Privacy Policy

This Privacy Policy describes how Archipelo, Inc. (“Archipelo,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with salmon.systems, other websites operated by Archipelo that link to this Privacy Policy, and Salmon software, developer tools, accounts, technical previews, documentation, communications, and related products and services that link to or are expressly covered by this Privacy Policy (collectively, the “Services”).

Archipelo develops Salmon, Execution Verification Infrastructure for autonomous multi-actor software systems.

This Privacy Policy applies when Archipelo determines the purposes and means of processing personal information. When Archipelo processes personal information on behalf of a business customer, the applicable customer agreement governs that processing as described in Section 6 below.

1. Information We Collect

The personal information we collect depends on how you interact with Archipelo and the Services.

Information You Provide

We may collect information you provide directly to us, including:

• name, email address, company, job title, and other business contact information;
• account registration and authentication information;
• communications, inquiries, support requests, and feedback;
• information you provide when requesting or participating in a demonstration, evaluation, technical preview, or other interaction with Archipelo;
• information provided in connection with a prospective employment or contractor relationship; and
• other information you choose to provide.

Please do not provide personal information that is not reasonably necessary for your interaction with Archipelo or the Services.

Information Collected Automatically

When you access or use the Services, we may automatically collect certain information about your device and use of the Services, including:

• IP address;
• browser and device information;
• operating system;
• pages or features accessed;
• dates and times of access;
• referring pages;
• log, diagnostic, and performance information; and
• information collected through cookies and similar technologies.

The specific information collected depends on the Service and the technologies used to provide it.

Information from Other Sources

We may receive business contact and professional information from service providers, business partners, and publicly available sources, where permitted by applicable law.

2. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, and improve the Services;
• create, administer, and secure accounts;
• authenticate users and manage access to the Services;
• respond to inquiries, provide support, and communicate with you;
• provide demonstrations, evaluations, technical previews, and other requested interactions;
• understand how the Services are used and improve their functionality, performance, and user experience;
• monitor, protect, and maintain the security and integrity of the Services;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity;
• send product, company, research, event, or other communications where permitted by applicable law;
• evaluate prospective employment or contractor relationships;
• comply with applicable law, legal process, and regulatory requirements;
• establish, exercise, or defend legal rights; and
• support corporate, financing, organizational, or transactional activities.

We may also use information for another purpose disclosed to you at the time of collection or with your direction or consent.

3. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing personal information, including under the European Union General Data Protection Regulation (“GDPR”) or United Kingdom data protection law, Archipelo relies on one or more of the following legal bases, as applicable:

Performance of a contract. We may process personal information where necessary to provide Services you request or to take steps at your request before entering into a contract.

Legitimate interests. We may process personal information where necessary for our legitimate interests or those of a third party, including operating, securing, improving, and communicating about Archipelo and the Services, provided those interests are not overridden by applicable rights and interests.

Consent. We may process personal information with your consent where consent is required or otherwise appropriate. Where processing is based on consent, you may withdraw that consent as provided by applicable law.

Legal obligations. We may process personal information where necessary to comply with applicable legal obligations.

The legal basis applicable to a particular processing activity depends on the nature and context of that activity.

4. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

Service providers. We may disclose personal information to vendors and service providers that perform services for us, such as infrastructure, hosting, communications, analytics, security, support, and other business operations.

Legal and safety purposes. We may disclose personal information where we reasonably believe disclosure is necessary to comply with applicable law or legal process; protect the rights, property, or safety of Archipelo, our users, or others; investigate fraud, abuse, or security incidents; or enforce applicable agreements.

Corporate transactions. We may disclose personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, investment, or similar corporate transaction, including to relevant counterparties and professional advisers.

At your direction or with your consent. We may disclose personal information where you direct us to do so or otherwise provide consent.

5. Cookies and Similar Technologies

The Services may use cookies and similar technologies to operate and secure the Services, remember preferences, understand usage, and improve performance and functionality.

Depending on the technologies we use and applicable law, you may be able to manage certain cookies through your browser settings or other controls made available through the Services.

Where applicable law requires consent for particular cookies or similar technologies, we will request consent as required.

6. Customer Data and Business Customers

Certain Salmon Services may be provided to organizations that use those Services to process information under their own direction.

Where Archipelo processes personal information on behalf of a business customer, Archipelo acts on that customer's instructions and subject to the applicable agreement with that customer. The customer determines the purposes and means of the relevant processing except where Archipelo independently determines a processing purpose as permitted by applicable law.

If your personal information is processed by Archipelo on behalf of an organization with which you have a relationship, requests concerning that processing should generally be directed to that organization. Archipelo will assist its business customers with applicable privacy obligations as required by the relevant agreement and applicable law.

This Privacy Policy governs personal information that Archipelo processes for its own purposes.

7. Data Retention and Security

We retain personal information for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including to provide the Services, maintain legitimate business records, comply with legal obligations, resolve disputes, enforce agreements, and protect our rights.

The applicable retention period depends on factors including the nature of the information, the purposes for which it is processed, the duration of our relationship with you, and applicable legal requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Archipelo and its service providers may process personal information in the United States and other countries.

Where applicable law requires safeguards for transfers of personal information between countries, we use recognized legal mechanisms as applicable to the relevant transfer. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

You may contact us using the information below to request additional information about safeguards applicable to transfers of your personal information.

9. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights regarding your personal information, including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain personal information;
• withdraw consent where processing is based on consent; and
• opt out of certain processing for targeted advertising, sale of personal information, or profiling where applicable law provides such rights.

Where applicable law provides a right to object to processing based on legitimate interests or for direct marketing, you may exercise that right by contacting us using the information below.

You may submit a privacy request by contacting us using the information in Section 12.

We may need to verify your identity before completing a request. We will respond to valid requests as required by applicable law. Certain rights may be subject to exceptions or limitations under applicable law.

Where applicable, you may also have the right to appeal a decision regarding a privacy request or lodge a complaint with an applicable data protection or supervisory authority.

10. Marketing Communications

You may opt out of marketing emails from Archipelo by using the unsubscribe mechanism included in the communication or by contacting us.

We may continue to send non-marketing communications where necessary to provide or administer the Services or our relationship with you.

11. Children

The Services are not directed to children under 13, and Archipelo does not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 in circumstances where doing so is not permitted, we will take appropriate steps to delete it.

12. Changes and Contact

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable law.

When we update this Privacy Policy, we will update the “Last Updated” date above. Where required by applicable law, we will provide additional notice of material changes.

Questions, privacy requests, or other inquiries concerning this Privacy Policy may be directed to: