1. About this notice
This notice explains how DataVers Inc. collects, uses, shares and protects personal information. It covers this website, the DataVers platform, and our dealings with customers, business contacts, applicants and personnel. It is published at datavers.ai/privacy and is issued to customers alongside our Data Processing Agreement.
Effective date: November 6, 2026. We review this notice at least once a year, and whenever our processing changes.
1.1 The short version
- We are an engineering software company. The engineering data our customers put into our platform is their intellectual property, not personal information, and we protect it at our highest tier.
- We never use customer content or personal information to train, fine-tune or evaluate any AI model. Neither may any of our suppliers. This is written into our contracts and enforced in the product.
- We do not sell or share personal information, and we do not use advertising or data-broker services.
- If you use the DataVers platform through your employer, your employer controls your information and decides on your requests. We will pass your request to them and help them answer it.
- You can reach us about anything in this notice at privacy@datavers.ai.
2. Who we are
DataVers Inc. is a Delaware corporation with its principal place of business at 2195 Warm Springs Ct, Fremont, CA 94539, United States of America. You can call us on +1 408-909-9237, write to us about privacy at privacy@datavers.ai, or report a security concern to infosec@datavers.ai.
2.1 Our two roles
DataVers provides an AI-unified engineering workspace to manufacturing companies. That gives us two different relationships with personal information, and which one applies changes both your rights and who you should ask.
As a service provider
When our customer deploys the DataVers platform and their people sign in to it, we process identity and activity information only on that customer’s documented instructions. The customer decides what happens to it. Send your request to them — and if you send it to us instead, we will pass it on within two working days, tell you we have done so, and help them respond.
As a business
When we deal with you directly — as a business contact, a website visitor, a job applicant, an employee or contractor, or anyone who writes to us — we decide the purposes and means ourselves, and you can exercise your rights directly with us.
3. What we collect, and why
If you use a customer’s DataVers workspace
- What we hold
- Your name, work email, a unique identifier and your group membership, all asserted by your employer’s identity provider, together with records of the actions you take in the platform.
- Why
- To authenticate you, apply your permissions, and maintain the audit trail our customers rely on.
- How long
- For the life of our agreement with your employer, then deleted on their instruction.
If you visit this website
- What we hold
- Your IP address and the approximate location derived from it, your browser and device type, the pages you view, the page that referred you, and the date and time of your visit.
- Why
- To serve the site, keep it secure and available, and understand which pages are useful.
- How long
- Server and security logs are kept for 13 months.
If you submit a form or book a demo
- What we hold
- Your name, business email, telephone, company, role and anything you write in the message.
- Why
- To answer you and to carry on a commercial conversation you have started.
- How long
- Three years after our last contact with you.
If you are a business contact
- What we hold
- Your name, business email, phone, company and role, and our record of our dealings with you.
- Why
- To maintain a commercial relationship and, where permitted, to send you relevant information about our products.
- How long
- Three years after our last contact.
If you apply for a job
- What we hold
- Your CV, the information you give us during the process, and our interview notes.
- Why
- To assess your application.
- How long
- Twelve months after the decision, unless you ask us to keep it longer.
If you work for us
- What we hold
- Employment and engagement records, including the outcome of pre-employment checks where we are permitted to run them.
- Why
- To employ or engage you and to meet our legal obligations.
- How long
- As required by law after your engagement ends.
Whoever you are, if you use the platform
- What we hold
- Operational measurements only — session counts, response times, which features are used. No content.
- Why
- To keep the service healthy and to meter usage for billing.
- How long
- Thirteen months.
We do not collect special category or sensitive personal information through this website, and we ask you not to send it to us in a form or an email. We do not knowingly collect government identifiers, payment card numbers or financial account numbers through this site.
3.1 Engineering content is not personal information — and we protect it harder
The CAD models, drawings, PMI and GD&T data, bills of materials and engineering change content our customers put into the platform are their intellectual property. We classify them at our highest tier. In on-premise and customer-managed cloud deployments they never leave the customer’s own environment. Where a drawing happens to carry a person’s name — a draughtsman, a checker, an approver in a title block — we mask it in extracted output by default rather than making use of it.
4. Our legal bases
Where European, United Kingdom or Swiss law applies to our processing as a controller, we rely on the following legal bases.
- Responding to an enquiry or demo request
- Steps taken at your request before entering a contract, and our legitimate interest in replying to you.
- Maintaining a commercial relationship
- Our legitimate interest in running and developing our business.
- Sending marketing to a business contact
- Your consent where it is required, and otherwise our legitimate interest. You may opt out at any time and we will stop.
- Keeping the website secure and available
- Our legitimate interest in protecting our systems, and our legal obligation to secure personal data.
- Assessing a job application
- Steps taken at your request before entering a contract.
- Employing or engaging you
- Performance of your contract, and our legal obligations as an employer.
- Operating the platform for a customer
- We act as a processor on our customer’s documented instructions. The legal basis is the customer’s, not ours.
- Meeting a legal or regulatory obligation
- Compliance with a legal obligation.
6. Artificial intelligence
- We never use customer content or personal information to train, fine-tune or evaluate a model. There is no path in our systems from customer content to any training pipeline.
- Identity information is not sent to any model endpoint. Personal information is removed from prompt context before submission.
- Where a model service is used, it is an enterprise service, contractually prohibited from training on our input and locked to the region our customer selected.
- AI output is advisory and must cite the source it was drawn from. No engineering change is written back to a customer’s systems without a person approving it.
- We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on any individual.
8. Where it is processed
Our customers choose their hosting region — United States, European Union or Asia-Pacific — and their data stays there, including backups and AI inference. Our own corporate information is processed in the United States, with delivery support in India where a customer engages it. Where personal information protected by European, UK or Swiss law is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism. You can ask us for a copy of the safeguards we use.
