Privacy Policy

Last updated: October 12, 2026

This privacy policy (“Privacy Policy”) describes the types of personal data that Elorian AI, Inc. (“Elorian,” “we,” “our,” and/or “us”) collects, uses, and discloses from individuals (“you” or “your”) who use our website (including https://elorian.ai/) (the “Website”), join our early-access waitlist, use our artificial intelligence model services, or use other services that link to this Privacy Policy (together, “Services”).

As used in this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual and includes any information that constitutes “personally identifiable information,” “personal data,” or “personal information” under applicable privacy or data protection laws or regulations.

You acknowledge the collection, use, disclosure, procedures, and other processing described in this Privacy Policy.

1. Personal Data We Collect

We may collect a variety of personal data from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use the full extent of our Website and Services if that personal data is necessary to provide you with our Website or Services or if we are legally required to collect it.

A. Personal Data You Provide to Us

Services information: If you join our early-access waitlist or request research updates, we collect your name, email address, job title or role, company or organization, industry, country, and information about how you heard about us.

Account information: When you create an account to use our Services, we collect your name, email address, and company. You can create an account using your email address or by signing in with Google; if you sign in with Google, we receive certain information from your Google account, such as your name and email address.

Inputs and outputs: When you use our Services, we collect the content that you submit to the Services, such as images, video, audio, text, files, and instructions (“Inputs”), the responses and other content that our models generate in response (“Outputs”). Inputs and outputs may contain personal data about you or about other individuals. The Services are not intended for the submission of biometric information.

Payment information: If you purchase a paid subscription, we collect payment and billing information, which is processed by our third-party payment processor.

Communications: If you contact us directly e.g., to provide feedback via email or contact forms, we may receive personal data about you, such as your name, email address, company name, the contents of a message or attachments that you may send to us, and any other information you choose to provide to us. When you sign up for research updates, we will collect your email address and other personal data that you provide. When you communicate with us online, our third-party vendors may receive and store these communications on our behalf. When we send you emails, we may use embedded pixels or other technologies to track whether and when you open them and whether you access links included in them, to learn how to deliver a better user experience and improve our Website and Services.

Job applicants: If you apply for a job via our careers page, we process your personal data in order to assess and administer your application. This may include your name, email, resume, and any other information you choose to provide to us, such as your LinkedIn profile.

B. Personal Data We Collect Automatically

When you visit our Website, we automatically collect limited technical information that is necessary for the security and operation of the Website. When you use our Services, we also collect the information described below to provide, secure, and improve the Services.

Location Information: We may collect and infer your general location information, including, for example, by collecting and using your internet protocol (IP) address.

Device Information: We may receive technical information about your device and software, such as your IP address and web browser type and version, device type, and operating system version.

Usage Information: We automatically receive information about your interactions with our Website and Services, such as the pages you request, the features you use, the date and time of your requests, and the referring website or source.

C. Personal Data We Collect from Other Sources

Model training data: We develop artificial intelligence models, including multimodal and visual reasoning models. To train these models, we collect and process publicly available visual, text, and multimodal datasets, as well as licensed data from third-party data providers. These datasets may contain personal data about individuals, including information that they or others have made publicly available. We implement safeguards designed to avoid or minimize the inclusion of identifiable personal data in our training datasets where feasible. We also use Inputs and Outputs to train our models as further described in “Training on Inputs and Outputs” below.

2. How We Use the Personal Data We Collect

We use the personal data we collect:

• To provide, maintain, improve, debug, administer, secure, and enhance our Services;

• To create and administer your account, provide the Services (including to process your Inputs and generate Outputs), process payments, and provide support;

• To administer our early-access waitlist, including to evaluate eligibility for and prioritize early access, to understand and evaluate demand for our Services, and to contact you regarding model availability or beta access;

• To communicate with you, provide you with product updates, research announcements, newsletters, and other information, provide information that you request, and respond to questions;

• For marketing purposes, such as sending you marketing communications where you have opted in or where otherwise permitted by applicable law;

• To develop, train, test, and improve our artificial intelligence models, as further described in “Training on Inputs and Outputs” below;

• To generate anonymized or aggregated data containing only de-identified, non-personal data that we may use for any lawful purposes;

• To find and prevent fraud and abuse, monitor for and prevent misuse of the Services, protect against unauthorized activity, resolve disputes, or respond to trust and safety issues that may arise;

• To process job applications;

• For compliance purposes, including enforcing our contracts or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and

• For other purposes for which we provide specific notice at the time the information is collected.

Training on Inputs and Outputs

We use Inputs and Outputs to develop, train, test, and improve our artificial intelligence models. This section describes how that works and the choices available to you.

• Free access: If you access our Services at no charge, we use your Inputs and Outputs, together with any feedback you choose to provide, to train, test, and improve our models by default.

• Paid, API, and enterprise offerings: Different terms may apply to Inputs and Outputs submitted through any paid, API, or enterprise offerings, as set out in the applicable agreement or settings.

• Your choices: You may opt out of our use of your Inputs and Outputs to train our models at any time by contacting us at privacy@elorian.ai. If you are located in the EEA, the UK, or Switzerland, you may also object to this processing as described in “Your Choices” below.

• Human review: Authorized personnel and our service providers may review a limited sample of Inputs and Outputs, under confidentiality obligations, to develop, evaluate, and improve our models and to detect, prevent, and address misuse and trust-and-safety issues.

• Safeguards: We take steps designed to reduce the presence of personal data in the materials used for training, including filtering and de-identification measures where feasible.

3. Legal Bases for Processing European Personal Data

If you are located in the EEA, the UK or Switzerland, we only process your personal data when we have a valid “legal basis,” including as set forth below.

