Privacy Policy
This policy explains what personal data MachineDigit collects, why we collect it, how long we keep it, who we share it with, and the rights you have over it. It covers this website and the beta program. For a plain-language summary of how we handle brain-signal data during beta, see Privacy & Safety. If this policy and that summary ever disagree, this policy controls.
1. Who we are
The data controller is MachineDigit Robotics Inc, registered at 2810 N Church St STE 89067, Wilmington, Delaware 19802, USA ("MachineDigit", "we", "us"). For any privacy question or request, contact[email protected].
2. What we collect
We collect three kinds of data, each tied to a specific interaction with us.
2.1 Website visitors
Our website sets no cookies unless you allow analytics. If you do, we load two measurement tools: Cloudflare Web Analytics, a cookie-free service that records page views without storing personal data, device fingerprints, or cross-site identifiers; and Google Analytics, which sets first-party cookies and a random identifier to measure visits, traffic sources, and page engagement. Google Analytics does not log or store IP addresses. Your consent choice itself is stored in your browser's local storage, on your device, and is never transmitted to us. Our hosting and network providers (see section 6) process IP addresses transiently to deliver the site and to block abuse.
2.2 Beta applicants
When you submit the beta application form we collect the details you enter: name, email, organization, role, location, your testing intent, prior device experience, the access you request, and anything you add in free-text fields. We also process your IP address for spam protection and rate limiting. We use this data only to evaluate your application and reply to you.
2.3 Beta testers
If you are admitted to the beta program and sign the beta agreement, we additionally collect, per recorded session and only with your explicit consent:
- Raw and processed brain-signal data from sessions you start
- Session metadata: timestamps, task labels, environment notes
- Device diagnostics: battery, contact quality, firmware version
- Account details, structured feedback, and application logs
We treat brain-signal data as sensitive data in every jurisdiction we operate in, whether or not local law has caught up. We do not sell it. We do not use it for advertising. We do not share identifiable session data outside the purposes below.
3. Why we process it, and the legal bases
| PURPOSE | DATA | LEGAL BASIS (GDPR) |
|---|---|---|
| Delivering the website and blocking abuse | Transient IP addresses, request logs | Legitimate interest (Art. 6(1)(f)) |
| Analytics, only if you allow it | Aggregated page-view counts; visit and engagement measurements | Consent (Art. 6(1)(a)) |
| Evaluating and replying to beta applications | Application form data | Pre-contractual steps (Art. 6(1)(b)) |
| Running beta sessions and improving the product | Brain-signal data, session metadata, diagnostics | Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) |
| Research studies | Session data of participating testers | Separate explicit consent, requested per study |
| Support, debugging, and safety-incident review | Account data, diagnostics, relevant session data | Contract (Art. 6(1)(b)) and legitimate interest |
Where we rely on consent you can withdraw it at any time, with effect for the future, without leaving the beta program. Emerging neural-data laws (for example in Colorado and California) grant additional protections to this category of data; where they apply, we honor them.
4. How long we keep it
- Applications that do not lead to admission: deleted within 12 months of the decision
- Beta session data: kept for the duration of the program plus 24 months, then deleted or fully anonymized
- Account and feedback records: deleted within 12 months of the program ending or your exit
- Data you ask us to delete: removed from active systems within 30 days, and from backups on their rotation schedule
5. Your rights
Depending on where you live, you can ask us for access to your data, a copy in a portable format, correction, deletion, restriction of processing, or object to processing based on legitimate interest. Beta testers can also review and manage their own session data directly in the beta dashboard. To exercise any right, email[email protected]. We respond within 30 days. If you are in the EU or UK you can also complain to your supervisory authority.
6. Who we share it with
We use a small number of processors to run the service. Each processes data on our instructions under a data-processing agreement:
- Amazon Web Services: hosting of the website and application service
- Cloudflare: content delivery, security, spam protection (Turnstile), and cookie-free analytics
- Google: Workspace email (including application notifications and replies) and, only if you allow analytics, Google Analytics
We do not sell personal data to anyone. We disclose data beyond these processors only if the law requires it, or during a corporate transaction under equivalent confidentiality, in which case we notify affected testers.
7. International transfers
Our infrastructure is hosted in the United States (Amazon Web Services, us-east-1 region). Where personal data of EU, UK, or Swiss residents is transferred outside those areas, we rely on adequacy decisions or standard contractual clauses.
8. Security and where processing happens
Signal quality and filtering run on the device; decoding runs in the MachineDigit platform. Raw session EEG is uploaded under your per-session consent and is encrypted in transit. Access to identifiable data is restricted to team members who need it for the purposes above. The beta program includes a direct channel for reporting incidents; confirmed personal-data breaches are notified to affected testers and regulators as the law requires.
9. Children
The website and the beta program are for adults 18 and over. We do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it.
10. Changes
We will post changes to this policy on this page and update the effective date. For material changes affecting beta testers, we notify you by email before the change takes effect.