1. Introduction

EmbodyX, Inc. ("the Company," "we," "us," or "our") operates the website getembodyx.com (the "Service"). EmbodyX builds and delivers vision-language-action (VLA) model software for industrial robot arms, enabling UR5, FANUC, KUKA, and compatible arms to handle real-world variation in manufacturing and warehouse settings without manual reprogramming. This Privacy Policy explains what personal information the Company collects through getembodyx.com, how it is used, and the choices available to you.

The Company is headquartered at 160 W Santa Clara Street, Suite 700, San Jose, CA 95110. Questions may be directed to [email protected].

2. Information We Collect

2.1 Information You Provide

EmbodyX is a B2B robotics software company. The primary way visitors provide information is through our pilot evaluation request form and direct contact inquiries. This includes:

  • Contact details (name, work email, phone) submitted when requesting a pilot evaluation or getting in touch with the team;
  • Professional context you choose to share (employer, facility type, robot arm models in use, project description);
  • Messages you send us through the contact form or by email.

EmbodyX does not collect robot operating data, camera feeds, or arm telemetry through this website. Operational data processed by the EmbodyX platform during a customer deployment is governed by the applicable customer agreement, not this Policy.

2.2 Information Collected Automatically

When you visit getembodyx.com, we automatically collect limited technical information to understand how the site is used and ensure it operates correctly:

  • IP address and approximate location (city/region level);
  • Browser type, operating system, device class;
  • Pages visited, referring URLs, time on page;
  • Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.3 We Do Not Knowingly Collect Children's Data

getembodyx.com is an industrial software site directed at engineering professionals. It is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact [email protected] and we will delete it promptly.

3. How We Use Information

The Company uses the information it collects to:

  • Respond to pilot evaluation requests and provide engineering consultations with the EmbodyX team;
  • Communicate about the EmbodyX platform, integration support, and pilot program status;
  • Operate, maintain, and improve getembodyx.com and the evaluation request workflow;
  • Send technical updates about the EmbodyX SDK and platform (with your consent where required by applicable law);
  • Detect, investigate, and prevent fraudulent or abusive activity;
  • Comply with legal obligations applicable to the Company.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see the California section below.

4. Sharing of Information

The Company shares personal information only with:

  • Service providers acting on our behalf (for example, infrastructure hosting, transactional email delivery, and site analytics) under contractual confidentiality obligations limiting their use of your data;
  • Legal or regulatory authorities, when required by law, court order, or to protect the rights, safety, or property of the Company or others;
  • A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. We do not share personal information with robot arm OEMs, systems integrators, or manufacturing partners without your consent.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage patterns. For a full description of what we use and how to manage your preferences, see our Cookie Policy.

6. Data Retention

The Company retains personal information only as long as needed for the purposes described in this Policy, to comply with legal and accounting obligations, and to resolve disputes. Pilot evaluation inquiry records are retained for the duration of the business relationship and up to 36 months thereafter. Inactive marketing contacts are purged after 24 months of no engagement. Server access logs are retained 90 days, then aggregated into statistical form.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, and loss. These include TLS encryption for all data in transit, restricted-access production infrastructure, and least-privilege access controls on internal systems. No internet-connected system is completely secure; we cannot guarantee absolute security and are not responsible for unauthorized circumvention of security measures.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, and deletion of personal information we hold about you, as well as the ability to limit or object to certain processing. To submit a request, email [email protected]. The Company will respond within the timeframe required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy. EmbodyX serves industrial facilities across California, including Bay Area manufacturing and logistics operations, and the Company takes its California privacy obligations seriously.

9.1 Categories We Collect

In the past 12 months, the Company has collected the following categories of personal information defined under Cal. Civ. Code §1798.140: identifiers (name, work email, phone, IP address); professional or employment-related information (employer, role, facility type, robot arm models, project context); commercial information (service inquiries and evaluation request details); internet or other electronic network activity (browsing activity on getembodyx.com); and inferences drawn from the above to understand visitor needs and improve the Service. We do not collect sensitive personal information (such as government ID, precise geolocation, or financial account data) through this website.

9.2 Sources, Purposes, Disclosure

We obtain this information directly from you (through forms and correspondence) and through automatic site instrumentation (analytics and server logs). We use it to operate and improve the Service, evaluate and respond to pilot requests, communicate with prospective and current customers, and meet legal obligations. We disclose it only to service providers under written contract, and to legal authorities where required by law.

9.3 Your CCPA / CPRA Rights

  • Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
  • Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
  • Right to Correct: request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
  • Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
  • Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right under this section.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. The Company responds within 45 days, with a possible 45-day extension for which we will notify you in writing.

9.5 Authorized Agents

You may designate an authorized agent to make a CCPA/CPRA request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly with the Company.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing purposes. The Company does not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

The Company may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service. We encourage you to review this Policy periodically.

11. Contact

Questions, requests, or complaints regarding this Policy can be sent to:

EmbodyX, Inc.
160 W Santa Clara Street, Suite 700
San Jose, CA 95110
Email: [email protected]
Phone: +1 (408) 730-0223