Privacy Policy

This Privacy Policy explains how ScutiW AI and ScutiW Superintelligence (collectively, “we,” “us,” or “our”) collect, use, share, and protect information when you access or use the Verifier websites, applications, and related services (the “Service”). The Service is managed and operated by ScutiW AI and ScutiW Superintelligence. The software license for Verifier is owned by Astro Arpanet LLC. By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.

This Policy should be read together with our Terms of Use. If there is any conflict between this Policy and the Terms regarding dispute resolution or liability, the Terms control to the fullest extent permitted by law. This Privacy Policy describes data practices; it is not a warranty, service-level agreement, or promise of security or availability. Liability for the Service is governed exclusively by the Terms of Use.

If your organization has a separate master services agreement, order form, or data processing addendum with us or with Astro Arpanet LLC (“Enterprise Agreement”), that agreement may govern certain processing when it expressly says so. Where an Enterprise Agreement conflicts with this Policy on data handling, the Enterprise Agreement controls for your organization's contracted deployment.

1. Information we collect

• Account & access data — operator identifiers, names or emails shown on review records, roles or permissions your administrator configures, session and authentication data needed to protect write access, and optional multi-factor or enterprise sign-in metadata if enabled for your deployment.
• Verification & operational records — task attempts (“episodes”), timestamps, configured acceptance criteria, pass/fail or review outcomes, optional sensor traces (for example force readings), before/after images or frames, robot or equipment identifiers you supply (for example serial numbers), shift summaries, export packages, cryptographic signatures on shift records when signing is enabled, audit-style events, and human adjudication actions.
• Configuration data — criteria definitions, thresholds, labels, site or cell settings, and integration settings your organization publishes in the product.
• Contact & support messages — name, email, topic, message body, and optional scheduling preferences you submit via the contact form. Contact submissions may be delivered through our email service provider (for example Brevo).
• Technical & security logs — IP address, browser or client information, request timing, error and diagnostic logs, and similar data needed to operate, secure, and troubleshoot the Service.
• Cookies & local storage — as described in Section 8.

2. Operational data; we do not operate robots

Verifier is software that records and reports what occurred during robotic or physical-AI task attempts according to rules and review steps your organization configures. The Service is observe-only with respect to equipment: it does not command, enable, or disable robot motion, safety interlocks, or industrial control systems.

• Your operations — you (and any integrators or operators you engage) remain solely responsible for robot programming, safety zones, permits, training, maintenance, and all physical work. We do not perform on-site verification, safety certification, or quality assurance as a service.
• Lawful processing — you determine whether you have lawful grounds to collect images, traces, or identifiers from your facility and workforce. You are responsible for notices, consents, and policies required in your jurisdiction (including where cameras or biometric-adjacent data may appear in frames).
• Storage location — depending on deployment, records may be stored in a database and object storage you or your provider configure (for example hosted PostgreSQL and S3-compatible storage). Data residency and subprocessors for self-hosted or private deployments are defined in your Enterprise Agreement or deployment documentation.
• No liability for operations or output — to the fullest extent permitted by law, the Protected Parties described in the Terms of Use have no liability for robot incidents, verification outcomes, shift records, or reliance on reports. This Policy is not a warranty. See our Terms of Use.

3. Optional vision / AI analysis

When your deployment enables an optional vision or language model tier (often using an OpenAI-compatible API and credentials configured in your environment), selected frames or related text may be transmitted to that third-party provider to suggest or score verification steps. Suggestions are assistive only; your operators and workflows remain responsible for final outcomes.

• Bring-your-own keys — in many deployments, API keys and model endpoints are supplied by you or your IT team. We are not the provider's agent for billing, retention, or model behavior.
• Provider terms — third-party AI processing is governed by that provider's terms and privacy practices. Do not enable vision analysis on sensitive imagery unless you accept that risk.

4. How we use information

• Provide, maintain, secure, and improve the Service.
• Ingest episodes, evaluate criteria, display review queues, produce shift summaries and signed exports, and support authorized operators.
• Run optional vision or AI-assisted checks when configured and when required inputs are present.
• Respond to contact-form, support, and security inquiries; enforce acceptable use; and prevent abuse.
• Comply with law, protect rights and safety, and investigate suspected misuse.
• If applicable to your plan, process billing or subscription status through a payment processor (we do not store full payment card numbers).

We do not sell personal information. We do not use operational verification records for unrelated advertising profiles.

5. Legal bases (where applicable)

Depending on your location and role (business vs. consumer), we may process personal data based on:

• Contract — to provide the Service your organization requested.
• Legitimate interests — to secure and administer the Service, prevent abuse, and support customers, balanced against your rights.
• Consent — where required (for example certain optional cookies or marketing, if ever enabled).
• Legal obligations — to comply with applicable law.

6. How we share information

We may share information with:

• Service providers — hosting, database, object storage, email delivery (for example Brevo for contact messages), payment processing, monitoring, and (if enabled) optional AI providers. They process data only as needed to provide services to us or to your deployment and must protect it appropriately under their agreements.
• Your organization — administrators and authorized operators within your tenant or deployment, according to roles you configure.
• Integrations you enable — exports, webhooks, or third-party systems you connect may receive data you choose to transmit, under their terms.
• Business transfers — in a merger, acquisition, financing, or sale of assets, information may transfer to a successor subject to this Policy or successor notice.
• Legal compliance — when required by law, legal process, or to protect rights, safety, or the security of the Service.
• Aggregated / de-identified data — that does not reasonably identify individuals or your confidential operational details.

We are not responsible for how third-party providers, your integrators, or your organization store, use, disclose, or secure data once it leaves the Service under your direction or configuration.

7. Retention & your rights

We retain information as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods for episodes, media, and shift records may be controlled by your organization's configuration, backups, and Enterprise Agreement. Export features may allow you to download shift packages where enabled.

Deletion, export, and access requests for enterprise deployments should be directed to your site administrator first. You may also contact us via the contact form. We may need to verify your identity or authority before acting.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port certain personal data, or to object to certain processing. Mandatory laws may limit how far those rights apply to B2B processing performed on behalf of your employer or client.

8. Cookies & local storage

When you use Verifier in a browser, we may use:

• Necessary cookies / session storage — to keep you signed in and protect write operations where authentication is enabled.
• Preferences — for example theme (light/dark) stored in local storage so the UI remembers your choice.

We do not currently load third-party advertising cookies on the core product. If optional analytics are added in a future release, we will update this section. You can clear site data in your browser settings; doing so may sign you out or reset preferences.

9. Security

We implement reasonable administrative, technical, and organizational safeguards appropriate to a commercial B2B product. No method of transmission or storage is 100% secure. You are responsible for securing credentials, network access to your deployment, signing keys, API keys, and operator devices. Security incidents arising from misconfiguration, shared passwords, or unauthorized physical access to your facility are your responsibility to the fullest extent permitted by law.

10. International transfers

We and our service providers may process information in the United States and other countries where we or they operate. Those countries may have different data-protection laws than your location. Where required, we use appropriate safeguards (such as standard contractual clauses) as described in an Enterprise Agreement or available on request for applicable transfers.

11. Children

The Service is intended for business and professional use. It is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date will change when we do. Material changes may also be communicated through the product or to administrators. Continued use after an update means you accept the revised Policy, subject to mandatory law.

13. Contact

Privacy questions: use the contact form. See also our Terms of Use.