Privacy Notice

We’re sens8ai, PBC (formerly PhormAI, PBC), and this notice explains what personal information we collect through sens8ai.com (the “Site”), what we do with it, and the choices you have. The short version: we collect very little, we don’t use cookies or cross-site trackers, we never sell your information, and we don’t use it to train our models. This notice covers only the Site. If your organization uses our platform, data processed there is covered by our agreement with your organization instead.

• Early-access sign-up. All we ask for is your email address. We also keep a record that you agreed to hear from us: the wording you agreed to, which version of this notice was in effect, and when. If you later unsubscribe or ask us to delete your data, we note that too.
• Developer form. If you fill out the developer form, we’ll ask for your name and work email, and you can add your company if you like. We’ll also ask about your work: the areas you work in, the kinds of sensor data you use and roughly how much, where things break down today, and anything else you want to tell us. One request: please don’t include health or medical information about anyone, or other sensitive personal details, in your answers. If something like that slips in, we’ll delete it when we spot it.
• Technical data. Like most websites, ours runs on a hosting provider (Vercel), which may automatically log basic technical details when you visit, such as your IP address, browser and device type, the pages you request, and when. This helps keep the Site running and secure. Vercel also carries the information you submit through our forms on its way to our database. To keep spam out of our forms, we check your IP address against a rate limit. That check happens in short-lived server memory, and we never save your IP address.
• Cookie-free analytics. To see how the Site is used, we use Vercel Web Analytics, which counts visits without cookies and without identifying you. For each page view it records the page, the site that sent you here (if any), your country and region, and your device type, operating system and browser. Visits are told apart only by a temporary code made from your request, which is discarded after 24 hours, so it can’t follow you across sites or over time, and we only ever see totals. We remove the private part of the links in our emails (such as unsubscribe and manage links) before anything is counted.
• No cookies or trackers. We don’t use cookies, ads or cross-site tracking. The only thing the Site stores is a tiny setting in your browser’s session storage, so the opening animation plays just once per visit. It never leaves your browser and disappears when you close it.

If you signed up for early access, we’ll email you updates about early access and our launch. If you filled out the developer form, we’ll use what you told us to get back to you, follow up on your request, and learn what developers need from our products. Filling out the form doesn’t put you on our mailing list; if you’d like early-access emails too, just sign up for them separately. We keep consent records so we can show you said yes and respect your choices, and we use technical data and our analytics to run, secure, fix and improve the Site. We may also use information to comply with the law, enforce our terms and protect our rights. And nothing collected through the Site is used to train our models or for advertising.

We only share information with the service providers that help us run the Site and handle your requests, and only as much as they need: Vercel (hosting and analytics), which handles visit data, our cookie-free analytics and the forms you submit as they pass through; Neon (database), which stores early-access sign-ups, developer form answers and consent records; Resend (email delivery), which receives your email address and the emails we send you; and Google Workspace (our business email), which receives our internal notifications about new sign-ups and form submissions, along with any replies you send us. These providers are based in, or process data in, the United States. We may also disclose information if the law requires it, or if sens8ai is involved in a merger, acquisition, financing or sale. We don’t sell your personal information, and we don’t share it for advertising.

We keep your early-access email address until you unsubscribe or ask us to delete it, and never more than 24 months after our last contact with you. Developer form details follow a similar rule: we keep them for up to 24 months after our last contact, or until you ask us to delete them, unless the law requires us to keep them longer.

When you ask us to delete your data, we delete your email address and any developer form details you gave us, including the copies in our internal notification emails. We do keep one small thing: a record showing that we asked for your consent and respected your choice. It holds a one-way hashed version of your email address (not the address itself), the dates you gave and withdrew consent, and the notice versions in effect, and we use it only for that purpose. Vercel and Resend keep technical and delivery logs for a limited time under their own retention practices.

• Unsubscribe. Every email we send includes an unsubscribe link, or you can unsubscribe anytime at sens8ai.com/manage.
• Delete your data. Use that same link or page to delete your email address and any developer form details from our records.
• Access and correction. Want to know what we hold about you, or need it corrected or deleted? Email notices@sens8ai.com. We’ll get back to you within 30 days.

If you live somewhere with additional privacy rights, such as California, you may have other rights under local law, and you can use the same email address to exercise them. The Site doesn’t respond to browser “Do Not Track” signals, but since we don’t track you across sites, there’s nothing for those signals to turn off.

We’re based in the United States, and that’s where we process and store information. If you’re in the European Economic Area, the United Kingdom or Switzerland, sens8ai, PBC is the controller of your personal information, meaning the organization responsible for it.

Data protection laws in those places ask us to explain our legal reasons for using your information. We send early-access emails because you consented, and you can withdraw that consent anytime. We reply to developer form submissions, learn what developers need, understand how the Site is used, and run and secure it because we have a legitimate interest in doing so. And sometimes the law requires us to process information.

You can ask to access, correct or delete your information, object to or limit how we use it, get a copy of it, or withdraw your consent. Just email notices@sens8ai.com. You also have the right to complain to your local data protection authority.

When your information comes to the United States, it’s protected by safeguards such as the European Commission’s Standard Contractual Clauses, which are part of our agreements with our service providers.

We take reasonable steps to protect your information, including encrypting it in transit and at rest and limiting access to the people who need it. That said, no method of sending or storing data is completely secure, so we can’t promise perfection.

The Site isn’t meant for children under 16, and we don’t knowingly collect their information.

We’ll update this notice as the Site changes, especially as we come out of stealth. When we do, we’ll post the new version here and update the date and version number at the top. Any consent you gave stays tied to the version that was in effect when you gave it.

Questions or requests? Write to us at notices@sens8ai.com.

sens8ai, PBC, 2261 Market Street, Suite 73834, San Francisco, CA 94114-1612