Autonymy, Inc. is a company currently in its pre-launch phase, operating a website that collects email addresses for a forthcoming newsletter. The company emphasizes a strict data-minimization approach, collecting only email addresses with explicit user consent and no cookies or trackers. Its privacy policy outlines GDPR-compliant data handling, including the right to erasure and withdrawal of consent.
Funding
Funding not disclosed
Founders
Product
Problem
Companies often collect excessive personal data through websites, using cookies and trackers that compromise user privacy and create compliance burdens under regulations like GDPR. This data-harvesting approach erodes consumer trust and exposes organizations to legal and reputational risks.
Solution
Autonymy, Inc. is building a privacy-first company that currently operates a minimal website focused on collecting email addresses for a newsletter. The company's approach is centered on data minimization, collecting only the absolute minimum information—an email address—necessary for communication. Autonymy does not use cookies or trackers, and processes all personal data based on explicit user consent, in full compliance with GDPR standards. The company is committed to transparency, offering users clear rights to access, correct, erase, and port their data, and it ensures that any third-party service providers adhere to the same strict privacy standards.
Target Audience
The primary audience is privacy-conscious individuals who want to stay informed about Autonymy's developments without compromising their personal data, as well as potential customers interested in a company that prioritizes data protection and GDPR compliance.
Features
- Data minimization policy that collects only email addresses, with no cookies or trackers used on the website
- Explicit consent-based data processing under GDPR Article 6(1)(a), with easy opt-out via unsubscribe links
- Full user rights including access, correction, erasure, data portability, and the ability to withdraw consent at any time
- Immediate deletion of user data upon unsubscription or consent withdrawal, with only a brief retention period to honor the request
- GDPR-compliant international data transfer safeguards, such as standard contractual clauses for non-EEA service providers