Privacy notice

Epistemic Labs Inc. (“we”, “us”) is an applied AI lab. Our data opportunities service helps established businesses license proprietary datasets to AI companies. This notice describes information collected through our website and delivered to our team by email.

Dataset diligence takes place separately. An NDA or engagement agreement may set additional terms for that process; it does not remove rights or obligations under applicable privacy law.

• Valuation answers. Industry, company size bands, region, data sources and types, approximate volume, history, structure, update frequency, decision and outcome links, AI signals, distinctiveness, origin, third-party interests, personal information, confidentiality, and proposed uses. Your preliminary result is calculated in your browser. Viewing it does not send your answers to our team. If you request the full assessment, the answers, contact details, a browser-generated reference, and a recalculated result are delivered by email.
• Contact and qualification details. Your name, work email, company, optional website, role, phone, and message. Qualification requests also include industry, source systems, data types, approximate volume, description, timing, and whether you request an NDA.
• Buyer requirements. Organization, contact details, organization type, data types, domains, task description, volume, label and outcome requirements, AI signals, regions, permitted uses, exclusivity, timing, and budget band.
• Attribution. First and latest visit records can include campaign (UTM) source, medium, campaign, term and content labels, an external referrer host, landing path, and timestamp. These stay in your browser until included with a form submission. We limit their size and discard labels that appear to contain personal identifiers.
• Abuse prevention. Cloudflare processes IP addresses for rate limiting. When Turnstile is enabled, Cloudflare also processes browser signals and a verification token; our Worker sends the token and reported IP address to Cloudflare for verification. Forms include timing and a hidden spam-check field. These verification fields and IP addresses are excluded from notification emails.

Please submit dataset descriptions only. Do not submit records, other people’s personal information, or confidential material.

• Attribution storage. We use your browser’s local storage, under el.attribution, for attribution. Records older than 90 days are discarded when read. Blocking storage does not prevent submission.
• Valuation session storage. In-progress answers, navigation, timing, the latest result, and the factor breakdown stay in session storage so a refresh can restore progress. Starting over clears this state.
• Analytics, if enabled. Plausible loads only when configured. It counts page views and events such as CTA clicks, valuation steps, score bands, and request categories. Our event code sends categories, never names, email addresses, or message text. Browser requests to Plausible are subject to its data policy.
• Cloudflare Web Analytics. Our host, Cloudflare, measures aggregate page views and performance without cookies or cross-site tracking. See Cloudflare Web Analytics.
• Turnstile, if enabled. Verification processes technical browser signals and IP addresses through Cloudflare. See Cloudflare’s privacy policy.

Our site code does not set attribution or sign-in cookies and has no advertising integration. You can clear or block local and session storage in your browser. This may affect attribution or saved valuation progress.

• To display a preliminary valuation and review submitted answers and their factor breakdown.
• To respond to seller inquiries, buyer requirements, calls, and NDA requests.
• To understand which channels bring visitors, using submitted attribution and optional aggregate analytics.
• To protect the site and forms from spam and abuse.
• To keep a record of correspondence in our team inboxes.

Submitting contact details does not establish permission to license the dataset you describe.

The site is hosted by Cloudflare. Forms are processed by a Cloudflare Worker and delivered through Cloudflare email services to our team inboxes. Each notification includes the submitted business fields, available attribution, and, for valuations, the reference and recalculated assessment. Mail addressed to our contact address is also forwarded through Cloudflare to our team inboxes. Cloudflare and the team’s email providers process this correspondence. The website has no application database, admin dashboard, or automated buyer matching.

• Prospective counterparties. Forms do not automatically send submissions to buyers or sellers. Before an introduction, agree with us what identifying details and materials may be shared.
• Optional integrations. Plausible and Turnstile receive the information described above when enabled. A booking link may appear after a valuation submission if configured; information you submit to that scheduling service is governed by its privacy policy.

We do not sell website submissions or send them to advertising services.

Submitted requests and valuations are retained as email in the team inboxes, including replies and any copies maintained by the email providers. The website has no automatic deletion schedule for those emails. Contact hello@epistemiclabs.xyz to request deletion; applicable law may require retention of some correspondence. Clearing browser storage does not delete emails already delivered to the team.

Browser attribution is discarded after 90 days when read. Valuation session state remains until you start over or your browser clears it. Cloudflare rate-limit counters use a 60-second window; provider logs and other technical records follow the providers’ own retention arrangements. Optional analytics and scheduling services also follow their own retention policies.

Forms use origin checks, size limits, rate limiting, spam checks, and optional Turnstile verification. Worker code logs error codes rather than submission contents. Requests travel over HTTPS in production and are delivered to team inboxes for review. The forms have no dataset upload field. No system is perfectly secure.

Cloudflare, email, analytics, and scheduling providers may process information outside your country. Contact hello@epistemiclabs.xyz for details about the providers and transfer arrangements relevant to your request.

Depending on where you live, you may have rights to access, correct, delete, receive a portable copy of, object to, or restrict the use of your information; withdraw consent where we rely on it; or appeal a response to your request. Withdrawal does not affect earlier use.

Email hello@epistemiclabs.xyz to exercise a right. We may need to verify your identity, and applicable exceptions may apply. Applicable law may set response deadlines and prohibit discrimination for exercising privacy rights. You may also have a right to complain to a data protection authority.

This site is for business representatives. Children should not submit information. Contact hello@epistemiclabs.xyz if you believe a child has submitted personal information.

We update this notice and its date when our practices change. Where appropriate, we will tell you directly about material changes. Questions can be sent to hello@epistemiclabs.xyz. Our terms of use explain the rules for using the site.