Privacy Policy

1. Introduction

PrimaLabs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hardware-in-the-loop AI optimization platform and related services (collectively, the "Services"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

2. Information We Collect

3. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We may share information with third-party vendors and service providers who perform services on our behalf, such as cloud hosting, data analytics, payment processing, and customer support
• Advertising conversion measurement: When you submit a form, we may share a hashed version of your email address with advertising platforms such as Google to measure conversions. This hashed data cannot reasonably be used to identify you outside that measurement
• Business Transfers: In connection with any merger, sale, acquisition, or transfer of all or a portion of our business assets
• Legal Requirements: When required by law, subpoena, or other legal process, or when necessary to protect our rights, safety, or property, or that of others
• With Your Consent: When you provide explicit consent to share your information with third parties
• Aggregated or de-identified information: We may share aggregated or de-identified information that cannot reasonably be used to identify you, provided that such information is derived solely from operational and usage metadata and not from the content of your Inputs or Outputs

In addition to the foregoing, we may use the information we collect to:

• Provide, operate, and maintain the Services
• Operate, secure, and improve the performance of the Services using operational and usage metadata that does not include the content of your Inputs or Outputs
• Improve the Services using aggregated operational metrics that do not include, and are not derived from, the content of your Inputs or Outputs
• Detect, prevent, and address security incidents, fraud, and abuse
• Comply with legal obligations

We do not use the content of your Inputs or Outputs to train, fine-tune, or improve AI models, and we do not retain that content after your request or session completes, except as described in Section 6.3 of the Terms.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, secure data centers, regular security assessments, and employee training on data protection. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

5. Data Retention

We do not retain the content of your Inputs or Outputs after the applicable request or session completes, except (a) where you enable a feature that stores content (such as conversation history), for as long as that feature is enabled, and (b) where retention is required by law or valid legal process. We may retain operational and usage metadata that does not include Input or Output content, and billing records for as long as required for tax and accounting purposes. When a retention period ends, we delete or de-identify the data.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to and receive a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Objection: Object to certain processing activities, including direct marketing
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your information to another service provider
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. You also have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer information internationally, we implement appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy and applicable law. These safeguards may include Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe we have collected information from a child under 18, please contact us immediately at [email protected], and we will take steps to delete such information.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your information. We are not responsible for the privacy practices or content of third parties.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at [email protected]. We will verify your identity before processing your request.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority. We process your personal information based on legal grounds such as consent, contractual necessity, legitimate interests, or compliance with legal obligations. For questions about our GDPR compliance or to exercise your rights, please contact [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Effective Date" above. For significant changes, we may provide additional notice, such as through email or a prominent notice on our Services. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

PrimaLabs
Email: [email protected]

We will respond to your inquiry as soon as reasonably possible.