Privacy Policy

1. Introduction

EdgeRun AI, Inc. ("EdgeRun AI," "we," "us," or "our") operates the website at edgerunai.com and provides an AI-powered predictive maintenance platform for industrial manufacturing equipment using edge sensors (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Services, visit our website, or engage with us in connection with our business activities.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Services. EdgeRun AI is headquartered at 700 Canal Street, Stamford, CT 06902, United States.

This Privacy Policy applies to all users of our website and platform Services, including: prospective customers who request demonstrations or information, active customers who subscribe to the EdgeRun AI platform, employees and representatives of customer organizations who access the platform, visitors to our website at edgerunai.com, and individuals who communicate with us by email, phone, or other means.

2. Information We Collect

We collect information in several ways: directly from you when you provide it, automatically through your use of our Services, and from third parties in limited circumstances.

2.1 Information You Provide Directly

Account registration information: When you create an account or request a demonstration, we collect your name, email address, job title, company name, phone number, and business address. This information is necessary to provide you with access to our Services and to communicate with you about your account.

Contact and inquiry information: When you contact us via email, web form, or telephone, we collect the content of your communications and any personal information you include. We use this to respond to your inquiries and improve our Services.

Payment and billing information: When you subscribe to a paid plan, we collect billing contact information and payment method details. Payment card information is processed directly by our payment processor (Stripe) and is not stored on our servers.

Professional profile information: To tailor our onboarding and support services, we may collect information about your role in maintenance operations, the types of industrial equipment you manage, your facility's CMMS environment, and your relevant technical background. This information is provided voluntarily and used only to improve our service to you.

2.2 Information Collected Automatically

Usage data: When you access our web application or dashboard, we automatically collect information about how you use the platform, including pages visited, features used, time spent on each section, and navigation paths. This data is collected in aggregate and is used to improve the platform user experience.

Device and technical information: We collect device type, operating system, browser type and version, screen resolution, IP address, and referring URL. This information helps us ensure the platform functions correctly across different technical environments.

Log data: Our servers automatically record log data when you access our Services, including timestamp, request type, response code, and session duration. Log data is retained for 90 days for security monitoring purposes.

Cookies and tracking technologies: We use cookies and similar technologies to maintain session state, remember user preferences, and collect usage analytics. See our Cookie Policy for detailed information about the specific cookies we use and how to manage them.

2.3 Operational Data from Platform Deployments

EdgeRun AI's predictive maintenance platform processes sensor data from your industrial equipment. This operational data — vibration waveforms, temperature readings, anomaly scores, and asset health indices — is data that belongs to your organization and is processed on your behalf as a data processor under GDPR principles. We do not sell, share, or use this operational data for any purpose other than providing the contracted Services to your organization. This operational data is subject to the terms of your data processing agreement with EdgeRun AI rather than this Privacy Policy.

3. How We Use Your Information

We use personal information for the following purposes:

3.1 Service Delivery and Account Management

We use your account information to provide access to the EdgeRun AI platform, process your subscription, send service notifications, and communicate with you about your account status. This processing is necessary for the performance of our contract with you.

3.2 Customer Support

When you contact our support team, we use your information to identify your account, understand your technical environment, and provide appropriate assistance. Support interactions are logged and retained for 24 months to enable consistent service quality and to allow escalation of recurring issues.

3.3 Product Improvement and Development

We analyze aggregated usage data to understand how customers interact with the platform, identify features that require improvement, and prioritize development work. This analysis uses aggregate and anonymized data that cannot be used to identify individual users.

3.4 Marketing Communications

With your consent, we may send you information about EdgeRun AI's products, services, technical articles, and industry events. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@edgerunai.com. Opting out of marketing communications does not affect transactional communications related to your account.

3.5 Legal and Compliance

We may process personal information to comply with applicable laws and regulations, respond to lawful requests from government authorities, enforce our terms of service, protect the rights and safety of EdgeRun AI and our customers, and investigate potential violations of our policies.

3.6 Security and Fraud Prevention

We use technical information including IP addresses and session data to detect and prevent unauthorized access, fraud, and security incidents. This processing is necessary for our legitimate interests in maintaining the security and integrity of our Services.

4. How We Share Your Information

4.1 Service Providers

We share personal information with third-party service providers who assist us in operating our business, subject to appropriate confidentiality and data processing agreements. These providers include:

• Amazon Web Services (AWS): Cloud infrastructure and data storage in the United States.
• Stripe: Payment processing. Stripe's privacy practices are governed by Stripe's Privacy Policy.
• Hubspot: Customer relationship management, email marketing, and customer support ticketing.
• Google Analytics: Website analytics. We have configured Google Analytics with IP anonymization enabled.
• Cloudflare: Content delivery network and DDoS protection.

4.2 Business Transfers

If EdgeRun AI is involved in a merger, acquisition, asset sale, or similar business transaction, personal information may be transferred as part of that transaction. We will notify affected users by email and/or prominent notice on our website before personal information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose personal information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of EdgeRun AI, our customers, or the public.

4.4 No Sale of Personal Information

EdgeRun AI does not sell personal information to third parties for any purpose. We do not share personal information with third parties for their own marketing purposes.

5. Data Retention

We retain personal information for as long as necessary to provide our Services and to fulfill the purposes described in this Privacy Policy, subject to applicable legal requirements.

Active account data: Retained for the duration of your subscription plus 12 months following account termination to allow for account reinstatement requests and to resolve any outstanding billing or contractual matters.

Support records: Contact form submissions and support tickets are retained for 24 months from the date of creation.

Website analytics data: Google Analytics data is retained for 14 months per our Google Analytics configuration. Server log data is retained for 90 days.

Financial records: Billing records and transaction histories are retained for 7 years in compliance with US tax law requirements.

Marketing consent records: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with applicable marketing regulations.

6. Your Rights

6.1 Rights Under GDPR (European Economic Area Residents)

If you are located in the European Economic Area, you have the following rights with respect to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of inaccurate personal data.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances.
• Right to restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, contact us at info@edgerunai.com with the subject line "GDPR Rights Request." We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

6.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for collection, and the categories of third parties with whom we shared it.
• Right to delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to opt-out of sale: EdgeRun AI does not sell personal information. This right is not applicable.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at info@edgerunai.com with the subject line "CCPA Rights Request."

7. Data Security

EdgeRun AI implements industry-standard technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of data at rest using AES-256 on all cloud storage volumes.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Multi-factor authentication requirements for all internal systems containing personal data.
• Regular security assessments and penetration testing.
• Incident response procedures for detecting, containing, and reporting data security incidents.

Despite these measures, no method of data transmission or storage is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at info@edgerunai.com.

8. International Data Transfers

EdgeRun AI is based in the United States. If you are located outside the United States, your personal information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. For transfers of personal data from the European Economic Area, we rely on the Standard Contractual Clauses approved by the European Commission as the legal mechanism for cross-border data transfer.

9. Children's Privacy

Our Services are intended for business professionals and are not directed toward individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (to the address associated with your account) and/or by posting a prominent notice on our website. The updated Privacy Policy will indicate the effective date of the changes at the top of the document.

Your continued use of our Services after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you should discontinue use of our Services.

11. Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data practices, contact us at:

EdgeRun AI, Inc.
700 Canal Street
Stamford, CT 06902
United States
Email: info@edgerunai.com
Phone: +1 (203) 719-3648

We will acknowledge your request within 5 business days and provide a substantive response within 30 days. For GDPR-related requests, we will respond within the timeframes required by applicable law.