• Consent: We may process your personal data where you have consented to certain processing of your personal data, such as when you opt in to receive marketing communications.

• Performance of a Contract: We may process your personal data where it is necessary to perform a contract with you, such as to provide the Services to you.

• Compliance with a Legal Obligation: We may process your personal data where we have a legal obligation to do so. For example, we may process your personal data to comply with tax, labor and accounting obligations.

• Legitimate Interests: We may process your personal data where we or a third party have a legitimate interest in processing your personal data. Specifically, we have a legitimate interest in using your personal data to administer our waitlist and evaluate demand for our Services, to provide, secure, and improve our Services, to develop, train, and improve our artificial intelligence models, to process job applications, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your personal data when these interests are not overridden by your rights and interests.

4. How We Disclose the Personal Data We Collect

Vendors and Service Providers: We may disclose any information we receive to vendors and service providers retained in connection with our Website and Services, such as providers of cloud infrastructure and model hosting, web hosting, database storage and email delivery.

As Required by Law and Similar Disclosures: We may access, preserve, and disclose your information if we believe doing so is required or appropriate to:

• Comply with law enforcement requests and legal process, such as a court order or subpoena;

• Respond to your requests;

• Protect your, our, or others’ rights, property, or safety;

• Protect against legal liability; or

• Investigate fraud or other unlawful activity.

Merger, Sale, or Other Asset Transfers: We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a financing, reorganization, or other corporate transaction, including one in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent: We may also disclose your information with your permission.

5. Your Choices

Marketing Communications: You can unsubscribe from our promotional emails at any time via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Do Not Track: There is no accepted standard on how to respond to “Do Not Track” signals, and we do not respond to such signals.

Your European Privacy Rights: If you are located in the EEA or the UK or Switzerland, you have additional rights described below.

• You may request access to the personal data we maintain about you, update, and correct inaccuracies in your personal data, or restrict the processing of your personal data, have your personal data anonymized or deleted, as appropriate, request not to be subject to a decision based solely on automated processing including profiling, or exercise your right to data portability to easily transfer your personal data to another company. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.

• You have the right to object to the processing of your personal data in certain circumstances, including our use of inputs and outputs and other personal data to train our models. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. You also have the right to object at any time to the processing of your personal data for direct marketing.

• You may withdraw any consent you previously provided to us regarding the processing of your personal data at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain personal data for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

If you choose not to provide us with personal data we collect, some features of our Services may not work as intended.

6. Third Parties

Our Services may contain links to other websites or platforms that we do not own or operate, such as social media pages and third-party news sites. We are not responsible for the privacy practices of these third party websites or platforms. Please be aware that this Privacy Policy does not apply to your activities on these third-party websites or platforms or any data you disclose to these third parties. We encourage you to read their privacy policies before providing any data to them.

7. Retention

We retain personal data about you for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, such as maintaining your position on our waitlist, providing the Services to you, responding to your communications, processing job applications, or complying with legal obligations. When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When we process personal data for our own purposes, we determine the retention period taking into account various criteria, such as the nature and length of your interaction with our Website and Services, the impact on your experience of our Website and Services if we delete some personal data from or about you, and mandatory retention periods provided by law and the statute of limitations.

8. Security

We employ administrative, technical, and physical safeguards (including encryption, access controls, and secure server hosting) designed to safeguard the data we maintain. However, because no electronic transmission or storage of data can be entirely secure, we can make no guarantees as to the security or privacy of your data.

9. International Visitors

Our Website and Services are hosted in the United States (“U.S.”). If you choose to use our Website or Services from the EEA, the UK, Switzerland or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing. We may transfer personal data from the EEA or the UK or Switzerland to the U.S. and other third countries based on European Commission-approved or UK Government-approved Standard Contractual Clauses, with your consent, to perform a contract with you, or otherwise in accordance with applicable data protection laws. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Website and Services. For more information about the tools that we use to transfer personal data, or to obtain a copy of the contractual safeguards we use for such transfers (if applicable), you can contact us as described below.

10. Children’s Privacy

Our Website and Services are directed toward professionals and researchers, and no part of them is directed to children. You must be at least 16 years old to create an account or use the Services. We do not knowingly collect, maintain, or use personal data from children under 16 years of age. If you learn that a child has provided us with personal data in violation of this Privacy Policy, then you may alert us at privacy@elorian.ai.

11. Changes to this Privacy Policy

We will post any adjustments to this Privacy Policy on this page, and the revised version will be effective when it is posted. We will update the “Last Updated” date at the top of this Privacy Policy to reflect the date of the most recent revision.

12. Contact Information

Elorian AI, Inc. is the data controller and is responsible for the processing of your personal data. If you have any questions, comments, or concerns about our processing activities, please email us at privacy@elorian.ai or write to us at:

Elorian AI, Inc.

654 High St Fl 2

Palo Alto CA 94301

United States of America

Our EU Representative: For the purposes of Article 27 of Regulation (EU) 2016/679 (the “GDPR”), we have appointed European Data Protection Office (EDPO) as our representative in the European Union.

You may contact EDPO regarding matters pertaining to the GDPR:

• by using EDPO’s online request form: https://edpo.com/gdpr-data-request/; or

• by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Our UK Representative: For the purposes of Article 27 of the United Kingdom General Data Protection Regulation (the “UK GDPR”), we have appointed EDPO UK Ltd as our representative in the United Kingdom.

You may contact our UK representative regarding matters relating to the UK GDPR and/or complaints under section 164A of the Data Protection Act 2018 (DPA 2018) as amended by the Data Use and Access Act 2025 (DUAA):

• by using EDPO’s online request and complaint form: https://edpo.com/uk-gdpr-data-request/; or

• by writing to EDPO UK at Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London, N1 7UX, United Kingdom.