Privacy Policy

1. Data Controller Information

This Privacy Policy applies to the services, websites, and technical evaluation interfaces provided by Membdel Inc.("Membdel", "we", "us", or "our"). If you have questions regarding our data practices or wish to exercise your rights under global privacy regulations, you may contact our designated privacy team at:

• Email: ankit@membdel.com
• Website: https://www.membdel.com

2. Information We Collect

We only collect data strictly necessary to communicate with you and coordinate technical evaluations:

• Contact & Business Inquiries: When you submit a request for evaluation via our website or email, we collect your name, work email address, company name, primary evaluation track (e.g. Semiconductor RTL, Enterprise Codebase, or AI Governance), and any technical scope notes you voluntarily provide.
• Technical Logs & Web Telemetry: Standard HTTP server logs (IP address, browser user-agent, referring URL, timestamp) collected automatically for network security, abuse prevention, and infrastructure reliability.
• Essential Preferences: Functional cookie preferences stored locally in your browser to remember your consent choices.

3. Treatment of Enterprise Model Weights & Intellectual Property

Membdel’s core technology evaluates and excises data representations from neural networks. In connection with prospective or active technical evaluations:

• No Cloud Ingestion: Technical scoping and proof-of-concept evaluations are designed for local execution in air-gapped on-premises GPU environments or within your enterprise Virtual Private Cloud (VPC).
• Zero Model Retention: We do not retain, store, mirror, or upload your proprietary model checkpoints, training datasets, or RTL hardware source code to external cloud storage.
• Mutual Confidentiality: All scoping conversations and architecture evaluations are governed by standard non-disclosure terms.

4. Legal Basis for Processing (GDPR)

Under the European Union General Data Protection Regulation (GDPR), we process personal inquiry data under the following legal bases:

• Legitimate Interests (Art. 6(1)(f) GDPR): To respond to B2B technical inquiries, secure our infrastructure against malicious attacks, and manage enterprise client relations.
• Pre-Contractual Steps (Art. 6(1)(b) GDPR): To prepare technical evaluation protocols and agreements at your request.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with mandatory statutory, regulatory, and corporate accounting requirements.

5. Your Rights Under GDPR & CCPA/CPRA

Depending on your jurisdiction, you possess the following rights regarding personal data held by Membdel:

• Right of Access & Portability: Request confirmation and copies of personal data we retain about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten" - Art. 17 GDPR): Request complete deletion of your contact records and communication history.
• Right to Restriction & Objection: Object to or restrict processing of your business information.
• Non-Discrimination: We will never discriminate against you for exercising your California Consumer Privacy Act (CCPA) rights. We do NOT sell or share personal data.

To exercise any of these rights, email us directly at ankit@membdel.com. We respond to all verified inquiries within 30 days.

6. Data Retention & Security Safeguards

Inquiry submissions and email correspondence are retained only for the duration necessary to satisfy the business purpose for which they were collected or as required by law. We implement industry-standard TLS 1.3 encryption in transit, strict access control, and principle-of-least-privilege policies across all administrative endpoints.

7. Changes to this Policy

We may periodically update this Privacy Policy to reflect changes in our legal obligations or technical architecture. Any updates will be posted here with an updated "Last Updated" date.