Privacy Policy

01 / Scope and our role

This Policy applies to se3labs.ai, our customer workspace, application programming interfaces, software development kits, evaluation services, Factory Atlas, pilots, and related communications, collectively the “Services.” It does not apply to job-applicant or employee information or to third-party services that we do not control.

For website visits, account administration, business communications, security, billing, and our own operations, SE3 generally acts as the business or controller responsible for personal information.

When we process evaluation recordings, sensor data, annotations, or other personal information solely on a customer's instructions, SE3 acts as that customer's service provider or processor. The customer determines whether to collect the information and is responsible for required notices, permissions, consents, and privacy requests. We may refer a request concerning customer-controlled information to that customer.

02 / Information we collect

Information you provide

• Contact and business information, including your name, business email, telephone number, employer, title, and communications.
• Account information, including your organization, project membership, role, authentication identifiers, and preferences.
• Commercial information, including service requests, agreements, usage, invoices, payment status, and billing contacts.
• Customer and project content, including task specifications, success criteria, configurations, evaluation requests, datasets, files, and support materials you choose to provide.
• Factory and partner information, including site capabilities, equipment, operating conditions, availability, safety requirements, and authorized representative details.

Evaluation and operational information

Depending on an evaluation's approved configuration, we may process:

• robot observations, candidate actions, heartbeats, timestamps, latency, and other session traffic;
• run and episode status, aggregate metrics, diagnostics, operator interventions, incidents, safety events, and audit records;
• when an authorized customer expressly enables recording or retention, video, images, audio, telemetry, trajectories, raw observations, raw actions, or other sensor data;
• annotations and derived information, including task and outcome segments, failure labels, language annotations, and hand or action tracking; and
• workcell and operating-environment information, including site identifiers or location information.

Recordings may incidentally contain a person's image, voice, movements, clothing, workstation, badge, screen, or other objects in the environment. Recording of raw observations, raw actions, trajectories, telemetry, and video is off by default. An authorized customer user must expressly enable that recording or retention for an evaluation.

Customer model weights and checkpoints are not intended to leave the customer's environment or be stored by SE3. Customer inference code is intended to run on customer-controlled infrastructure. During an evaluation, observations and candidate actions necessarily pass through SE3-controlled station software and the secure connection. Unless retention is expressly enabled, SE3 uses this traffic transiently and does not intentionally persist its raw contents after the session, except where limited preservation is needed for a security or safety incident or to comply with law.

Information collected automatically

We and our infrastructure providers may receive IP address, browser and device information, operating system and language, request time and resource, referring page, errors, authentication events, security logs, and service performance and diagnostic information.

As of the effective date, the public se3labs.ai website does not use advertising trackers, behavioral advertising, or non-essential analytics cookies. The site is hosted through GitHub Pages, and GitHub may process network and device information to provide and secure that hosting service. If we introduce non-essential cookies or similar technologies, we will update this Policy and request consent where required.

Information from other sources

We may receive information from your employer or organization administrator; customers and project sponsors; factory, evaluation, and data-collection partners; identity, security, payment, and other service providers; public sources and professional networks; and referrals, events, and business partners.

03 / How we use information

We use personal information to:

• provide, operate, configure, support, and improve the Services;
• administer accounts, organizations, permissions, and projects;
• schedule and conduct evaluations, operate workcells, process results, and deliver authorized datasets or reports;
• connect customers with relevant factory or evaluation opportunities;
• respond to inquiries, arrange demonstrations, communicate with you, process transactions, and maintain business records;
• authenticate users, maintain service integrity, prevent misuse, and investigate security, privacy, safety, or quality incidents;
• improve reliability, usability, and performance using aggregated, de-identified, or minimized information where practical; and
• comply with law, enforce agreements, establish or defend legal claims, and protect people, property, and the Services.

We do not use customer model weights, checkpoints, or customer-provided raw evaluation content to train a general-purpose model for SE3 or another customer unless the customer expressly authorizes it in writing. Subject to our contractual commitments, we may use aggregated or de-identified operational information that cannot reasonably be linked to an individual or customer to improve and benchmark the Services.

