Privacy Policy

In the course of our business operations, we collect various categories of Personal Information to ensure the highest standard of service and legal compliance. These categories include, but are not limited to:

• Direct and Legal Identifiers: Full legal name, aliases, unique personal identifiers, online identifiers, IP addresses, email addresses, physical shipping addresses for hardware delivery, billing addresses, and telephone numbers.
• Commercial and Transactional History: Detailed records of robotic products and components purchased, obtained, or considered, as well as other purchasing or consuming histories or tendencies related to our hardware and software ecosystems.
• Financial and Payment Data: Credit card numbers, debit card numbers, bank account details, and other financial information required for processing high-value transactions, which are facilitated through encrypted, PCI-DSS compliant third-party processors (e.g., Stripe, Shopify).
• Technical and Network Activity: Detailed browsing history, search history, and information regarding your interaction with our Site, applications, or advertisements, including device metadata, browser type, and operating system specifications.
• Geolocation Data: Precise or approximate physical location data derived from IP addresses or GPS, utilized for logistics, export control compliance, and regional regulatory adherence.

Prometu, Inc. acquires Personal Information through a multi-faceted approach to ensure data accuracy and operational efficiency:

• Direct Voluntary Submission: Information you provide explicitly when creating an account, executing a purchase agreement, subscribing to technical newsletters, or contacting our support and legal departments.
• Automated Data Collection Technologies: As you navigate the Site, we use automated data collection technologies (cookies, web beacons, pixels, and server logs) to collect information about your equipment and browsing actions.
• Third-Party Analytics and Integrations: Data received from our business partners, including payment gateways, logistics and freight forwarders, and analytics providers (e.g., Google Analytics) to supplement our understanding of user requirements.

We utilize your Personal Information under several legal bases, including contractual necessity, legal obligation, and legitimate business interests. Specific purposes include:

• Contractual Fulfillment and Logistics: Managing the complex manufacturing-to-delivery pipeline of robotic hardware, including shipping, customs documentation, and order tracking.
• Operational Integrity and Technical Support: Providing critical firmware updates, technical maintenance alerts, and responsive customer assistance for robotic systems.
• Internal Security and Fraud Mitigation: Implementing rigorous protocols to detect, prevent, and investigate cyber-attacks, fraudulent transactions, or unauthorized access to our proprietary systems.
• Regulatory and Legal Compliance: Adhering to the corporate laws of the State of Delaware, United States federal laws, export control regulations (EAR), and tax reporting requirements.
• Commercial Communication: Delivering highly relevant updates regarding robotic innovations, hardware iterations, and Prometu, Inc. corporate developments, provided you have not opted out of such communications.

Prometu, Inc. does not sell, rent, or lease your Personal Information to third parties for monetary consideration. However, we may disclose your information to the following entities for strictly defined business purposes:

• Authorized Service Providers: Third-party vendors who perform specialized tasks on our behalf, such as high-scale cloud hosting (AWS/Google Cloud), payment processing, and international logistics.
• Legal and Professional Counsel: Sharing data with legal advisors, auditors, and insurers as required to maintain corporate governance and manage legal risks.
• Corporate Reorganization: In the event of a merger, divestiture, restructuring, or sale of some or all of Prometu, Inc.’s assets, Personal Information held by us may be among the assets transferred.
• Mandatory Legal Disclosures: We reserve the right to disclose your Personal Information as required by law, such as to comply with a subpoena, court order, or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

We strictly adhere to the principle of storage limitation. Your Personal Information is retained only for as long as is strictly necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use, and the applicable legal statutes of limitations in the State of Delaware and federal jurisdictions.

Depending on your residency, you may be entitled to specific rights regarding your Personal Information under frameworks such as the CCPA/CPRA or other state-level privacy laws. These rights include:

• Right to Know/Access: The right to request disclosure of the specific pieces of Personal Information we have collected.
• Right to Rectification: The right to demand the correction of inaccurate or incomplete data.
• Right to Deletion: The right to request the permanent erasure of your data, subject to certain legal exceptions (e.g., debt collection, legal hold).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To initiate a formal request, please submit a verifiable consumer request via our contact page.

Prometu, Inc. does not design its products or Site for individuals under the age of 18, and specifically prohibits the use of its services by children under the age of 13. We do not knowingly collect or solicit Personal Information from anyone under 13. If we discover that we have inadvertently collected data from a child under the age of 13, we will execute immediate data destruction protocols. Parents or guardians who believe such data has been collected should contact us at once.

We implement an 'Information Security Program' consisting of administrative, technical, and physical safeguards. This includes AES-256 encryption for data at rest, TLS protocols for data in transit, and restricted access controls for internal staff. While no method of transmission over the Internet or electronic storage is 100% secure, we strive to exceed industry standards to prevent unauthorized disclosure or breach.

This Policy is governed by and construed in accordance with the laws of the State of Delaware, United States. Any questions, formal notices, or concerns regarding this Policy or our data handling practices should be directed to our Legal Compliance Officer via our contact page. Prometu, Inc. reserves the right to modify this Policy at its sole discretion; the 'Last Updated' date will reflect the most recent iteration.