9. How we protect it
- Encryption in transit (TLS 1.3) and at rest (AES-256), with customer-managed keys available.
- Single sign-on through your own identity provider, multi-factor authentication, and role-based access on a need-to-know basis. We issue no passwords of our own to platform users.
- Logical separation of every customer workspace, enforced in the query itself rather than applied afterwards.
- An append-only audit log of every action, which customers can export to their own monitoring systems.
- Access reviewed quarterly; background checks on personnel where permitted; security and privacy training at induction and annually.
- Independent penetration testing, continuous vulnerability scanning, and a secure development process with peer review and automated security checks before release.
- A documented incident response process, with notification to affected customers within 72 hours of confirming an incident involving their data.
No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability in our systems, please write to infosec@datavers.ai.
10. Your rights
Your rights depend on where you live. We honour the rights below for everyone who asks, wherever they are, except where the law requires us to do otherwise. You will never be treated differently, or receive a worse service or price, for exercising a right.
- Know and access
- Ask for a copy of the personal information we hold about you, and the categories of source, purpose and recipient.
- Correction
- Ask us to correct information that is wrong or incomplete.
- Deletion
- Ask us to delete your personal information.
- Portability
- Ask for a copy in a structured, commonly used, machine-readable format.
- Restriction
- Ask us to pause a particular use while something is disputed.
- Objection
- Ask us to stop a particular use, including direct marketing, which we will always stop on request.
- Withdrawing consent
- Ask us to stop processing that relied on your consent, from the date you withdraw it.
- Disclosure history
- Ask who we have disclosed your information to.
- Opting out of sale or sharing
- Available to you, though it has nothing to act on — we do not sell or share personal information.
- Limiting use of sensitive information
- Available to you, though it has nothing to act on — we do not collect sensitive personal information to draw inferences.
- Non-retaliation
- Receive the same service and price whether or not you exercise a right.
- Appeal
- Ask us to review a decision you are unhappy with. See section 11.
10.1 If you use the platform through your employer
Your employer is the controller of that information and decides on your request, so ask them first. If you write to us instead, we will pass your request to them within two working days, tell you that we have done so, and help them answer it. We will not disclose their data to you directly.
11. How to exercise your rights
Write to privacy@datavers.ai, or to DataVers Inc., 2195 Warm Springs Ct, Fremont, CA 94539, USA. A request in any written form is valid — you do not have to use particular wording or a form, though telling us what you want and roughly what period it covers helps us answer faster.
We acknowledge your request within five working days and verify your identity before we act, in proportion to what you have asked for. If your employer is the controller, we pass the request to them within two working days of verifying you. We respond within thirty calendar days — and if a request is complex enough to need longer, we tell you inside those thirty days, explain why, and take up to sixty days more.
We ask only for the information we need to be sure it is you, and we destroy any identity document you send us once the request is closed. An authorised agent may act for you with your written authority, and a parent or guardian may act with the document that establishes the relationship.
11.1 If you are unhappy with our answer
Write to privacy@datavers.ai and ask for an appeal. Someone who did not make the original decision will review it, and we will tell you the outcome and our reasons within forty-five days. You may also complain to your state attorney general or, in Europe, the UK or Switzerland, to your data protection authority. We would rather you came to us first so we can put it right.
12. Information for California residents
This section is provided under the California Consumer Privacy Act as amended by the CPRA. In the preceding twelve months we have collected the following statutory categories of personal information, for the purposes described in section 3, from the sources described there, and disclosed them only to the suppliers named in section 7.
- Identifiers — your name, email, IP address and account identifier.
- Customer records — contact details and employment information.
- Commercial information — the services you have considered or purchased.
- Internet or network activity — pages viewed and actions taken in the platform.
- Geolocation data — approximate only, derived from your IP address.
- Professional or employment information.
- Education information — for job applicants only.
We do not collect protected classification characteristics, biometric information, audio, electronic or visual information, inferences drawn to create a profile, or sensitive personal information as the CPRA defines it.
We have not sold or shared any category of personal information in the preceding twelve months. We do not share personal information for cross-context behavioural advertising, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not offer financial incentives in exchange for personal information. California residents may also request the information described in California Civil Code §1798.83, the “Shine the Light” law, once a year and free of charge, by writing to privacy@datavers.ai.
13. Information for other regions
- If you live in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another US state with a comprehensive privacy law, the rights in section 10 and the appeal route in section 11.1 are available to you.
- If you are in the European Economic Area, the United Kingdom or Switzerland, the rights in section 10 apply together with the right to complain to your supervisory authority. Our legal bases are in section 4 and our transfer safeguards in section 8.
- If the Indian Digital Personal Data Protection Act applies to our processing, you may contact us at privacy@datavers.ai to exercise your rights or raise a grievance.
- If you are somewhere else, write to us anyway. We would rather answer than argue about whether we have to.
14. Children
This is a business platform and this is a business website. We do not knowingly collect personal information from anyone under 16. If we learn that we have, we delete it. If you believe a child has given us information, please write to privacy@datavers.ai.
15. Changes to this notice
We post every change on this page and update the effective date at the top. Where a change materially affects how we handle your information, we tell customers directly and, where the law requires it, we ask for consent before the change applies to information we already hold.
Version 1.1, effective November 6, 2026. This is the first published version of this notice.
16. Contact us
For privacy enquiries and rights requests, write to privacy@datavers.ai. For security and vulnerability reports, write to infosec@datavers.ai. By post, we are at DataVers Inc., 2195 Warm Springs Ct, Fremont, CA 94539, USA, and by telephone on +1 408-909-9237.