about your information: contact@factory0.ventures.

§2 · WHAT WE COLLECT

What reaches us and what we record

When you send a request

• your name and email address;
• your organisation, if you give one;
• the track you choose: invest, a venture built, build on the FZ stack, partner or press;
• any message you write;
• your consent: the versions of the Terms and the Privacy Notice you agreed to, and the time you agreed (recorded by our server).

To check the request is from a person

• a verification token from Cloudflare Turnstile;
• the IP address of your connection, which we send to Cloudflare for that check.

Added by the server

The country that Cloudflare reports for your connection. It is shown in the mail we receive.

When sign-in launches

Sign-in is not live. When it is, we will collect the email address you sign in with, and any interests you save to your account. Sign-in uses an email link or passkeys. Sessions are kept in two HttpOnly cookies, described in §8. We will update this notice and tell you before this takes effect.

§3 · WHY WE USE IT

Our purposes and legal bases

• To answer your request, and to take steps you ask for before a contract. If you ask about a client engagement, we use your details to prepare and discuss it. The basis is steps at your request before a contract.
• Consent. You give consent when you tick the box before sending a request. You can withdraw it at any time by writing to us. Withdrawing does not affect what we did before you withdrew.
• Legitimate interests. To keep the site and its forms safe from abuse, and to keep a record of which version of these documents you agreed to and when. You may object to this (§7).

For Singapore’s Personal Data Protection Act, these purposes rest on your consent and on the Act’s provisions that allow a purpose a reasonable person would expect.

§4 · WHO PROCESSES IT

Our service providers

• Cloudflare, Inc. hosts the site, runs the function that receives your request, runs the Turnstile check, and handles mail sent to contact@factory0.ventures through Cloudflare Email Routing.
• Owlpost, an email delivery service that is also a Factory Zero venture, delivers your request to our team through its sending API.
• The Factory Zero team reads and answers requests. Requests are read by the people who handle them.

§5 · INTERNATIONAL TRANSFERS

Where it may be processed

Our providers operate in several countries. Your request may therefore be processed outside Singapore, outside the European Economic Area or the United Kingdom, or outside the country you live in. Where personal data leaves the country it was collected in, we rely on the safeguards our providers offer for international transfers, such as contractual clauses.

§6 · HOW LONG WE KEEP IT

Retention

• Requests are kept for up to 24 months after our last contact with you, unless an engagement follows. If one does, it is kept under the agreement for that engagement and for as long as the law requires.
• Consent records (the versions you agreed to and the time) are kept with the request they belong to.
• Account data, when sign-in is live, is kept until you delete your account.
• Browser storage stays on your device until you clear it (§8).

You can ask us to delete your information earlier (§7).

§7 · YOUR RIGHTS

What you can ask us to do

• Access: a copy of the personal data we hold about you.
• Correction: to fix anything that is wrong.
• Deletion: to delete what we hold about you, where the law allows.
• Objection: to processing that rests on our legitimate interests.
• Withdrawing consent: at any time, from the point you withdraw it.
• Restriction and portability: where the law gives them to you.

Write to contact@factory0.ventures. We may ask you to confirm who you are before we act. We respond as soon as reasonably possible, and within any time limit the law sets.

If you are not satisfied, you may complain to the Personal Data Protection Commission in Singapore, or to the data protection authority in the country where you live.

§8 · COOKIES AND BROWSER STORAGE

What we store on your device

We use no advertising, analytics or tracking cookies. We store only what the site needs to work:

• localStorage, fz-lang: your answer to the language banner and your language choice.
• localStorage, fz_terms_seen: the version of the Terms you last saw, so that we can tell you when they change. It is written only once you have sent a request.
• sessionStorage, fz-serial: the serial counter’s position for one browser session, so that it moves smoothly from page to page.
• Cookie fz_ref (partner referral): set only when you arrive through a partner’s link, and only if you have no referral cookie already. It holds the partner’s referral code and no personal information, expires after 90 days, is first-party, is not sent to any other site, and is not read by any advertising or analytics code. When you send a request through the contact form or the control panel, we check the code and record the referral, so that the partner can be credited. A client’s name is passed to the partner only when you agree to share it at that point.
• Cloudflare security cookies: Cloudflare may set its own cookies for bot protection when the Turnstile check runs. They are needed to keep the form secure.

These are removed when you clear your browser data. When sign-in launches, it will also set two session cookies, __Host-fz_at and __Host-fz_rt. Both are HttpOnly, so page scripts cannot read them, and both are needed for you to stay signed in.

§9 · CHILDREN

Under 16

The site and its forms are not for people under 16. Do not send us information about a child. If we learn that we hold personal data about someone under 16, we will delete it.

§10 · SECURITY

How we protect it

The site is served over HTTPS and sends a Strict-Transport-Security header. The form is checked by Turnstile, and the server accepts only the fields it needs. No system is perfectly secure. If you find a security problem, see security.txt for how to report it.

§11 · CHANGES

How we change this notice

Material changes take effect at least 14 days after we announce them on this site. For account holders, we also send an email at least 14 days before the change takes effect. Signed-in users are asked to accept the new notice the next time they sign in. Each request records the version you agreed to.

Changes that do not affect how we use personal data, such as a typo or a corrected contact detail, take effect when published and are listed below.

§12 · CONTACT

Questions and complaints

Write to contact@factory0.ventures. Factory Zero Pte. Ltd. is in formation in Singapore; its registration number and registered address will be published here once the company is incorporated.

WHAT CHANGED

Version history

• 22 October 2026 · version 2026-10-22. Added the referral cookie fz_ref (§8) and the partner program records (see the partner terms).
• 21 October 2026 · version 2026-10-21. First published. Requests now record consent to the Terms and this notice, with the versions and the time.