Privacy Policy

Effective date: March 27, 2026 · Last updated: March 27, 2026

      Summary: We collect only your email address when you join our waitlist. We use it to send you product updates. We do not sell or share your data. You can unsubscribe at any time.
    

1. Who we are

Ensemble Robotics LLC ("Ensemble Robotics," "Company," "we," "us," "our") is a California limited liability company. We operate the website at ensemblerobotics.com (the "Site").

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have. It applies to all visitors of the Site and all individuals who provide personal information to us.

2. Data controller

For purposes of the EU General Data Protection Regulation ("GDPR") and UK GDPR, Ensemble Robotics LLC is the data controller responsible for your personal information. For questions, requests, or complaints regarding your data, contact us at:

Ensemble Robotics LLC
Email: hello@ensemblerobotics.com
California, United States

3. Information we collect

3.1 Information you provide directly

Category (CCPA)	Specific data	Collection point	Purpose
Identifiers	Email address	Waitlist signup form	Send product updates and announcements

3.2 Information collected automatically

We do not use analytics tools, tracking pixels, advertising technologies, or fingerprinting. We do not collect IP addresses, browser information, device identifiers, or browsing behavior.

Our hosting provider (Cloudflare) may automatically process the following in the course of delivering the Site:

IP address and request metadata (processed by Cloudflare's infrastructure, not accessed or stored by us)
Functional cookies for security — see Section 7

3.3 Information we do NOT collect

We do not collect: names, phone numbers, physical addresses, payment information, social security numbers, geolocation data, biometric data, browsing history, or any sensitive personal information as defined by the CCPA or GDPR.

4. Legal basis for processing (GDPR)

Processing activity	Lawful basis
Sending product updates via the waitlist	Consent (Article 6(1)(a)) — provided when you submit the signup form
Responding to inquiries sent to our email	Legitimate interest (Article 6(1)(f)) — to respond to your communication
Cloudflare security processing	Legitimate interest (Article 6(1)(f)) — to protect the Site from abuse

Where processing is based on consent, you may withdraw consent at any time (see Section 10). Withdrawal does not affect the lawfulness of processing performed before withdrawal.

5. How we use your information

We use your email address to:

Send you occasional product updates and announcements about Ensemble Robotics
Respond to your inquiries if you email us directly

We do not:

Sell your personal information to any third party (and have not done so in the preceding 12 months)
Share your personal information for cross-context behavioral advertising
Use your data for automated decision-making or profiling
Use your email for any purpose other than those listed above
Rent, lease, or trade your email address
Send you third-party marketing or promotional content

6. Third-party service providers

We use a limited number of service providers ("data processors" under GDPR) to operate the Site and manage our mailing list. These providers only process your data on our behalf and under our instructions.

Provider	Purpose	Data processed	Location	Privacy policy
Loops.so (Loops, Inc.)	Email list management and delivery	Email address	United States	loops.so/privacy
Cloudflare, Inc.	Website hosting, CDN, and security	Server logs (IP, request metadata) — managed by Cloudflare, not accessed by us	United States / Global edge network	cloudflare.com/privacypolicy

We do not share your email address with any parties beyond these service providers. We do not use advertising networks, social media pixels, or data brokers.

7. Cookies and tracking technologies

Ensemble Robotics does not set any cookies. We do not use analytics, advertising, or social media tracking technologies of any kind.

Our hosting provider (Cloudflare) may set the following strictly necessary cookies for security and performance:

Cookie	Purpose	Duration	Type
`__cf_bm`	Bot management — distinguishes humans from bots. Per-site only; does not track you across websites.	30 minutes	Strictly necessary
`__cfruid`	Rate limiting — manages incoming traffic to prevent abuse.	Session	Strictly necessary

These cookies are required for the Site to operate securely. They do not collect personal information, do not enable tracking or profiling, and are exempt from consent requirements under GDPR Article 5(3) and the ePrivacy Directive.

8. "Do Not Track" signals (CalOPPA)

Some browsers send a "Do Not Track" (DNT) signal. Because we do not track your browsing behavior in any way, our Site naturally honors DNT signals — there is no tracking to disable. We do not alter our data practices based on DNT signals because we do not engage in tracking in the first place.

