Privacy Policy

01Who we are

Dunster Physical AI (“Dunster,” “we,” “us” or “our”) operates dunster.ai (the “Site”). This Privacy Policy applies to personal information we collect through the Site, including when you request a demo, rate a robot or book a meeting with us, and through related business communications.

It doesn’t cover information handled under a separate written agreement with us, such as a pilot or deployment. That agreement governs how such information is handled.

02Information we collect

Information you give us

• Demo requests. When you submit our Request a demo form, we collect your name, work email address, organization and industry, and, if you choose to provide them, your job title, the topics you’re interested in and your message.
• Meeting bookings. When you book a call through our scheduling page, which is provided by Calendly, you share your name, email address, the time you choose and anything else you enter there. Calendly’s Privacy Notice applies to that page.
• Correspondence. When you email us, we receive your email address, your message and any attachments.
• Safety ratings. When you rate a robot with our Physical AI Safety Rating, we keep a record of your answers about the robot and where it works, the rating we showed you, when you asked for it, and a random code that links the ratings you ask for after one human check. The record doesn’t include your name, contact details or IP address.
• Safety Principles comments. When you comment on our Safety Principles draft, we keep the name and, if you give one, the organization you enter, your comment, the part of the draft it is about and when you sent it. We don’t ask for your email address and don’t keep your IP address with the comment.

Information collected automatically

• Form details. Along with a demo request, our form sends your time zone as reported by your browser, so we can suggest suitable meeting times, and the address of the page you submitted it from.
• Server logs. Like most websites, our hosting provider automatically records technical information when you visit, such as your IP address, browser type, the pages you request and the date and time of each request. This information is used to deliver, secure and troubleshoot the Site.
• Human verification. To keep our demo request form, our Safety rating and the comment form on our Safety Principles draft free of spam and bots, they use hCaptcha, a security service operated by Intuition Machines, Inc. The check loads when you reach the demo form, ask for a rating or start a comment, and collects information such as your IP address, browser and device details, and how you interact with the check. hCaptcha’s Privacy Policy and Terms of Service apply to that information.

Cookies and tracking

The Site does not set advertising or analytics cookies, and we don’t use third-party tracking pixels or advertising networks. Our fonts and images are served from our own site. The only third-party services that run on our pages are the hCaptcha check on the demo request form, the Safety rating and the Safety Principles comment form, which may use cookies or similar technologies to tell people from bots, and Google’s sign-in button on our team sign-in page (see section 5). The Safety rating saves your answers in your browser’s local storage so they’re still there if you come back; they stay on your device until you press Start over or clear your browser’s data. Other than these, we don’t allow third parties to collect personal information about your activity on the Site over time or across other websites. Because we don’t track you across websites, the Site doesn’t respond differently to “Do Not Track” browser signals. If you open our scheduling page, Calendly may use cookies on its own pages under its own policies. Our Lady Bandit Guard game keeps its settings and your best score in your browser’s local storage; nothing from it is sent to us.

Health information

The Site isn’t designed to collect health information. Please don’t submit patient information, protected health information or other sensitive personal data through our form, our scheduling page or email. If sharing such information is ever necessary for a pilot or deployment, we’ll first agree with you on an appropriate written agreement and a secure process.

03How we use information

We use personal information to:

• respond to your demo request and other inquiries;
• schedule, prepare for and hold meetings and demonstrations;
• send you information you’ve asked for about our technology, products, pilots and partnerships;
• evaluate and manage potential business relationships, including pilots, partnerships and investment discussions;
• work out Safety ratings, and study the rating records to improve our safety standard and rating method;
• operate, secure and improve the Site, including verifying that form submissions and rating requests come from people and preventing spam and abuse; and
• comply with legal obligations and enforce our Terms of Service.

We don’t sell personal information or use it for targeted advertising, and we don’t make decisions about you based solely on automated processing that produce legal or similarly significant effects.

04Request a demo, the Safety rating and comments

Three features of the Site ask you for information. In short, this is what each one collects and why; section 2 gives the full detail.

• Request a demo. The form collects your name, work email address, organization and industry, and, if you choose, your job title, the topics you’re interested in and your message. It also sends your browser’s time zone and the page you sent it from. We use this to reply to you, arrange a meeting or demonstration and explore working together.
• Rate a robot. When you ask for a Safety rating, we keep a record of your answers about the robot and where it works, the rating we showed you, when you asked for it, and a random code that links the ratings you ask for after one human check. The record doesn’t include your name, contact details or IP address. We use it to work out your rating and to improve our safety standard and rating method.
• Comment on the Safety Principles. A comment on our Safety Principles draft keeps the name and organization you enter, your comment, the part of the draft it is about and the time. We review each comment first, and the ones we approve are shown publicly on the draft’s pages with the name and organization you entered, so please don’t include anything you don’t want published. We use comments to improve the Safety Principles. To have your comment removed, email info@dunster.ai.
• Human check. All three features use hCaptcha to check that requests come from people, as described in section 2.

