Privacy Notice

In short: we collect information you give us directly, and some information automatically when you use the Website.

Personal information you provide to us

We collect personal information that you voluntarily provide when you contact us, register interest in our products, or engage with our team. Depending on the context, this may include:

• name, email address, phone number, and country of residence;
• company, job title, and details of press, partnership, investor, or careers inquiries;
• verification information reasonably required where you engage with us as a partner, investor, or vendor; and
• correspondence, feedback, or survey responses you provide to our team.

All personal information you provide to us must be true, complete, and accurate; please notify us of any changes.

Information automatically collected

When you visit the Website, we automatically collect certain technical information that does not by itself reveal your identity, including:

• Log and usage data: IP address, browser type and settings, device information, pages and files viewed, referring/exit pages, date/time stamps, and similar activity data;
• Device data: device identifiers, operating system, hardware model, and general internet service provider information; and
• Approximate location data: inferred from your IP address.

Information we receive from others

We may receive information from analytics providers, or from public or commercial databases used to verify the identity or credentials of a partner, investor, or vendor inquiry, as permitted by applicable law.

In short: we process information to operate and improve the Website, respond to you, provide services, keep the Website safe, and comply with the law — and for other purposes only with your consent.

We process your information to:

• respond to your inquiries and manage press, partnership, investor, and careers requests;
• send you administrative or service-related communications, and, where you have not opted out, marketing communications about our products and services;
• operate, maintain, and improve the Website and/or relevant products and services, including diagnosing errors and understanding usage trends;
• protect the Website against fraud, abuse, and unauthorized access;
• verify your identity or credentials where you engage with us as a partner, investor, or vendor;
• comply with applicable legal, tax, and regulatory obligations, including responding to lawful requests from courts or regulators; and
• support internal business operations across our group, including shared systems, analytics, and compliance processes.

Cross-business sharing within the Katena group

Information collected through the Website may be shared within the Katena group, including with affiliates and related businesses such as Arc League, for internal administrative purposes, to provide requisite technology, products, or services, to fulfill business needs relating to you, and for shared infrastructure, compliance, analytics, and security, and to respond consistently to your inquiries or relationship with us. For example, if you contact us about a partnership that may relate to either or both Katena and Arc League, we may route and process that inquiry within the relevant part of our group.

In short: we only process personal information where we have a valid legal basis to do so, such as your consent, a contractual necessity, a legitimate interest, or a legal obligation.

If you are in the EEA, UK, or Switzerland, we rely on one or more of the following legal bases under the GDPR / UK GDPR:

• Consent: for example, for marketing emails or non-essential cookies. You may withdraw consent at any time.
• Performance of a contract: for example, to respond to an investor or vendor inquiry in anticipation of an agreement.
• Legitimate interests: for example, to maintain Website security, understand usage trends, provide services, or respond to general inquiries, provided this does not override your rights and interests.
• Legal obligation: for example, sanctions screening, tax reporting, or responding to a regulator or court order.
• Vital interests: in rare cases, to protect the safety of a person.

In short: we share information with categories of service providers who work on our behalf, and in specific business situations described below.

We may share personal information with the following categories of third parties:

• Data analytics services: example use: understanding Website usage and performance;
• Data storage and hosting providers: example use: hosting the Website and associated data;
• Communication and CRM tools: example use: managing inquiries and correspondence;
• Professional advisors: example use: legal, accounting, and financial advice; and
• Sanctions and verification providers: example use: screening partner, investor, or vendor inquiries.

We may also share information: (a) with your consent, for the purpose you agreed to; (b) with regulators, courts, or law enforcement to comply with a legal obligation or defend a legal claim; (c) with a successor entity in connection with a merger, financing, acquisition, or sale of assets; and (d) in aggregated or de-identified form, which is not subject to this Notice.

We may use cookies and similar technologies to operate and secure the Website and to understand how it is used. You can control cookies through your browser settings.

We retain personal information only as long as necessary for the purposes described in this Notice, unless a longer period is required or permitted by law (for example, tax, accounting, or dispute-resolution requirements). When no ongoing purpose remains, we delete or anonymize the information, or, where immediate deletion is not possible (for example, information contained in backup archives), we securely isolate it from further processing until deletion is possible.

We have implemented reasonable technical and organizational security measures designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee that unauthorized third parties will never defeat these measures. Transmission of personal information to and from the Website is at your own risk, and you should only access the Website in a secure environment.

The Website is not directed to children. We do not knowingly collect personal information from anyone under 16 (or the higher age of consent applicable in your jurisdiction), and we comply with the U.S. Children’s Online Privacy Protection Act’s protections for children under 13 where applicable. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

Depending on where you live, you may have rights to: be informed how your data is used; access a copy of it; correct or delete it (subject to exceptions); restrict or object to certain processing, including direct marketing; withdraw consent; receive your data in a portable format; and lodge a complaint with your local data-protection authority.

• EEA/UK/Switzerland residents may lodge a complaint with their local supervisory authority.
• Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
• Opting out of marketing — click “unsubscribe” in any marketing email, or contact us; we may still send non-marketing, service-related messages.

To exercise any right, email us at contact@katena.ai. We may need to verify your identity before fulfilling a request, and may require proof of authority if you use an agent to submit one on your behalf.

Katena operates internationally, and personal data may be transferred to, stored in, and processed in countries other than your own, including the British Virgin Islands, Singapore, Hong Kong, and the United States. Where we transfer personal data out of the EEA, UK, or Switzerland to a country not deemed adequate, we rely on appropriate safeguards recognized under applicable law, such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, available on request.

The Website may link to third-party websites, including our affiliate Arc League (arcleague.com), or embed third-party technology or media, such as licensed motion-mirroring demonstration content. These third parties may independently collect information subject to their own privacy notices, which we encourage you to review; we are not responsible for their privacy practices. Arc League maintains its own, separate privacy notice, which governs your interactions with arcleague.com directly, including any live-event, ticketing, or motion-capture data collected there.

We may update this Notice from time to time. The updated version will be indicated by a revised “Last updated” date and will take effect once posted.

If you have questions, requests, or complaints about this Notice or our handling of your personal data, email us at contact@katena.ai.