We do not use evaluation recordings to identify people or create faceprints, voiceprints, or other biometric identity templates unless that processing is separately disclosed, contractually authorized, and supported by any consent required by law.

04 / Legal bases

Where the laws of the European Economic Area, United Kingdom, or Switzerland apply, we process personal information as needed to perform a contract or take requested pre-contract steps; for our legitimate interests in operating, securing, and improving the Services and managing business relationships; with consent for a specific purpose; to comply with legal obligations; or, in limited circumstances, to protect a person's vital interests. You may withdraw consent at any time without affecting earlier lawful processing.

05 / How we disclose information

We may disclose personal information to:

• service providers supporting hosting, infrastructure, authentication, security, communications, support, payments, storage, annotation, quality control, and professional services;
• customers and people authorized to administer an organization, project, evaluation, or account;
• evaluation, factory, and operational partners when needed to assess a site, perform an approved evaluation or collection, maintain safety, or deliver the requested result;
• professional advisers, including lawyers, accountants, and insurers;
• authorities or other parties when required by law or reasonably necessary to protect rights, security, property, or physical safety, investigate misuse, or establish or defend legal claims; and
• parties to a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising as those terms are defined by applicable U.S. state privacy laws.

06 / Retention

We retain personal information only as long as reasonably necessary to provide the Services, maintain security and safety records, comply with law and contracts, resolve disputes, and enforce agreements. We consider the information's amount, nature, sensitivity, risk, purpose, and applicable legal requirements.

Raw evaluation traffic is transient and is not intentionally persisted unless retention is expressly enabled or limited preservation is needed for an incident or legal requirement. Required evaluation records and optional artifacts follow the customer agreement and the retention settings approved before the evaluation. Legal holds, active incidents, contractual obligations, or backup-expiry cycles may delay final deletion. Residual copies may remain in backups for a limited period after deletion from active systems.

07 / International transfers

SE3 and its providers and partners may process information outside the country where it was collected. Where required, we use recognized safeguards for restricted transfers, such as adequacy decisions, standard contractual clauses, the United Kingdom's approved transfer mechanisms, or another lawful mechanism. Contact us for more information about applicable safeguards.

08 / Security

We use administrative, technical, and physical safeguards designed to protect personal information. Depending on the Service, these include encryption in transit, access controls, short-lived credentials, organization and project isolation, audit logging, data minimization, payload exclusions from routine logs, and incident-response procedures. No transmission or storage method is completely secure. You are responsible for protecting your credentials and promptly telling us about suspected unauthorized access.

09 / Your privacy rights

Depending on where you live and subject to applicable exceptions, you may ask to access, correct, delete, or receive a portable copy of personal information about you; restrict or object to certain processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; or appeal a denied request.

SE3 does not currently sell or share personal information for cross-context behavioral advertising, use it for targeted advertising, or use it to make decisions producing legal or similarly significant effects about people. We do not offer an opt-out mechanism for activities we do not perform.

To exercise a right, email conan@se3labs.ai and describe your request and the relationship through which SE3 received your information. We may request information reasonably necessary to verify identity and authority. We will not discriminate against you for exercising an applicable right. If we process the information only for a customer, please direct the request to that customer; we will assist as required.

People in the EEA, United Kingdom, or Switzerland may also complain to the data-protection authority where they live or work or where they believe an infringement occurred.

10 / Children

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information directly from children through the Services. Customers and partners must not include a child in evaluation or collection data unless SE3 has approved the activity in writing and all required permissions, notices, safeguards, and consents are in place.

11 / Third-party services

The Services may link to services controlled by others. Their privacy practices are governed by their notices, not this Policy. Our public website is currently hosted through GitHub Pages. Contact links open your email application, and your email provider independently processes your message under its own terms.

12 / Changes to this Policy

We may update this Policy as our Services, practices, or legal obligations change. We will post the revised version with a new “Last updated” date and provide additional notice when required by law. Material changes apply prospectively unless otherwise stated or permitted by law.