9. Data retention

We retain your email address only for as long as necessary to fulfill the purpose for which it was collected:

Active subscribers: Your email is retained for as long as you remain subscribed to our mailing list.
After unsubscribe: Upon unsubscribe or deletion request, we will remove your email from our active systems within 30 days and instruct Loops.so to purge it from their systems.
Suppression list: After unsubscribe, your email may be retained on a suppression list solely to ensure we do not email you again. This is required for CAN-SPAM compliance.

We do not retain any data beyond what is described above.

10. Your rights

10.1 All users, regardless of location

Unsubscribe: Every email we send contains a one-click unsubscribe link with immediate effect.
Deletion: Email hello@ensemblerobotics.com to request complete deletion of your data.

10.2 California residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

Right to know: Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties we shared it with.
Right to delete: Request that we delete the personal information we collected from you.
Right to correct: Request correction of inaccurate personal information.
Right to opt out of sale/sharing: We do not sell or share (as defined by the CCPA) your personal information. We have not sold or shared personal information in the preceding 12 months. If this changes, we will provide a conspicuous "Do Not Sell or Share My Personal Information" link.
Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by the CCPA.
Right to non-discrimination: We will not deny you services, charge you different prices, or provide a different quality of service for exercising your CCPA rights.

How to submit a request: Email hello@ensemblerobotics.com with the subject line "CCPA Request." We will acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days (extendable by an additional 45 days with notice, if reasonably necessary).

Verification: We will verify your identity by confirming the email address associated with your request. We do not collect sufficient information to verify identity beyond email address matching.

Authorized agents: You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization.

10.3 European Economic Area and UK residents (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation:

Right of access (Art. 15): Request a copy of the personal data we hold about you.
Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
Right to restrict processing (Art. 18): Request that we limit how we process your data.
Right to data portability (Art. 20): Request your data in a structured, commonly used, machine-readable format (e.g., CSV).
Right to object (Art. 21): Object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)): Withdraw consent at any time by clicking unsubscribe or contacting us.

How to submit a request: Email hello@ensemblerobotics.com with the subject line "GDPR Request." We will respond within 30 days.

Supervisory authority: You have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.

11. International data transfers

Your data is processed and stored in the United States by Ensemble Robotics and our service providers. If you are located outside the United States (including the EEA, UK, or other jurisdictions), your data will be transferred to the United States.

For EEA/UK residents: we rely on your explicit consent (provided when you submit the waitlist form) as the legal basis for transfer under GDPR Article 49(1)(a). Our service providers maintain data protection agreements and, where applicable, Standard Contractual Clauses (SCCs) to provide additional safeguards.

12. Data security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

Encrypted connections (HTTPS/TLS) for all data in transit
Access controls limiting who can view subscriber data
Use of reputable, security-audited service providers
Minimal data collection (email address only) to reduce risk surface

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

13. Children's privacy

The Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@ensemblerobotics.com and we will promptly delete the information.

14. CAN-SPAM Act compliance

We comply with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). All commercial emails we send will:

Accurately identify Ensemble Robotics as the sender
Use truthful, non-misleading subject lines
Be identified as commercial communications where required
Include our valid physical postal address
Include a clear, one-click unsubscribe mechanism

We honor all opt-out requests within 10 business days. Once you unsubscribe, we will not sell or transfer your email address to any third party (except as necessary for suppression list management).

15. CalOPPA compliance

In accordance with the California Online Privacy Protection Act (CalOPPA), we disclose:

The categories of personally identifiable information collected are described in Section 3
Third parties with whom we share data are listed in Section 6
Our response to "Do Not Track" signals is described in Section 8
You may review and request changes to your information by contacting us
This Privacy Policy is accessible from our homepage via the "Privacy" link

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

Material changes: We will notify active subscribers by email before the changes take effect and update the "Last updated" date.
Non-material changes: We will update the "Last updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy.

We encourage you to review this page periodically. Previous versions are available upon request.

17. Contact us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, contact us:

Ensemble Robotics LLC
Email: hello@ensemblerobotics.com
California, United States

We aim to respond to all inquiries within 10 business days.

This Privacy Policy was last reviewed on March 27, 2026. We recommend periodic review by qualified legal counsel to ensure continued compliance with applicable laws.