Privacy Policy

Effective Date: April 14, 2026
Last Updated: April 14, 2026

This Privacy Policy explains how Saho Labs, Inc. ("Company," "we," "us," or "our") collects, uses, and protects information when you use the SahoLabs platform, website, and related services (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this policy.

1. Scope

This policy covers two categories of individuals:

Customers and website visitors — people who visit our website, create accounts, or purchase datasets
Data collection participants — individuals who perform tasks while wearing our sensor equipment during data collection sessions

Each group is addressed separately where the information we collect and how we handle it differs.

2. Information We Collect from Customers and Website Visitors

2.1 Information You Provide

When you create an account, request data, or contact us, we may collect:

Contact information: name, email address, phone number
Organization information: company name, role, and industry
Account credentials: email and password
Payment information: billing address and payment method details (processed by Stripe — we do not store full card numbers)
Communications: messages you send us through email, forms, or other channels

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

Device information: browser type, operating system, screen resolution
Network information: IP address and approximate geographic location
Usage information: pages visited, time on page, referral source, and navigation paths
Cookies: we use cookies to maintain sessions and understand usage patterns (see Section 7)

3. Information We Collect from Data Collection Participants

During data collection sessions, participants wear specialized sensor equipment (capture rigs) that record multimodal data, which may include:

Egocentric video: first-person RGB video from head-mounted and wrist-mounted cameras
Depth data: stereo depth maps generated via IR dot projection
Tactile data: pressure and contact force maps from instrumented gloves
Motion data: body IMU readings and 6-DoF pose trajectories
Derived outputs: 3D hand reconstructions (MANO), object segmentation, SLAM data, and action labels generated from processing the raw sensor data

All data collection participants provide informed consent before any recording begins. Participants are told what data is being captured, how it will be used, and how long it will be retained. Participation is voluntary.

3.2 Identifiability

Sensor data may contain identifiable information (e.g., video of hands, surroundings, or incidentally captured faces). We take steps to minimize identifiability in delivered datasets where applicable, but some data modalities are inherently tied to the physical attributes of the participant.

3.3 Participant Data Rights

Participants may contact us at privacy@saholabs.com to request information about their data or to exercise any applicable rights under their local data protection laws.

4. How We Use Information

4.1 Customer and Visitor Information

We use your information to:

Provide and operate the Service
Process transactions and deliver datasets
Respond to inquiries and provide support
Send service-related communications (e.g., order confirmations, delivery updates)
Improve the Service based on usage patterns
Comply with legal obligations

We do not sell your personal information.

4.2 Participant Sensor Data

Sensor data collected from participants is:

Processed and annotated to produce structured training datasets
Licensed to customers for AI research and model training purposes
Used internally to improve our data collection and annotation pipelines

Sensor data is not used for advertising, profiling, or any purpose unrelated to our data infrastructure services.

We share information only in the following circumstances:

5.1 Service Providers

We use third-party services to operate the Service:

Stripe — payment processing
Cloudflare — hosting, content delivery, and security
Resend — transactional email delivery

These providers access only the information necessary to perform their functions and are bound by their own privacy policies.

5.2 Dataset Customers

Processed and annotated sensor data is delivered to customers under the terms of their data license agreement. Raw participant contact information is never shared with dataset customers.

5.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of company assets, your information may be transferred to the acquiring entity. We will notify you before your information becomes subject to a different privacy policy.

6. Data Security

We implement reasonable technical and organizational measures to protect information, including:

Encryption of data in transit (TLS) and at rest
Access controls limiting who can view or process data
Regular security reviews of our infrastructure and processes

No system is perfectly secure. If you become aware of a security issue, please contact us at security@saholabs.com.

7. Cookies

We use cookies to:

Maintain your session when you are logged in
Remember your preferences (e.g., dark mode)
Understand how visitors navigate our website

You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.

8. Data Retention

Account information is retained for as long as your account is active. You may request deletion at any time.
Sensor data is retained as long as it is needed for dataset production, customer delivery, and our operational purposes. Retention periods for participant data are communicated during the consent process.
Automatically collected data (analytics, logs) is retained for up to 24 months.

9. Your Rights

Depending on where you are located, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your personal information, subject to legal exceptions
Port your data in a structured, machine-readable format
Object to or restrict certain processing
Withdraw consent where processing is based on consent

9.1 California Residents (CCPA)

California residents may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

If you are in the European Economic Area, our legal bases for processing your data include consent, contract performance, legitimate interests, and legal obligations. You may exercise your GDPR rights by contacting us at privacy@saholabs.com.

10. Children

The Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. International Transfers

Your information may be processed in the United States or other countries where our service providers operate. We take reasonable steps to ensure that your data is treated securely and in accordance with this policy regardless of where it is processed.

12. Third-Party Links

Our website may link to external sites that we do not control. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at privacy@saholabs.com.