Privacy

This Privacy Notice doesn’t apply to design data, such as RTL, testbenches, logs, waveforms and verification results, that customers process with Tapeout software deployed in their own environments. That data remains under the customer’s control and is governed by our written agreement with that customer. See our Security page for how deployments handle it.

This Privacy Notice also doesn’t address data that isn’t subject to applicable data protection laws, such as deidentified or publicly available information. It isn’t a contract and doesn’t create legal rights or obligations beyond those provided by law.

The personal data we collect depends on how you interact with us. We collect the following categories of personal data that you provide to us directly.

• Contact information, such as your name, email address, phone number and communication preferences. We use it to respond to you, arrange meetings you request and communicate with you.
• Professional information, such as your job title, company, professional background and the nature of your relationship with us. We use it to understand your request, decide how best to work with you and provide our Services.
• Meeting information, such as the times you select and any notes you share when you schedule a conversation, demonstration or evaluation with us.
• Event information, such as details you share when you meet us at a conference or register for an event we host or attend.
• Communications and feedback, including the contents of emails and other messages you send us.
• Application information, such as your résumé, work history, education and links to your work, if you apply to join our team. We use it to evaluate your application and to contact you about roles.

When you visit our websites, we and our service providers automatically receive certain technical information, including your IP address, browser type and version, operating system, device type, the pages you request, the referring page, and the date and time of each request. We may derive your general location, such as your country or city, from your IP address.

We use this information to deliver and secure our websites, diagnose technical problems, prevent abuse and understand, in aggregate, how our websites are used.

Our websites store only what’s necessary to deliver and secure them, to remember your storage choice and, if you pick one, your preferred chip finish (Silicon or Copper). With your permission, they also keep copies of our images, video and 3D models in your browser so pages load quickly. These files are the same for every visitor and contain no personal data. You can accept or decline this when you first visit and change your choice at any time with Cookie settings at the bottom of every page. We don’t use analytics or advertising cookies, tracking pixels or cross‑site tracking technologies. If that changes, we’ll update this Privacy Notice and, where the law requires it, ask for your consent first.

We may receive personal data about you from other sources, including service providers that help us schedule meetings and communicate with you, event organizers, publicly available professional profiles, people who introduce or refer you to us, and parties to business transactions such as mergers and acquisitions.

In addition to the purposes described above, we use personal data to

• provide, operate, maintain and improve our Services;
• respond to inquiries and requests and communicate with you, including by email and phone;
• schedule and hold the meetings, demonstrations and evaluations you request;
• facilitate our relationship with you and, where applicable, the organization you represent;
• send you information about our products, services and events, in line with your preferences;
• recruit and evaluate candidates for employment;
• maintain the safety, security and integrity of our Services, systems and business;
• detect, prevent and investigate security incidents and fraudulent, malicious or illegal activity;
• defend, protect and enforce our rights, agreements and legal interests, and resolve disputes;
• facilitate business transactions and reorganizations;
• comply with legal, regulatory and contractual obligations; and
• fulfill any other purpose for which you provide personal data or otherwise give your consent.

We don’t use personal data collected through our websites to train machine learning models.

We disclose personal data only as described below.

• Service providers. Companies that host our websites, schedule meetings, deliver email and provide other services on our behalf. They may process personal data only as needed to perform those services and are bound by confidentiality and data protection obligations.
• Professional advisors, such as lawyers, accountants and auditors, who owe us duties of confidentiality.
• Business transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy or similar event, including during negotiations.
• Legal obligations and rights. To comply with law or legal process, respond to lawful requests from public authorities, establish or defend legal claims, enforce our agreements, and protect the rights, property and safety of Tapeout Labs, our customers and others.
• With your consent or at your direction.

We don’t sell personal data, and we don’t share personal data for targeted or cross‑context behavioral advertising.

You can opt out of marketing emails at any time by using the unsubscribe link in any such email or by contacting us. You’ll still receive messages about requests or meetings you’ve initiated.

You can turn local caching on or off with Cookie settings at the bottom of every page, or clear or block browser storage through your browser settings. Our websites continue to work either way, though pages may load more slowly.

We don’t engage in cross‑site tracking, so there is no tracking for browser “Do Not Track” or Global Privacy Control signals to switch off. We honor those signals to the extent applicable law requires.

We use administrative, technical and physical safeguards designed to protect personal data, including encryption in transit and access limited to personnel who need it. No method of transmission or storage is completely secure, and we can’t guarantee absolute security. Our Security page describes how our software protects customer data.

We keep personal data only as long as reasonably necessary for the purposes for which we collected it, in line with our legitimate business interests and applicable law. We may keep it longer where the law requires or where we need it to resolve disputes or protect our legal rights. Job application information is kept for up to two years so we can contact you about future roles, unless you ask us to delete it sooner.