A Safety rating is indicative only. It is generated automatically from the answers you give, which we don’t check or verify, and it isn’t a certification, an insurance quote or professional advice. To the fullest extent the law allows, Dunster accepts no responsibility or liability for any rating or for the answers you give or any evidence they refer to. Our Terms of Service explain this in full.

05Team sign-in

Dunster’s internal rating desk is only for people Dunster invites, such as our team and invited clients. They sign in to it with their Google account, using Google’s sign-in button on our team sign-in page.

• What we receive. When you sign in, Google sends us your Google account’s email address, your name and profile picture, an account id that Google assigns and, if an organization manages your account, its domain.
• What we keep. For security, we keep your email address, your Google account id, your organization’s domain if there is one, and the time and outcome of each sign-in attempt, including refused ones. We don’t keep your name, your picture or your IP address.
• Cookie. Signing in uses one cookie. While you sign in it holds a one-time code for up to 10 minutes; once you’re signed in it keeps you signed in for 8 hours. It is used only to keep you signed in, and signing out removes it.

Google’s Privacy Policy applies to the information Google handles when you use its sign-in.

06Legal bases (EEA, UK & Switzerland)

If you’re in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases to process your personal information:

• Legitimate interests in responding to business inquiries, arranging meetings, developing business relationships and keeping the Site secure. We balance these interests against your rights and freedoms.
• Steps before entering a contract that you’ve asked us to take, such as preparing a pilot or proposal.
• Consent, where we ask for it. You can withdraw your consent at any time.
• Legal obligations that require us to process information.

07How we share information

We share personal information only as described below:

• Service providers that help us run the Site and our business. These include our website hosting and database provider, which also stores Safety rating records and team sign-in records, the form-processing service that delivers demo requests to our inbox (which may keep a copy for a limited time), hCaptcha, which checks that form submissions and rating requests come from people, and our email, calendar and scheduling providers, including Calendly for our scheduling page. Some of these providers, including Calendly, have their own privacy policies that apply when you use their services directly.
• Professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality obligations.
• Legal and safety reasons: when required by law or legal process, or when needed to protect the rights, property or safety of Dunster, our users or others.
• Business transfers: in connection with a financing, merger, acquisition, reorganization or sale of assets, subject to appropriate confidentiality protections.
• With your consent or at your direction.

08International transfers

Dunster is based in the United States. Our service providers may process personal information in the United States and in other countries whose data protection laws may differ from those where you live. Where the law requires it, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses.

09How long we keep information

We keep personal information only as long as we need it for the purposes described in this policy: for example, while we’re discussing a demo, pilot, partnership or investment with you, and for a reasonable period afterward to keep accurate business records. We then delete or anonymize it, unless the law requires or permits us to keep it longer.

10How we protect information

The Site is served over an encrypted HTTPS connection, and we use reasonable administrative, technical and organizational safeguards appropriate to the information we handle. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

11Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• delete your personal information;
• object to or restrict certain processing, or withdraw your consent;
• receive your information in a portable format; and
• opt out of marketing emails at any time, using the unsubscribe link or by replying to us.

To make a request, email info@dunster.ai. We’ll respond within the time required by applicable law and may need to verify your identity first. We won’t discriminate against you for exercising your rights. If you’re in the EEA, the UK or Switzerland, you can also lodge a complaint with your local data protection authority. If you live in a U.S. state that gives you the right to appeal our decision on a request, you can do so by replying to our response.

Notice for U.S. residents

We collect the categories of personal information described in section 2: identifiers (such as your name and email address), professional information (such as your organization and job title) and internet activity information (such as server log data). We collect it from you, from your browser and through our service providers; we use it for the purposes in section 3; and we disclose it only as described in section 7. We don’t sell personal information or share it for cross-context behavioral advertising, and we don’t use or disclose sensitive personal information.

12Children’s privacy

The Site is intended for business audiences and isn’t directed to children under 16. We don’t knowingly collect personal information from children under 16. If you believe a child has given us personal information, please contact us and we’ll delete it.

13Other websites

The Site links to other websites, including the sources we cite and our Calendly scheduling page. We aren’t responsible for their content or privacy practices, which are governed by their own policies.

14Changes to this policy

We may update this policy from time to time. When we do, we’ll post the new version on this page and change the “Last updated” date above. If we make significant changes, we’ll take reasonable steps to let you know.

15Contact us

If you have questions about this policy or how we handle your personal information, or you’d like to make a request, contact us:

Dunster Physical AI
Email: info@dunster.ai
Website: dunster.ai