Privacy Policy

1. Overview

Percept AI ("Percept," "we," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Percept platform, APIs, website, and related services.

By using our Services, you consent to the practices described in this policy. We encourage you to read it alongside our Terms of Service.

2. Information We Collect

Information you provide

• Account information — name, email address, company name, role, and billing details when you register or subscribe.
• User Data — imagery, video, LiDAR scans, sensor data, and other spatial inputs you upload for processing.
• Communications — messages, feedback, and support requests you send to us.

Information collected automatically

• Usage data — API calls, feature usage, session duration, and interaction patterns.
• Device information — browser type, operating system, IP address, and device identifiers.
• Log data — server logs including timestamps, request URLs, and response codes.

Information from third parties

• Authentication providers — if you sign in via SSO or OAuth, we receive basic profile information from the identity provider.
• Analytics partners — aggregated usage insights from privacy-respecting analytics services.

3. How We Use Your Information

4. Legal Basis for Processing

For users in the European Economic Area, we process personal data on the following legal bases:

• Contract performance — processing necessary to provide the Services you've requested.
• Legitimate interests — improving our platform, preventing fraud, and ensuring security.
• Consent — where you've given explicit consent, such as for marketing communications.
• Legal obligation — where processing is required to comply with applicable law.

5. Sharing & Disclosure

We do not sell your personal information. We may share data only in these circumstances:

• Service providers — trusted third parties who assist in operating our platform (cloud infrastructure, payment processing, analytics), bound by data processing agreements.
• Legal requirements — when required by law, court order, or governmental request.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.
• With your consent — when you explicitly authorize sharing.

6. Your Spatial Data

We treat User Data — the imagery, scans, and sensor inputs you process through our platform — with particular care:

• Your User Data belongs to you. We do not claim ownership.
• We process User Data solely to provide the Services you've requested.
• We do not use your User Data to train our foundation models unless you explicitly opt in to a research program.
• User Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• You may delete your User Data at any time through the platform dashboard or by contacting us.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. Specifically:

• Account data — retained while your account is active, deleted within 90 days of account closure.
• User Data and Outputs — retained according to your plan's storage terms. Available for export for 30 days after account closure.
• Usage and log data — retained for up to 24 months for operational and security purposes.
• Billing records — retained for 7 years as required by financial regulations.

8. Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data in transit and at rest.
• SOC 2 Type II certified infrastructure.
• Regular penetration testing and vulnerability assessments.
• Role-based access controls with audit logging.
• Incident response procedures with 72-hour breach notification.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request restriction of processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@percept.ai. We will respond within 30 days.

10. Cookies & Tracking

We use minimal cookies and tracking technologies:

• Essential cookies — required for authentication, security, and core functionality. Cannot be disabled.
• Analytics — privacy-respecting, aggregate usage analytics to improve the platform. No cross-site tracking.

We do not use advertising cookies or share data with ad networks.

11. International Data Transfers

Our infrastructure operates in the United States and European Union. If you access the Services from outside these regions, your data may be transferred to and processed in these locations.

For transfers from the EEA, we rely on Standard Contractual Clauses approved by the European Commission, supplemented by additional security measures where appropriate.

12. Children's Privacy

The Services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the revised policy on our website, updating the "Last updated" date, and, for significant changes, sending an email notification to your registered address.

14. Contact

For questions, concerns, or data rights requests:

Percept AI — Privacy Team
privacy@percept.ai

For EU-specific inquiries, you may also contact our Data Protection Officer at dpo@percept.ai.