Privacy Policy

Scope

This Policy applies to the personal information described in Section 2. It does not cover data we receive from our business customers in connection with the Pandroid robots we provide to them and our related support services. That data is governed by our agreements with those customers and by our Retention and Deletion Policy at pantograph.com/legal/retention-and-deletion. If you use a Service on behalf of one of our customers, this Policy covers your account information, and Section 4 covers any information we receive from Google. It does not cover information about our own personnel (including employees and contractors) in that capacity, or the practices of third-party websites and services that we do not control, even if you reach them through the Site.

Personal Information We Collect

We collect the following personal information:

1. contact details, such as your name and email address and your company, when you sign up for early access or updates or otherwise contact us, and the content of your messages to us;
2. job application information, such as your résumé, work history, links you share and your communications with us, when you apply for a job through our applicant tracking provider, a job site such as LinkedIn, or by email;
3. account and registration information, such as your name, email address, affiliation and team, any dietary or accessibility needs you choose to tell us about, and any agreement you sign with us, when you create an account for a Service, register for an Event or take part in our research;
4. if you sign in to a Service with your Google account, the limited information described in Section 4;
5. activity and research data, such as the materials you submit (for example, code, evaluations, results and write-ups), records of your activity in the Services and our evaluation tools (for example, runs, prompts and model outputs, logs and robot telemetry generated during your session), and photographs, video and other recordings made at an Event or during a research session, as described in the agreement or notice for that Event or session; and
6. technical information collected automatically when you visit the Site or use the Services, such as your IP address, browser and device type, pages viewed, referring pages, and the dates and times of your visits, through server logs and the technologies described in Section 7.

How We Use Personal Information

We use personal information to:

1. operate, maintain, secure and improve the Site and the Services;
2. provide the Services to you and to our customers, including creating and securing accounts and giving authorized users access to our systems and robots;
3. respond to your inquiries and send you the early access information, product news and updates you asked for;
4. review job applications and communicate with applicants;
5. run our Events, including registering and checking in participants, confirming that participants have signed the participation agreement, forming teams, judging submissions, keeping the Event safe, and communicating with participants before and after the Event;
6. conduct research and develop, train, evaluate and improve our robots, AI models and evaluation tools, including their safety and reliability, using activity and research data as the agreement or notice under which it was collected permits; and
7. detect and prevent fraud, abuse and security incidents, comply with applicable law and legal process, and establish, exercise or defend legal claims.

Google User Data

If you choose to sign in to a Service with Google, Google shares with us only your name, email address and profile picture, and a unique identifier for your Google account (“Google User Data”). We do not request access to your Gmail, Google Drive, Google Calendar, contacts or any other data in your Google account.

We use Google User Data only to create and secure your account, confirm that you are authorized to use the Service (for example, as a registered Event participant or a user designated by one of our customers), show your name to others you work with in the Service (such as teammates, Event organizers and judges), attribute your activity and submissions, and contact you about the Service. We store it with the rest of your account information, on our own servers and with our cloud hosting and backup providers, and we share it only with service providers that host and operate the Services on our behalf, under contracts that limit their use of it to providing those services, and as Section 6 describes. We do not send Google User Data to the providers of the AI models used in the Services, sell it, use it for advertising, or transfer it to anyone else.

We do not use Google User Data to train, fine-tune, or develop our own or any third party’s foundation or machine learning models, including generalized artificial intelligence models. Pantograph’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We keep Google User Data for as long as your account is active or as otherwise needed for the purposes described in this Section, and you can ask us to delete it at any time as described in Section 10. You can also remove a Service’s access to your Google account at any time at myaccount.google.com/permissions. This paragraph applies only to the information we receive from Google. Information you give us directly, for example when you register for an Event, is retained as described in Section 8.

How We Share Personal Information

We may share personal information:

1. with service providers that perform services for us, such as website and app hosting, data storage and backup, email, electronic signature, applicant tracking, analytics, insurers and claims administrators, and professional advisers, under contracts that limit their use of the information to providing those services;
2. when you use AI models through the Services or our evaluation tools, with the provider of the model, which receives the prompts and other inputs submitted in order to generate a response (if you use an agent, harness or other tool provided by someone else, that tool and the model providers it uses handle your inputs under their own terms);
3. with the people helping to run an Event, judge it or lend robots for it, limited to what they need for those purposes, such as team names, submissions and results and, for co-organizers, registration and check-in information;
4. with research collaborators and other organizations we work with, activity and research data as the agreement or notice under which it was collected permits;
5. as Section 6 describes;
6. in connection with a merger, acquisition, financing or sale of assets, subject to the successor handling the information consistently with this Policy;
7. with your consent or at your direction; and
8. publicly, as the agreement or other terms for an Event or research session permit, such as photographs, video, team names, submissions and results.

Please do not include passwords, keys or other credentials, or personal information about yourself or others, in the inputs you submit to AI models through the Services. We do not share personal information for cross-context behavioral advertising.

Government and Law Enforcement Requests

We disclose personal information in response to a government or law enforcement request only through valid legal process, and we review each request for validity and scope and may object to or seek to narrow a request that we believe is overbroad, defective or unlawful. Where we consider it appropriate and are not prohibited from doing so, we may notify the affected individual. We disclose no more than the request requires. We may also disclose personal information where we believe in good faith it is necessary to protect someone from imminent risk of death or serious bodily harm. In addition, we may report suspected unlawful activity involving the Site, the Services, an Event, or our property or personnel to the appropriate authorities. Requests should be sent to legal@pantograph.com.

Cookies, Analytics and Do Not Track

We use cookies and similar technologies that are strictly necessary to operate and secure the Site and the Services, such as for signing in and keeping your session active, and analytics tools to understand how people use the Site and the Services and to improve them. We do not currently use advertising cookies or pixels. We do not allow third parties to collect personal information about your online activities over time and across other websites through the Site, other than our analytics providers as described above.

Some browsers offer a “Do Not Track” setting. Because there is no common standard for how to respond to these signals, the Site does not currently respond to them. You can block or delete cookies through your browser settings, although parts of the Site or the Services may not work without them.

Data Retention

We retain personal information for as long as necessary for the purposes described in this Policy, including to comply with our legal obligations, resolve disputes and enforce our agreements. In deciding how long that is, we consider why we collected it, whether you still have an account or relationship with us, its value for our research and for the safety of our robots, and our legal obligations. Google User Data is retained as described in Section 4.

Security

We hold personal information in cloud accounts we control with our hosting, storage and backup providers, and on servers at our own premises. We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration and destruction, appropriate to the nature of the information and the size and complexity of our operations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

You can unsubscribe from our emails at any time by using the link in the email or by contacting us. You can also ask us to tell you what personal information we hold about you, to correct it, or to delete it, by emailing legal@pantograph.com. We will respond as required by applicable law and may need to verify your identity first. We may keep some information where the law permits or requires it, for example records of our agreements, robot safety records, or research data that the agreement or notice under which it was collected allows us to keep.

Children

The Site and the Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

Where We Process Information

Pantograph is based in the United States. We and our service providers may process and store personal information in the United States and other countries. If you access the Site, use the Services or take part in an Event from outside the United States, your information will be transferred to the United States.

Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the version number and Effective Date above and post the updated Policy on the Site. If we make material changes, we will provide any notice that applicable law requires.

How to Contact Us

If you have questions about this Policy or would like to make a request under it, please contact us at legal@pantograph.com.