Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how BioLifeSciences LLC, a Delaware limited liability company doing business as Vellum AI ("Vellum," "we," "us" or "our"), collects, uses and shares personal information through joinvellum.com, our estimator and forms, and our related emails and calls (together, the "Site").

The short version: we collect what you type into our forms and what you tell us on a call, we use it to work out whether your business is a fit and to talk to you about it, and we do not sell it, put you on a mailing list, or pass it to buyers without your permission.

1. Who this covers

This policy covers people who visit the Site, request an estimate or assessment, refer a business, ask about buying data, or talk to us. Section 7 separately explains how we treat information about people that may appear in business records a company licenses through us.

It does not cover our own employees or job applicants.

2. Information we collect

Information you give us

Contact details: name, work email, phone number (if you give one), job title or role.
Business details: business name, website, industry, headcount range, years in operation.
Assessment answers: your answers to the qualification and estimator questions, such as where work gets recorded and whether outcomes are tracked, and the estimate we calculate from them.
Referral details: if you refer a business, the business's name and website, how you know it, and any contact details you choose to give us for someone there.
Buyer enquiries: your name, organization, work email and what data you are looking for.
Communications: what you write to us, and notes we take during calls. We will ask before recording any call.

Please do not send us customer records, employee information, passwords or system access through the Site. We do not need them to assess fit.

Information collected automatically

Device and usage data: browser and device type, IP address, approximate location derived from it, pages viewed, time on page, and the page that referred you.
Campaign data: tracking parameters in the link you arrived from (for example, which email or ad sent you).
Cookies and similar technologies: see Section 6.

Information from others

Someone who refers your business to us may give us your name and contact details.
We may look up publicly available information about a business, such as its website and public registry records, to prepare for a call.

3. How we use it

To calculate and show your estimate, and email it to you if you ask.
To assess whether your business may qualify, schedule and hold calls, and follow up about an opportunity you asked about.
To track referrals and pay referral fees, including collecting tax forms where required.
To respond to buyer enquiries.
To operate, secure and improve the Site, including understanding which pages and channels are useful.
To prevent fraud and misuse, enforce our Terms of Use, and comply with law.

We do not add you to a marketing mailing list or automated follow-up sequence because you used the Site. We do not use your information to train AI models, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share it only with:

Service providers that help us run the Site and our business, such as hosting, form handling, email, scheduling, customer relationship management and analytics providers. They may use it only to provide services to us.
Prospective buyers, only with your permission. We do not tell a buyer the name of your business, or share your contact details with one, unless you have agreed.
The person who referred you, limited to the status of the referral (for example, whether a call happened or an agreement was signed).
Professional advisors such as lawyers and accountants, under confidentiality.
Authorities or others when we believe in good faith that the law requires it, or to protect rights, safety or property.
A successor in a merger, acquisition, financing or sale of all or part of our business, subject to this policy.

5. Calls and text messages

If you give us a phone number, we will use it only to talk to you about your enquiry, referral or agreement. We will text you only if you have agreed to receive texts. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help.

We do not share mobile numbers or text-messaging consent with third parties for their marketing.

6. Cookies and analytics

We use cookies and similar technologies that are needed for the Site to work, and analytics that tell us how the Site is used (for example, which pages are visited and whether the estimator is completed). We do not use advertising cookies or allow third parties to track you across other sites through ours.

Most browsers let you block or delete cookies. Blocking essential cookies may stop parts of the Site, such as forms, from working. Where the law requires, we honor browser privacy signals such as Global Privacy Control.

7. Information in business records licensed through us

Businesses that license records through Vellum hold information about other people, such as their customers and staff. Our process is designed so that personal information does not reach us or any buyer:

Removed at the source. De-identification runs on the licensing business's own systems before anything is transmitted. Names, contact details, addresses, pricing, account identifiers and anything tied to a specific customer are removed, and the business's staff approve a sample of the output before any record moves.
No re-identification. We commit not to attempt to re-identify any person from de-identified records, except to test that our de-identification works, and we keep reasonable technical and organizational measures in place to prevent it.
Contractual protections. Every buyer must agree in writing not to attempt to re-identify anyone, not to contact anyone it believes appears in the data, and to use the data only for the licensed purpose.
The business is responsible for notice. The business that licenses its records is responsible for giving any notice and obtaining any consent the law requires for its own customers and staff.

If you believe information about you is in records licensed through us and want to ask about it, contact us at the address in Section 14 and tell us the business involved, if you know it. We will respond as the law requires, which may include working with that business.

8. Retention

We keep personal information only as long as needed for the purposes in this policy. In general:

Leads that do not go forward: up to 24 months after our last contact, so we can follow up if our qualifying bar changes, unless you ask us to delete it sooner.
Businesses and referrers we work with: for the life of the relationship and as long afterward as needed for contracts, payments, tax and legal claims.
Analytics data: in aggregated or de-identified form, or for no more than 26 months.

9. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls and limiting access to people who need it. No system is perfectly secure, and we cannot guarantee the security of information sent to us over the internet.

10. Your rights and choices

Depending on where you live, you may have the right to:

confirm whether we process your personal information and access a copy of it;
correct inaccurate information;
delete information we hold about you;
receive your information in a portable format; and
opt out of the sale of personal information, targeted advertising and certain profiling. We do not do any of these, so there is nothing to opt out of today.

To make a request, email us at the address in Section 14 with the subject line "Privacy request." We may need to verify your identity before acting, and you may use an authorized agent where the law allows. If we decline your request, you may appeal by replying with the subject line "Privacy appeal"; if you are not satisfied with the outcome, you may contact your state attorney general. We will not discriminate against you for exercising these rights.

You can also ask us at any time to stop contacting you, and we will.