Privacy Policy

This policy applies to information collected by P3 Labs when:

• You browse p3labs.ai or any P3 Labs marketing site.
• You contact us through a form, email, phone call, or scheduled meeting.
• You apply to work at P3 Labs.
• You interact with a P3 Labs digital human that we operate as a processor on behalf of a customer (a museum, retailer, healthcare organization, hospitality property, etc.).

Where we operate a digital human on behalf of a customer, that customer is the data controller and their privacy notice governs the experience. Our role is limited to processing data under their instructions and the data processing terms in our agreement with them.

Information you provide directly

• Contact details (name, organization, email, phone) when you submit a form, request a meeting, or email us.
• Account information when you create a P3 Labs admin account, including authentication identifiers from your single sign-on provider.
• Billing and tax information for paying customers.
• Application materials if you apply for a role.

Information collected automatically

• Standard server logs (IP address, user agent, timestamps, referring URL, pages requested).
• Cookies and similar technologies used to keep you signed in, remember preferences, and measure traffic. See Section 7.

Conversation data captured by digital humans

When you talk with a P3 Labs digital human, the conversation may be recorded and transcribed for the customer who deployed it. The customer determines what is captured, how long it is retained, and what is done with it. Where applicable, signage, audio prompts, or on-screen notices disclose the recording at the point of capture, and visitor-initiated opt-out paths are made available. P3 Labs does not use customer conversation data to train P3 Labs models or sell it to third parties.

We use the information described above to:

• Provide, maintain, and improve the P3 Labs platform and customer experiences.
• Respond to inquiries, schedule meetings, and provide customer support.
• Process payments and manage customer accounts.
• Send transactional messages and, with your consent, occasional product or company updates.
• Protect the platform against fraud, abuse, and security incidents.
• Comply with legal obligations, enforce our agreements, and exercise or defend legal claims.

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising.

P3 Labs offers two deployment models:

Edge deployment. The digital human runs on local hardware at the customer's site. Conversations, including any audio, transcripts, and intermediate inference data, remain on the customer's premises by default. P3 Labs may receive metadata required to operate, monitor, and support the system, but the conversation content itself does not leave the customer's environment unless the customer explicitly enables cloud features.

Cloud deployment. Some web-based digital human experiences run in our cloud environment hosted by enterprise-grade infrastructure providers. Conversation content is processed in the configured region. Customers can elect a data residency configuration consistent with their compliance requirements.

We rely on a limited set of vendors to operate the platform. These sub-processors are bound by written agreements that require appropriate safeguards and limit their use of data to providing services to P3 Labs.

Categories include cloud infrastructure, edge hardware partners, AI model providers (for cloud deployments), analytics and observability tools, communication and CRM tools, payment processing, and identity providers.

The current sub-processor list is provided to customers as part of the data processing addendum and updated at least 30 days before any material change for in-scope production deployments.

We may also share information with third parties when required by law, to enforce our agreements, to protect rights, property, or safety, or in connection with a merger, acquisition, or sale of assets.

We use a small number of cookies on p3labs.ai to keep you signed in (when applicable), remember UI preferences, and understand aggregate traffic patterns. We do not use advertising cookies on the marketing site. You can disable non-essential cookies in your browser; some features may not work as expected if you do.

• Marketing-site contact data: retained for the duration of an active sales conversation plus a reasonable follow-up window, then deleted or archived.
• Customer account and billing records: retained for the term of the agreement plus any period required by applicable tax, accounting, or audit obligations.
• Server and security logs: retained for an operational window consistent with industry practice (typically 30 to 180 days for general logs, longer for security-relevant events).
• Conversation data captured by a digital human: retention is configured by the customer who deployed the digital human, in line with their own policies, vertical compliance requirements, and visitor consent.
• Job applicant data: retained for a reasonable period after the relevant hiring decision, unless a longer period is required by law.

Depending on where you live, you may have rights to access, correct, delete, or port the personal information we hold about you, to object to certain uses, or to withdraw consent. You can exercise these rights by emailing privacy@p3labs.ai. We will respond within the timeframes required by applicable law.

If you are interacting with a digital human deployed by one of our customers, please direct rights requests to that customer in the first instance. We will support them in responding to your request.

Residents of California, the EU, the UK, and other jurisdictions with comprehensive privacy laws have additional rights under those laws. Where required, we treat any individual exercising a right under one of those laws no less favorably than any other individual.

p3labs.ai is not directed to children under 13, and we do not knowingly collect personal information from children through this site.

In deployment contexts where minors interact with a digital human — for example in K-12, museum education, or pediatric care — we follow vertical-specific requirements (FERPA, age-appropriate design, and similar) and operate strictly on the customer's instructions. Likeness and recording disclosures are tailored to the audience and signed off by the customer before launch.

We use administrative, technical, and physical safeguards designed to protect the information we hold, including encryption in transit and at rest, role-based access controls, multi-factor authentication for administrators, audit logging, and routine security testing performed against industry-standard frameworks.

No system can be made perfectly secure. We commit to handling any security incident that materially affects customer data in line with applicable law and our contractual obligations, including timely notification to affected customers.

P3 Labs is based in California. If you are located outside the United States, information about you may be transferred to and processed in the United States or in other jurisdictions where our sub-processors operate. Where required by applicable law (for example, for transfers from the EU, UK, or Switzerland), we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will provide more prominent notice — for example, by email to active customers or a banner on p3labs.ai — before the changes take effect.

Questions, requests, or concerns about this Privacy Policy or our handling of personal information:

P3 Labs, Inc. Orange County, California, USA privacy@p3labs.ai