Privacy Policy

When you request early access, we collect what you enter in the form: your name, work email, company, role, company size, industry, region, timeline, how your organization uses AI today, what you would use Governed AI for, the systems you want to connect, whether you are open to a pilot, and any notes you add. We also record when you submitted the form and that you agreed to be contacted.

When you email us or book a call, we collect the details you share, such as your contact details, the content of your messages, and the time you choose for a call.

When you visit the Website, our hosting provider automatically records basic technical data so the site can work securely: your IP address, browser and device type, the pages you request, and the date and time of each request.

We do not ask for sensitive personal data or payment details. Please don’t include them in your notes or messages.

To handle your early access request and contact you about early access, including product updates related to it. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

To discuss and scope a pilot with you. Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b)).

To reply to emails and other enquiries. Legal basis: our legitimate interest in responding to people who contact us (Art. 6(1)(f)).

To understand demand for our products. We combine requests into aggregate statistics, for example the share of requests by industry or region, to plan our roadmap and to report to investors and partners. These statistics never identify you or your company. Legal basis: our legitimate interest in developing our business (Art. 6(1)(f)).

To keep the Website secure and prevent spam, fraud and abuse. Legal basis: our legitimate interest in protecting the Website and our users (Art. 6(1)(f)).

To meet legal obligations, and to establish, exercise or defend legal claims. Legal basis: legal obligation (Art. 6(1)(c)) or legitimate interest (Art. 6(1)(f)).

We use your data only for these purposes, or for purposes compatible with them.

When you submit the form, an automated rule checks three of your answers (company size, timeline and openness to a pilot) to flag requests that are likely to suit a pilot now. Flagged requests are prioritized for follow-up. The flag doesn’t change what you see after submitting, and everyone who submits receives the same confirmation.

This rule does not decide whether we reply to you or whether you get access, and it has no legal or similarly significant effect on you. A person reviews every request. You can ask us to explain how your request was handled or to review it again.

We share personal data with service providers that process it on our behalf and only on our instructions: our website hosting provider, the tools we use to receive and organize form submissions, our email provider, and our scheduling provider (Cal.com) if you book a call. Each is bound by contract to keep your data confidential and secure.

We may also disclose personal data: (a) to professional advisers, such as lawyers and accountants, under a duty of confidentiality; (b) where required by law, or to protect our rights, our users or the public; and (c) to a buyer or successor in a merger, acquisition or sale of assets. In that case, we will tell you before your data becomes subject to a different privacy policy.

We do not sell your personal data. We do not share it for cross-context behavioral advertising, and we do not let third parties use it for their own marketing.

We are based in the United States, and we and our service providers may process personal data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we use the safeguards the law recognizes. These are the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), or a provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of the relevant safeguards.

We keep early access requests and related correspondence only as long as we need them to handle your request and any discussions that follow. We delete or anonymize them within 24 months of our last interaction with you, unless you become a customer (in which case our agreement sets the retention period) or the law requires us to keep them longer.

If you withdraw your consent or ask us not to contact you, we stop contacting you. We keep only a minimal record of your email address so that we respect your request in future.

Technical logs are kept for a short period for security purposes and are then deleted automatically.

The Website uses only cookies and similar technologies that are strictly necessary for it to work securely. These do not require consent. We do not use analytics, advertising or social media cookies, tracking pixels or fingerprinting.

If we ever want to use optional cookies, we will ask for your consent first, through a banner that makes rejecting as easy as accepting. We also honor Global Privacy Control signals.

Depending on where you live, you may have the right to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; receive it in a portable format; withdraw your consent at any time, without affecting processing that happened before; and ask for a human review of decisions made by automated means. We extend these rights to everyone, wherever they live.

To make a request, email hello@sphaeranova.com with the subject “Privacy request”. We may need to verify your identity before we act, and an authorized agent may make a request on your behalf. We respond within one month, or sooner where local law requires. We will not charge a fee or treat you differently for exercising your rights.

You also have the right to complain to a data protection authority. In the EEA, this is the authority in the country where you live or work. In the UK, it is the Information Commissioner’s Office (ICO). In the Philippines, it is the National Privacy Commission. We would appreciate the chance to resolve your concern first.

Some U.S. state privacy laws, including California’s, require specific disclosures, where they apply to us. In the past 12 months we have collected: identifiers (such as name, email and IP address); professional information (such as company, role and industry); and internet activity (such as the technical logs described above). We collected them from you and your device, for the purposes described in section 3, and disclosed them only to the service providers described in section 5.

We have not sold or shared personal information, and we do not use or disclose sensitive personal information. You have the right to know, delete and correct your personal information, and the right not to be discriminated against for exercising these rights. See section 9 to make a request.

We protect personal data with appropriate technical and organizational measures. These include encrypted connections (HTTPS), access limited to people who need it, and service providers held to contractual security standards. No system is completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

The Website is intended for business audiences and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The current version is always published on this page with its “last updated” date. If we make material changes, we will take reasonable steps to tell the people we are in contact with.

For any question about this policy or your personal data, email hello@sphaeranova.com with the subject “Privacy request”, write to Sphaera Nova Technologies, Inc., 2810 N Church St, Wilmington, DE 19802-4447, United States, or call +1 302 208 8598.