Privacy Policy.
How LemuriaAI collects, uses, and protects the information you share with us — and the rights you have over your data.
1. Who we are
LemuriaAI ("LemuriaAI", "we", "us", or "our") is an engineering firm building AI-enabled embedded systems, robotics, and intelligent products. This Privacy Policy explains how we handle personal information when you visit our website, contact us through it, or otherwise interact with us in relation to our services.
For the purposes of the EU and UK General Data Protection Regulation ("GDPR" / "UK GDPR"), LemuriaAI is the data controller of personal information collected through this website. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are a data fiduciary. If you are a resident of California, we are a "business" as defined by the California Consumer Privacy Act ("CCPA/CPRA").
2. Information we collect
We keep data collection deliberately minimal. The information we collect falls into three categories:
2.1 Information you provide via our contact form
When you submit an enquiry through the contact form on our website, we collect: your name, email address, company name (optional), the topic you selected, and the message you write. We do not require any additional personal information to reply to your enquiry.
2.2 Information you provide by direct email
If you email us directly at info@lemuria-ai.com, we receive whatever information is in that email — typically your email address and the content of your message.
2.3 Automatically collected information
Our website is hosted on Amazon Web Services (AWS). AWS records standard server logs for every request — the visitor's IP address, the time of the request, the page or file requested, the browser user-agent string, and the referring URL. We use this information only for security, performance monitoring, and infrastructure debugging.
We do not currently use website analytics services (such as Google Analytics), advertising cookies, or third-party tracking scripts. If we introduce any of these in the future, we will update this Privacy Policy and require your explicit consent before setting non-essential cookies.
3. How we use your information
We use the information we collect for the following purposes only:
- To reply to your enquiry and continue any conversation you begin with us.
- To route your enquiry to the person on our team best able to help.
- To keep basic records of business correspondence, for as long as reasonably necessary.
- To maintain the security, integrity, and performance of our website.
- To comply with applicable laws and lawful requests from regulators or courts.
We do not sell, rent, or trade your personal information. We do not use it for advertising, marketing profiling, or automated decision-making that produces legal effects.
4. Legal bases (GDPR / UK GDPR)
Where the GDPR applies to you, our lawful bases for processing your personal information are:
- Consent — when you voluntarily submit our contact form or email us with an enquiry.
- Legitimate interests — for basic server logs used to operate and secure the website, and for follow-up correspondence in the ordinary course of business.
- Legal obligation — where processing is necessary to comply with a legal requirement.
5. Cookies and similar technologies
Our website currently uses only a small amount of essential browser storage — specifically, the localStorage value we set when you dismiss our cookie notice, so we don't show it to you again on every visit. That storage does not track you and is not shared with anyone.
We do not currently use any advertising cookies, analytics cookies, or third-party tracking technologies. If we introduce analytics or advertising cookies in the future, we will update this Privacy Policy and will not set any non-essential cookies until you have given us your consent through a cookie banner.
6. Who we share your information with
We keep your information tightly controlled. We share personal information only with:
6.1 Service providers acting on our instructions
We use Amazon Web Services (AWS) to host our website. AWS processes server logs and hosts static content on our behalf, under standard contractual data protection terms. AWS does not use your data for its own purposes.
We may from time to time use other reputable service providers (for example, email delivery services or contact-form processing services) subject to appropriate written data-protection terms. Any future third-party services will be listed in an updated version of this Privacy Policy.
6.2 Legal and regulatory disclosures
We may disclose personal information where required by law, court order, or lawful government request, or to protect the rights, property, or safety of LemuriaAI, our clients, or others.
6.3 Corporate transactions
If LemuriaAI is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will require any recipient to provide the same or greater level of protection.
7. International data transfers
Our website hosting is provided by AWS, which may store or process data in AWS regions outside your country of residence, including in the United States. Where such transfers involve personal information originating in the EU, UK, or India, we rely on the applicable standard contractual clauses (SCCs) or equivalent safeguards to ensure your data remains protected in accordance with the origin jurisdiction's requirements.
8. How long we keep your information
We retain personal information only for as long as we need it for the purposes described above.
- Contact-form and email enquiries — retained for up to three (3) years from your last interaction with us, unless you ask us to delete them sooner.
- Server logs — retained for up to ninety (90) days, then deleted.
- Records required by law (for example, tax records) — retained for the period required by the relevant law.
9. How we protect your information
We use commercially reasonable technical and organisational measures to protect personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encrypted transport (HTTPS), access controls, hosting within Amazon Web Services' managed security perimeter, and internal policies restricting who on our team can access personal data.
No system is perfectly secure, and no online transmission is completely guaranteed. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.
10. Your rights
Depending on where you reside, you have some or all of the following rights over your personal information:
- Access — the right to know what personal information we hold about you and to receive a copy.
- Correction — the right to ask us to correct information that is inaccurate or incomplete.
- Erasure ("right to be forgotten") — the right to ask us to delete information about you.
- Restriction and objection — the right to ask us to pause or limit our use of your information, or object to certain uses.
- Portability — the right to receive information you provided to us in a structured, machine-readable format.
- Withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Complaint to a regulator — if you believe we have not handled your personal information properly, you can complain to the Data Protection Board of India, your local EU data protection authority, the UK Information Commissioner's Office, or another relevant regulator.
California residents additionally have the right to know what categories of personal information we collect and to request deletion, as set out in the CCPA/CPRA. We do not sell personal information and do not "share" it as those terms are defined in California law.
11. How to exercise your rights
To exercise any of the rights described above, or if you have any questions about this Privacy Policy, please contact us at privacy@lemuria-ai.com. We will respond within thirty (30) days, or sooner where required by law. We may ask you to verify your identity before we act on a request, to protect against unauthorised requests made in your name.
12. Grievance and data protection contact (India)
In accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and India's Digital Personal Data Protection Act, 2023, all grievances and data-protection queries should be addressed to:
LemuriaAI — Data Protection Contact
Email: privacy@lemuria-ai.com
If your concern is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India in accordance with the DPDP Act.
13. Children's privacy
Our website is intended for a professional business audience. It is not directed at children under the age of eighteen (18), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at privacy@lemuria-ai.com and we will take reasonable steps to delete it.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time — for example, if we introduce new services, adopt new technologies, or comply with new legal requirements. When we do, we will update the "Last updated" date at the bottom of this page, and where the change is material, we will provide additional notice (for example, a notice on the site or an email to people who have contacted us).
We encourage you to review this Privacy Policy periodically. Your continued use of our website after changes take effect constitutes your acceptance of the updated Policy.
15. How to contact us
For any questions about this Privacy Policy or the way we handle personal information, please contact us at:
LemuriaAI
Privacy queries: privacy@lemuria-ai.com
General enquiries: info@lemuria-ai.com
Last updated: July 15, 2026