Privacy Policy

1. Information We Collect

Information You Provide

• Waitlist and account registration: Name and work email address when you sign up for early access or create an account.
• Communications: Any information you provide when you contact us via email or other channels.

Information Collected Automatically

• Usage analytics: Pages visited, time on page, click patterns, referral source, and other interaction data collected through analytics tools such as Google Analytics and Cloudflare Web Analytics.
• Cookies and similar technologies: We use cookies and similar tracking technologies to maintain session state, remember preferences, and collect analytics data. See Section 5 for details.
• Session data: When using the Platform, we collect session identifiers, session duration, activity timestamps, and environment configuration data to manage and deliver lab environments.
• Device and browser information: IP address, browser type and version, operating system, screen resolution, and device type.
• Bot detection: We use Cloudflare Turnstile on our forms to distinguish human visitors from automated bots. Turnstile may collect and process device and interaction data (such as browser characteristics, mouse movements, and keystrokes) to generate a risk score. This data is processed by Cloudflare in accordance with Cloudflare's privacy policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Deliver and operate our services: Provision lab environments, manage sessions, and maintain Platform functionality.
• Communicate with you: Send early access invitations, product updates, feature announcements, and operational notices related to Immersivle.
• Marketing communications: Send newsletters, training content, and promotional materials about Immersivle products and services. You can opt out of marketing emails at any time using the unsubscribe link in any email.
• Improve our services: Analyze usage patterns to improve the Site, Platform, and user experience.
• Security and fraud prevention: Detect, prevent, and respond to security incidents, fraud, and abuse.
• Legal compliance: Comply with applicable laws, regulations, and legal processes.

We do not sell your personal information to third parties.

3. How We Store and Protect Your Information

Your data is stored in Amazon Web Services (AWS) infrastructure located in the United States (us-east-1 region). Specifically:

• Waitlist and user data is stored in Amazon DynamoDB.
• Session data is stored in Amazon DynamoDB and Amazon ElastiCache (Redis).
• Form submissions are processed through AWS Lambda.

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS/HTTPS), access controls, and secure infrastructure configuration. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We may share your information in the following limited circumstances:

• Service providers: We use third-party services that process data on our behalf, including Amazon Web Services (infrastructure and data storage), Cloudflare (CDN, security, and bot detection), and analytics providers. These providers are contractually obligated to use your data only to provide services to us.
• Legal obligations: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

• Essential cookies: Required for basic Site functionality, such as session management and security. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the Site. We use Google Analytics and Cloudflare Web Analytics to collect aggregated usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.
• Functional cookies: Used to remember your preferences, such as theme settings.

Most browsers allow you to control cookies through their settings. Disabling cookies may limit certain functionality of the Site.

6. Data Retention

• Waitlist data: Retained until you opt out or request deletion, or until the waitlist program concludes.
• Account and session data: Retained for the duration of your account and for a reasonable period afterward for operational and legal purposes.
• Analytics data: Retained in aggregated or anonymized form in accordance with the retention policies of our analytics providers.

You may request deletion of your data at any time by contacting us at privacy@immersivle.com.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data.
• Opt out of marketing: Unsubscribe from marketing communications at any time using the link in any email or by contacting us.
• Data portability: Request your data in a structured, machine-readable format.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at privacy@immersivle.com. We will respond within 30 days.

8. European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK, the following additional provisions apply:

• Legal basis for processing: We process your personal data based on: (a) your consent (e.g., waitlist signup, marketing emails), (b) performance of a contract or steps taken at your request prior to entering a contract, (c) our legitimate interests (e.g., improving our services, ensuring security), and (d) compliance with legal obligations.
• Data transfers: Your data is transferred to and stored in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for these transfers.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights under GDPR.
• Data controller: Immersivle, Inc. is the data controller. Contact: privacy@immersivle.com.

9. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete personal information we have collected from you.
• Right to opt out of sale: We do not sell personal information.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@immersivle.com.

10. Children's Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal information, contact us at privacy@immersivle.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice on the Site prior to the change becoming effective.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: