Privacy Policy

1. What this policy covers

This policy explains how Immersion (“we”, “us”) processes personal data when you visit immersionlab.tech or use the Immersion platform. We are based in Zürich, Switzerland. Where the EU/EEA GDPR applies to you, we act as the controller of the data described here.

2. Information we collect

• Requests you send us. The early-access form stores the name, work email, company, product interest and message you enter in our database.
• Account data. If you sign in with Google, Google passes your name, email address and profile photo. Access is invitation-only, so we also keep the approval record (for example an approved network address) that decides whether sign-in is offered to you.
• Platform content. When you use the platform, we store your workspaces, conversations, task plans, step results, approvals, usage and cost records so work can be resumed, audited and reviewed.
• Technical data. Server logs record request metadata such as IP address, country code, user agent and timestamps, used for security, abuse prevention and enforcing regional availability.

3. How we use it

To reply to your request and explore a pilot, to authenticate approved users, to run and display your tasks, to keep the service secure, and to meet our legal obligations. We do not send marketing emails or newsletters, and we do not sell or rent personal data.

4. What we do not do

This website loads no advertising trackers, marketing pixels or analytics cookies. The only third-party requests your browser makes on the landing page are for web fonts served by Google Fonts, and for Google sign-in if you choose to use it. Sign-in sessions are kept in your own browser’s local storage and are cleared when you sign out or clear site data.

5. Services that process your work

Our website and platform data are hosted with managed cloud services that process data on our behalf under confidentiality obligations. When you run a task, the content of that task is sent to the AI model providers configured for your workspace and to the external services you connect (for example GitHub). Those providers’ own terms and privacy policies apply to the data they receive.

6. Regional availability

The website is not offered from Russia, Belarus, Iran, Iraq or North Korea. Requests arriving from those regions receive HTTP status 451 (unavailable for legal reasons) and no content beyond that notice.

7. How long we keep data

Early-access requests are kept until you ask us to delete them. Account and approval records are kept while your account remains approved and for a short period afterwards for audit purposes. Platform content is kept while your workspace exists.

8. Your rights

You can request access to your personal data, correction of inaccurate data, deletion, restriction of processing, a copy of your data, or withdrawal of consent. Under Swiss law (revFADP) and, where applicable, the GDPR, you also have the right to complain to a supervisory authority.

To make a request, open the early-access form on the homepage, enter your email address and describe what you would like us to do (for example “privacy request: delete my details”). We will verify that the request comes from the account holder before acting.

9. Security

Data is transmitted over HTTPS and stored in databases with access controls. Platform conversations are encrypted at rest, external actions require explicit permissions, and approval-gated steps cannot run without a recorded decision. No method of transmission or storage is perfectly secure; tell us promptly if you believe an account is compromised.

10. Changes to this policy

We may update this policy as the product changes. The effective date at the top of this page shows when it was last revised; material changes will be noted here.

11. Contact

Questions about this policy, or any privacy request, can be sent through the early-access form at immersionlab.tech/#early-access.