1. Who is responsible for IDWorthy

IDWorthy is a product and service operated by AT Worthy Technology, Inc. ("AT Worthy," "we," "us," or "our"). AT Worthy Technology, Inc. is responsible for the processing of personal information described in this Privacy Policy.

This Privacy Policy applies to the IDWorthy website at idworthy.com, the IDWorthy resolver, the IDWorthy platform and related APIs, and communications that refer to this Privacy Policy (collectively, the "Services"). It does not apply to third-party websites, systems, or services that link to or integrate with the Services and maintain their own privacy notices.

For privacy questions or requests, contact us at privacy@idworthy.com.

2. The purpose and limits of IDWorthy

IDWorthy provides persistent operational identity and evidence-backed lifecycle records for physical entities, beginning with robots. It is designed to link a robot's identity to appropriately scoped information about its configuration, lifecycle, accountable organizations, assertions, and supporting evidence.

IDWorthy is not a robot-control, fleet-control, teleoperation, remote-assistance, inference-operations, real-time telemetry, simulation, or raw training-data platform. We do not ask customers to upload raw camera feeds, sensor streams, telemetry, or training datasets to IDWorthy as part of its intended service. Where appropriate, the Services may retain a reference, summary, hash, access condition, or other metadata about an external record rather than the underlying material.

3. Information we collect

The information we collect depends on how you use the Services and the permissions available to you.

Information you provide

We may collect:

  • account and business contact information, such as name, work email address, telephone number, organization, role, login credentials, and authentication information;
  • support, pilot-program, sales, correction, dispute, or other communications and the information you include in them;
  • information needed to administer a customer relationship, including authorized-user roles, organizational affiliations, contractual contacts, and billing or transaction records where applicable;
  • information submitted to an IDWorthy record, such as robot, manufacturer, model, serial, external-identifier, configuration, lifecycle, organization-relationship, assertion, stewardship, and evidence metadata; and
  • files or evidence that an authorized user elects to submit. Customers and users must not submit personal information unless it is necessary for the relevant purpose and they have a lawful basis and authority to do so.

Information collected automatically

When you use the Services, we and our service providers may collect technical and usage information, including IP address, browser and device information, pages or resolver records requested, referring URLs, timestamps, authentication events, error information, and security and audit logs. We use this information to operate, secure, troubleshoot, prevent misuse of, and improve the Services.

Information from customers and other authorized sources

Customers, record stewards, manufacturers, operators, maintainers, integrators, and other authorized contributors may provide information about organizations or individuals acting in professional roles. We may also receive information from public sources or connected systems where a customer has enabled an integration or instructed us to process it.

4. How we use information

We use personal information to:

  • provide, administer, authenticate, and support the Services;
  • create and maintain user accounts, access controls, and audit trails;
  • operate the IDWorthy identifier, resolver, record-stewardship, correction, evidence, export, and API functions;
  • respond to inquiries, provide customer support, and communicate about the Services;
  • protect the security, integrity, availability, and lawful use of the Services;
  • investigate fraud, abuse, security incidents, disputes, and violations of applicable terms or law;
  • comply with legal obligations and enforce our agreements; and
  • improve, test, and develop the Services using aggregated, de-identified, or otherwise appropriately protected information where feasible.

We do not use information in an IDWorthy operational record to train general-purpose AI models.

5. Public resolver and publication controls

An IDWorthy identifier may resolve through a durable public URL, including after a robot is retired, archived, merged, split, disputed, or otherwise no longer active. That resolver is not a public directory of all record information.

Public resolver responses are designed for minimum disclosure. They may display a limited identifier, controlled status or disposition, and other information deliberately designated for public release. They must not disclose sensitive operational, security, commercially confidential, personal, precise-location, credential, or restricted evidence information by default.

Authorized customer users determine, subject to applicable agreements and law, what information they submit and which permitted publication profile applies. AT Worthy may restrict, remove, or decline publication where necessary to protect people, security, privacy, confidentiality, the integrity of the Service, or legal rights.

6. How we share information

We may share personal information only as needed for the purposes described in this Policy:

  • with the customer or organization that administers your access to the Services, and with users authorized by that customer;
  • with record stewards, contributors, verifiers, or other parties authorized to access the relevant IDWorthy record under its access classification and authority scope;
  • with service providers that process information for us under contractual confidentiality and security obligations, such as hosting, storage, security, authentication, communications, and professional service providers;
  • when required by law, legal process, or a valid governmental request, or when we reasonably believe disclosure is necessary to protect rights, safety, security, or the integrity of the Services;
  • in connection with a corporate transaction, such as a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to applicable law; and
  • with your direction or consent.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws.

7. Cookies and similar technologies

We use strictly necessary cookies and similar technologies to keep the website and platform functioning, maintain security, remember essential settings, and support authentication. We may also use limited measurement tools to understand aggregate service performance and usage.

Where law requires consent for non-essential cookies or similar technologies, we will request it before setting them. You may control cookies through your browser settings, although disabling essential cookies may prevent parts of the Services from working.

8. Retention and record continuity

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, meet legal, accounting, security, and contractual obligations, resolve disputes, and enforce agreements.

IDWorthy is designed for long-lived record continuity. A robot's permanent identifier and a limited, access-controlled history of material record decisions may remain available after retirement, customer-account closure, or the end of a subscription. We retain this information only to the extent necessary to preserve identifier integrity, resolver continuity, auditability, correction history, and applicable legal obligations. We apply data minimization and, where appropriate, delete, anonymize, aggregate, or restrict access to personal information that is no longer needed.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, alteration, and disclosure. These include role-based access controls, authentication controls, encryption in transit where supported, access logging, and measures intended to protect submitted evidence.

No security measure is absolute. Please use strong, unique credentials, protect your accounts, and notify us promptly of any suspected unauthorized access.

10. Your privacy choices and rights

Depending on your location and the applicable law, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal information; to object to certain processing; or to withdraw consent where processing is based on consent.

To make a request, email privacy@idworthy.com with enough information for us to verify your identity and understand your request. If you use the Services through an organization, we may direct you to that organization where it controls the relevant information. We may retain limited information where necessary for security, fraud prevention, legal obligations, dispute resolution, record integrity, or other lawful purposes.

You may also have the right to appeal a decision concerning a privacy request. To appeal, reply to our decision at the same email address and state the basis for your appeal. If you are in the European Economic Area, United Kingdom, or another jurisdiction with a supervisory authority, you may also have the right to lodge a complaint with the competent authority.

11. International processing

AT Worthy Technology, Inc. is based in the United States. Information may be processed in the United States and in other countries where we or our service providers operate. Those countries may have data-protection laws that differ from the laws of your location. Where required, we will use appropriate safeguards for international transfers of personal information.

12. Children's privacy

The Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, or applicable law. When we do, we will post the updated version and revise the "Last updated" date. If a change is material, we will provide additional notice where required by law.

14. Contact

AT Worthy Technology, Inc.
IDWorthy Privacy Team
Email: privacy@idworthy.com