To decide how long to keep personal data, we consider its amount, nature and sensitivity, the potential risk of harm from unauthorized use or disclosure, whether we can achieve our purposes by other means, and our legal, regulatory, tax and accounting obligations. When we no longer need personal data, we delete or deidentify it. Where that isn’t immediately possible, for example because it sits in backup archives, we store it securely and isolate it from further processing until deletion is possible.

Our Services aren’t directed to children under 16, and we don’t knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we’ll promptly delete it.

Our Services may link to or redirect you to third‑party websites and services, such as scheduling pages and conference sites. This Privacy Notice doesn’t apply to their practices. Please review their privacy notices to learn how they handle personal data.

We and our service providers may process personal data in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal data internationally, we rely on appropriate safeguards recognized under applicable law, such as adequacy decisions and standard contractual clauses. You can request more information about these safeguards by contacting us.

These disclosures supplement this Privacy Notice for residents of California.

Categories of personal data

In the past 12 months we have collected the following categories of personal data described in California law, from the sources and for the purposes described above.

• Identifiers, such as name, email address and IP address.
• Customer records, such as phone number and business contact details.
• Commercial information, such as the products or services you’ve expressed interest in.
• Internet or network activity, such as information about your device and how you use our websites.
• Geolocation data, limited to general location derived from your IP address.
• Professional or employment information, such as job title, company and, for applicants, work history.
• Education information, for applicants who share it.
• Other personal data you choose to send us in messages and requests.

We disclose each of these categories to the categories of recipients described in “How we disclose personal data.” We don’t sell personal data or share it for cross‑context behavioral advertising, and we have no actual knowledge of selling or sharing the personal data of anyone under 16.

Sensitive personal data

We don’t collect or process sensitive personal data for the purpose of inferring characteristics about you.

Deidentified information

Where we maintain deidentified information, we keep and use it only in deidentified form and don’t attempt to reidentify it, except as the law permits.

Your rights

Subject to certain exceptions, you have the following rights.

• Right to know the categories and specific pieces of personal data we’ve collected about you, the categories of sources, our purposes, and the categories of recipients to whom we’ve disclosed it.
• Right to access and portability, including a copy of your personal data in a portable, readily usable format.
• Right to correct inaccurate personal data.
• Right to delete personal data we hold about you.
• Right to non‑discrimination for exercising any of these rights.

Submitting requests

To exercise these rights, email legal@tapeoutlabs.com and describe your request. We’ll respond within 45 days. We’ll need to verify your identity before acting on certain requests, generally by matching information you provide with information we hold. You may use an authorized agent, who must provide a valid power of attorney or your signed written permission, and we may still ask you to verify your identity directly. If we decline your request, you may appeal by replying to our response.

Depending on where you live, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with comprehensive privacy laws, you may have rights to confirm whether we process your personal data, to access, correct, delete or obtain a copy of it, and to opt out of targeted advertising, sale or profiling. We don’t engage in targeted advertising, sale or profiling. To make a request, email us as described above. If we decline your request, you may appeal by replying to our response, and if the appeal is denied you may contact your state attorney general.

These disclosures supplement this Privacy Notice for individuals in the European Economic Area, the United Kingdom and Switzerland.

Controller

Tapeout Labs, Inc., a Delaware corporation, is the controller responsible for the processing of your personal data. You can contact us at legal@tapeoutlabs.com.

Legal bases

• Contract. Where processing is necessary to perform a contract with you or to take steps you request before entering one, such as arranging an evaluation.
• Legitimate interests. Where processing is necessary for our legitimate interests in operating, securing and improving our Services and communicating with you and the organization you represent, and those interests aren’t overridden by your rights.
• Legal obligation. Where processing is necessary to comply with the law.
• Consent. Where you’ve given consent, which you may withdraw at any time without affecting processing that took place before.

Your rights

Subject to limitations in the law, you have the right to access your personal data, to receive it in a portable format, to have it corrected or erased, to restrict or object to its processing, and to withdraw consent. We don’t make decisions about you based solely on automated processing, including profiling.

To exercise these rights, email legal@tapeoutlabs.com. We’ll respond within one month, and we may need to verify your identity first.

Complaints

You have the right to lodge a complaint with the data protection authority where you live or work or where an alleged infringement took place. We’d appreciate the chance to address your concern first, so please contact us directly. Contact details for the authorities are available from the European Data Protection Board, the UK Information Commissioner’s Office and the Swiss Federal Data Protection and Information Commissioner.

Transfers

When we transfer personal data outside the EEA, the UK or Switzerland, we rely on adequacy decisions or on standard contractual clauses approved under the EU GDPR, the UK GDPR or the Swiss Federal Act on Data Protection. Contact us for a copy of the relevant safeguards.

We may update this Privacy Notice from time to time. When we do, we’ll change the date at the top of this page. If we make material changes, we’ll give notice by posting prominently on our website or by other appropriate means.

Questions and requests about this Privacy Notice or our privacy practices go to legal@tapeoutlabs.com.