Privacy Policy

01

What this policy covers

Datum Systems, Inc. ("Datum," "we," "us," or "our") builds geometric AI for industrial product development. This Privacy Policy applies to personal information we collect when you visit our website, contact us, request a demonstration, apply for a role, or otherwise interact with us in connection with our marketing and business operations (together, the "Website").

"Personal information" means information that identifies, relates to, or could reasonably be linked with a particular individual.

02

Information we collect

We collect the following categories of personal information through the Website.

Information you provide to us

• Contact and profile details. Your name, business email address, phone number, employer, job title, and country, for example when you request a demonstration, contact sales, or subscribe to updates.
• Communications. The contents of messages, form submissions, survey responses, and other information you choose to send us.
• Recruiting information. If you apply for a position, the information in your application, such as your resume, work history, and any details you provide.

Information we collect automatically

• Usage and log data. IP address, browser type, referring and exit pages, pages viewed, the dates and times of visits, and how you interact with the Website.
• Device data. Device type, operating system, and similar technical identifiers.
• Cookies and similar technologies. As described in Section 6.

Information from other sources

• Business and marketing partners. Contact details and professional information from analytics providers, marketing vendors, event organizers, and enrichment services that help us reach and understand potential customers.
• Publicly available sources. Information about companies and professionals that helps us offer and provide our services.

We do not seek to collect sensitive personal information (such as government identifiers, financial account credentials, precise geolocation, or information revealing health, race, religion, or sexual orientation) through the Website.

03

Sources of information

We collect personal information directly from you, automatically as you use the Website, and from the third parties and public sources described in Section 2.

04

How we use information

We use the personal information we collect through the Website to:

• Operate, maintain, and improve the Website and our marketing;
• Respond to your inquiries, provide information you request, and communicate with you about Datum, including demonstrations, evaluations, and potential agreements;
• Send administrative messages, updates, and, where permitted, marketing communications you can opt out of at any time;
• Understand how the Website is used and analyze trends so we can measure and improve it;
• Evaluate recruiting applications and manage our hiring process;
• Detect, prevent, and address fraud, abuse, security incidents, and other harmful or unlawful activity;
• Comply with legal obligations, enforce our agreements, and establish, exercise, or defend legal claims.

We may create aggregated or de-identified information from personal information and use it for any lawful business purpose. We do not attempt to re-identify it except as permitted by law.

05

How we disclose information

We share personal information with the following categories of recipients:

• Service providers. Companies that perform functions on our behalf, such as website and cloud hosting, analytics, email delivery, customer relationship management, and recruiting. They may use the information only to provide services to us.
• Affiliates. Our current and future corporate affiliates, for the purposes described in this policy.
• Legal and safety. Regulators, law enforcement, courts, and other parties where we believe disclosure is reasonably necessary to comply with law or legal process, enforce our agreements, or protect the rights, property, or safety of Datum, our users, or others.
• Business transfers. A counterparty and its advisors in connection with a merger, acquisition, financing, reorganization, or sale of assets, and any successor to our business. We will notify you as required by law.

We do not sell your personal information for money. Depending on your state of residence, our use of certain analytics or advertising cookies may be considered a "sale" or "sharing" under applicable law. See Section 6 and Section 11 for your choices.

06

Cookies and tracking

We use cookies and similar technologies, such as pixels and local storage, to operate the Website, remember your preferences, understand how the Website is used, and support our marketing. Cookies are small data files stored on your device when you visit a website.

• Essential cookies are required for the Website to function and cannot be turned off.
• Analytics cookies help us understand how visitors use the Website so we can improve it.
• Marketing cookies, where used, help us measure and deliver relevant advertising.

You can control cookies through your browser settings, and, where required, through a consent banner presented when you first visit the Website. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by applicable law. Because there is no common standard, the Website does not currently respond to browser "Do Not Track" signals.

07

AI and your data

Datum is committed to the responsible, transparent, and secure use of artificial intelligence.

We do not use personal information collected through this Website to develop or train our machine learning or geometric AI models.

Data processed inside the Datum platform is handled separately. We do not use Customer Data to train models that serve other customers except as expressly permitted by the applicable Customer Agreement. Questions about how we handle data within the platform are addressed in that agreement and its data processing terms.

08

Data security

We maintain an information security program with technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss, appropriate to the nature of the information and the risk of processing. Datum maintains ISO/IEC 27001:2022 certification for its information security management system. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09

Data retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. To determine the appropriate period, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, and applicable legal, tax, accounting, and reporting requirements. When we no longer need personal information, we delete or de-identify it, or securely isolate it until deletion is possible.

10

International transfers

Datum is based in the United States, and we operate globally. If you access the Website from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries whose data protection laws differ from those in your location. Where required by law, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for such transfers. To request more information about these safeguards, contact us using the details in Section 14.

11

Your privacy rights

Depending on where you live, you may have some or all of the following rights with respect to your personal information, subject to legal limits and exceptions:

• Access the personal information we hold about you and request a copy;
• Correct inaccurate or incomplete information;
• Delete your personal information;
• Object to or restrict certain processing;
• Portability, to receive your information in a usable format or have it transmitted to another party;
• Opt out of the "sale" or "sharing" of personal information and of targeted advertising;
• Withdraw consent where we rely on it, without affecting prior processing;
• Appeal a decision we make about your request, where applicable; and
• Non-discrimination for exercising your rights.

To exercise any of these rights, contact us at info@datum.co. We will respond within the time required by applicable law, generally 45 days under United States state laws and one month under the GDPR and UK GDPR, in each case subject to permitted extensions. You may use an authorized agent to submit a request, and we may need to verify your identity and the agent's authority before responding.

European Economic Area, United Kingdom, and Switzerland. Where the GDPR or UK GDPR applies, we process personal information on the legal bases of contractual necessity, our legitimate interests in operating and marketing our business, your consent where requested, and compliance with legal obligations. You have the right to lodge a complaint with your local supervisory authority.

United States. If you are a resident of California or another state with a comprehensive privacy law, you may exercise the rights above by contacting us as described. Under California's "Shine the Light" law, California residents may request information about disclosures of personal information to third parties for their direct marketing purposes.

12

Children

The Website is intended for businesses and professionals and is not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at info@datum.co and we will take steps to delete it.

13

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Website after an update takes effect means you accept the revised policy.

14

How to contact us