Privacy Policy

How Saimek Collects, Uses, and Protects Your Information

We set the bar. Your data is yours.

Saimek, LLC — A Washington Limited Liability Company

Effective Date: 06/29/2026

Last Updated: 06/29/2026

Saimek, LLC ("Saimek," "we," "us," or "our") is committed to protecting the privacy of individuals and organizations that interact with our AI tools, software products, websites, and services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights with respect to it.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our Services.

1. Scope

This Policy applies to:

• Visitors to Saimek's website(s) and online properties;
• Current and prospective clients and their authorized representatives;
• Authorized users of Saimek's licensed software and AI products;
• Individuals whose data is processed by Saimek's Services on behalf of a client ("End Users").

Where Saimek processes personal data on behalf of a client under a Data Processing Agreement ("DPA"), the client's privacy policy governs the processing of End User data. Saimek acts as a data processor in those circumstances and is bound by the DPA's terms.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you contact us for business inquiries (name, company, email, phone, message); execute agreements with us (legal name, address, billing information); create an account or register for our Services; or communicate with us by any means.

2.2 Information Collected Through Your Use of the Services

When you use our Services, we may automatically collect usage logs (features accessed, queries submitted, timestamps, error logs); technical information (IP address, browser type, operating system, device identifiers); API interaction metadata (request parameters, performance metrics); and session data.

2.3 Client-Provided Data

Clients may provide us with data — including personal information about their employees, customers, or end users — for the purpose of configuring, testing, or operating our AI Services ("Client Data"). We process Client Data as a data processor under the client's instructions and our DPA. We do not use Client Data for our own purposes beyond delivering the contracted Services.

2.4 Information We Do Not Collect

Saimek does not intentionally collect sensitive personal information such as Social Security numbers, government ID numbers, payment card data (handled by our third-party payment processor), or biometric data, unless specifically required by a contracted service and disclosed at collection. Our Services are not directed at children under 13, and we do not knowingly collect their data.

3. How We Use Information

We use information we collect only for the following purposes:

• Service Delivery: to provide, operate, maintain, and improve our AI tools and software;
• Client Relationship Management: to communicate about accounts, agreements, deliverables, invoices, and support;
• Security & Fraud Prevention: to detect, investigate, and prevent unauthorized access or misuse;
• Legal Compliance: to comply with applicable laws, regulations, and enforceable governmental requests;
• Business Operations: for internal administrative and financial purposes.

We will not use your personal information for any purpose materially different from those described here without prior notice and, where required by law, your consent.

4. What We Will Never Do With Your Data

These are absolute prohibitions. No exceptions without your explicit written consent.

• We will never sell your data to any third party, for any price, under any circumstances.
• We will never rent, broker, trade, or license your data to third parties for their commercial benefit.
• We will never harvest or aggregate your data to build profiles or datasets for sale or distribution.
• We will never use your data to train, fine-tune, evaluate, or benchmark any AI model — ours or anyone else's — without your explicit prior written consent specifying the scope, purpose, and safeguards.
• We will never share your data with advertisers or ad-tech platforms.
• We will never use your data to build inferences about you for purposes unrelated to the services you contracted for.

Consent, if ever sought for any of the above, must be specific, informed, freely given, and in writing. You may revoke consent at any time on thirty (30) days written notice.

5. AI-Specific Data Practices

5.1 Inputs & Outputs

Data submitted to our AI Services as inputs may be temporarily processed to generate outputs. We retain input and output data only as necessary to deliver the service, maintain security logs, and fulfill contractual obligations. Retention periods are specified in your Order Form or DPA.

5.2 No Training on Client Data Without Consent

We do not — under any circumstances — use Client Data or End User inputs to train, fine-tune, or improve our AI models without the explicit prior written consent of the applicable client. This applies to all Saimek AI systems.

5.3 Aggregated & De-Identified Data

We may use aggregated or de-identified data that cannot reasonably be used to identify any individual or client for internal analytics and product development. Such data is not personal information and is not subject to the sale/harvesting prohibitions above. We apply rigorous de-identification standards before any aggregated use.

5.4 AI Output Accuracy

AI-generated outputs are not infallible. Users are responsible for reviewing and validating outputs before reliance. We communicate known accuracy limitations in our product documentation.

6. Information Sharing & Disclosure

We do not sell or rent personal information. We share information only in the following limited circumstances:

• Service Providers: with trusted vendors who assist in operating our business (cloud hosting, payment processing), under strict confidentiality obligations, processing only on our instructions;
• Business Transfers: in connection with a merger, acquisition, or sale of assets, where personal information may transfer as a business asset, subject to the same protections as this Policy;
• Legal Requirements: when required by law, court order, or government request, or to protect rights, prevent fraud, or protect safety. We will notify you of such requests to the extent legally permitted;
• With Your Consent: in any other circumstance only with your explicit written consent.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Client Data retention periods are governed by the applicable DPA and Order Form. Upon termination of a client relationship, Client Data is returned or deleted within thirty (30) days and certified in writing.

8. Data Security

We implement and maintain industry-leading technical and organizational measures to protect personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256 or equivalent);
• Role-based access controls and multi-factor authentication;
• Continuous security monitoring and logging;
• Documented incident response procedures;
• Regular security assessments and vulnerability management.

In the event of a data breach affecting your personal information, we will notify affected parties within forty-eight (48) hours of discovery, as required by applicable law.

9. Cookies & Tracking

Our website(s) may use cookies for session management, user preferences, and privacy-respecting analytics. We do not use cookies for cross-site behavioral advertising or third-party tracking. You may configure your browser to decline cookies; doing so may affect some functionality. We honor Do Not Track signals where technically feasible.

10. Your Privacy Rights

Depending on your location and applicable law, you may have the right to: access a copy of your personal information; correct inaccurate or incomplete data; request deletion of your data; object to or restrict certain processing; receive your data in a portable format; and withdraw consent for any processing based on consent. To exercise these rights, contact us as described in Section 13. We will respond within the timeframes required by applicable law.

11. Washington State Privacy

Washington residents may have additional rights under the Washington My Health My Data Act and other applicable state law. We honor all Washington privacy rights and will respond to requests within the timeframes required by Washington law.

12. Third-Party Links

Our Services may contain links to third-party websites. This Policy does not apply to those sites. We are not responsible for their privacy practices and encourage you to review their policies.

13. Contact Us

For privacy questions, rights requests, or concerns about our data practices:

Company

Saimek, LLC

Attention

Privacy

Email

privacy@saimek.ai

Mailing Address

522 W Riverside Ave Suite N, Spokane, WA 99201, United States

Response Time

Within 5 business days for general inquiries; within statutory deadlines for rights requests

14. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable law. We will post updates with a revised "Last Updated" date. For material changes, we will provide at least thirty (30) days advance notice to active clients by email or prominent website notice. Continued use of our Services after the effective date of a material change constitutes acceptance of the updated Policy.