This policy covers enjamblabs.com and the records Enjamb Labs receives under a data licence. It is written to be read; the signed licence and any Business Associate Agreement take precedence where they differ.
1. Scope
This Privacy Policy describes how Enjamb Labs, Inc. ("Enjamb Labs", "we") handles personal information in two settings: information collected through enjamblabs.com, including the intake form, and information contained in business records we receive from a licensor under a data licence. The Enjamb platform at enjamb.ai has its own privacy policy; this document does not apply to it.
2. Information collected through this website
When you submit the intake form we receive what you enter: your name, email address, phone number, role, company, website, industry, headcount, years of records, company status, the software the business runs, your access to it, and any notes. We use it to assess fit, to contact you about a possible licence, and to keep a record of the enquiry. We do not sell it, and we do not use it for advertising.
The site uses Vercel Web Analytics, which records page views in aggregate without cookies and without identifying individual visitors. Booking links go to Cal.com, whose own privacy policy applies once you are on their page.
Intake submissions are retained for as long as the enquiry is open and for up to twenty-four months afterwards, unless a licence follows, in which case they are kept with the licence records.
3. Records received under a data licence
Under a data licence a business (the licensor) provides us with an export of its operational records, which may contain personal information about the licensor's staff, clients, patients, policyholders, vendors and other people. We act as an independent business in respect of that information, and where the records contain protected health information we act under a Business Associate Agreement with the covered entity.
We use licensed records for one purpose: to produce de-identified datasets, environments and evaluations for training and evaluating AI models, and to deliver those to licensees under terms that prohibit re-identification, resale and redistribution. We do not use licensed records to market to, contact or profile any person named in them.
- Storage: raw records are stored only in United States cloud regions, encrypted at rest and in transit, in systems dedicated to the data programme.
- Access: limited to a small named group under least privilege, with every access logged.
- De-identification: before any record leaves our systems, direct identifiers are removed or replaced with consistent surrogates, dates are shifted, rare values are generalized, and the result is tested against a k-anonymity threshold and a re-identification review. Health information is de-identified under the HIPAA Expert Determination method.
- Exclusions: categories of records the licensor excludes are enforced by hash before ingestion. Payment card data, bank details and credentials are excluded from every licence.
- Retention: raw records are retained for the term of the licence and for as long as needed to support deliveries, then deleted under the schedule in the licence. De-identified deliveries are retained by licensees under their own agreements.
5. Your choices and rights
If you submitted an intake, you can ask us to correct or delete it at any time by writing to privacy@enjamblabs.com. If you believe your information is contained in records licensed to us, write to the same address: we will confirm whether a licensor has identified you as a data subject and, where the law gives you rights over that information, work with the licensor to honour them. Because de-identified deliveries do not contain identifiers, we cannot locate an individual in a delivered dataset.
Residents of California and other states with comprehensive privacy laws have rights to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell personal information as those laws define it. Requests can be made to privacy@enjamblabs.com and are answered within the period the applicable law requires.
6. Security
Controls are described on the Security page. To report a concern write to security@enjamblabs.com.
7. Changes and contact
We update this policy when our practices change and note the date above. Questions go to privacy@enjamblabs.com or to Enjamb Labs, Inc., San Francisco, California.