Jordan Valley AI Privacy Policy

This Privacy Policy explains how Abdalkreem Kasasbeh, operator of Jordan Valley AI and Calyx under the Jordan Valley AI brand (we, us, or our) collects, uses, shares, and protects personal information.

It covers jordanvalleyai.com, messages sent to us, the Calyx pilot application, and the Calyx pilot service. Contact us at [email protected].

1. Who the services are for

The Calyx pilot and its application are for adults acting for approved businesses in approved countries. Applicants, users, businesses, and proposed uses must not be subject to applicable sanctions, embargoes, or other restrictions that prohibit us from providing the pilot. Approved businesses in the European Union and the United Kingdom may participate when the applicable privacy and transfer safeguards are operational.

The Jordan Valley AI website may be viewed more broadly, but viewing the website does not make a person or business eligible for the Calyx pilot.

2. Information we collect

Website and contact information

When you visit the website, we and the services used to deliver and protect it may receive technical information such as IP address, browser or device details, requested pages, date and time, referring page, and security or service logs.

If you email us, we receive your email address, message, attachments, and related message information. Please do not email confidential designs, controlled information, regulated data, passwords, or secrets unless we have agreed on an approved secure method.

Pilot application information

When you apply for the Calyx pilot, we collect the business contact information and application answers needed to understand the company, country, proposed use, and pilot fit. We also record the application status, the version of this Privacy Policy shown with the application, and limited technical information needed to prevent spam, abuse, and duplicate submissions.

Submitting an application does not guarantee an invitation or pilot access. Please do not include board files, technical designs, confidential engineering material, export-controlled information, or other sensitive content in the application.

Calyx account and business information

For invited users, we collect account and authentication information, name, business email, company information, country, role, invitation and membership information, and records showing which current legal documents were accepted or acknowledged.

Customer Content and product information

Calyx processes the engineering files, designs, instructions, datasheets, project information, and other content submitted by or for a Pilot Company (Customer Content). It also creates and stores engineering results, review decisions, usage information, and records needed to operate, secure, support, and audit the pilot.

We decide why and how personal information is handled for the website, applications, accounts, security, service administration, and our own legal obligations. When a Pilot Company decides to include personal information in Customer Content and we process it only to provide Calyx on that company's instructions, the Pilot Company may be the controller and we may act as its processor.

Before an EU or UK Pilot Company submits Customer Content containing personal information for us to process on its behalf, the Pilot Company and the Operator must enter company-specific data-processing terms.

AI processing

Calyx may send authorized datasheet content, part numbers, footprint information, and related instructions to a contracted AI processing provider to extract engineering facts.

Calyx uses Anthropic as its contracted AI processing provider for this limited extraction work.

We do not use Customer Content to train Calyx models. We do not enable the contracted AI provider to train general models on Customer Content submitted through Calyx. The applicable commercial account, terms, and settings must support that statement before confidential Customer Content is processed.

3. How we use information

We use information to:

• provide, maintain, secure, and troubleshoot the website and Calyx;
• review pilot applications, select participating companies, and issue invitations;
• authenticate users and manage company roles and access;
• receive, process, generate, display, and export authorized engineering work;
• provide support and communicate about applications, accounts, security, and legal changes;
• enforce the Calyx Terms, usage limits, and company boundaries;
• detect and prevent fraud, spam, abuse, security incidents, and unauthorized access;
• maintain necessary acceptance, usage, cost, security, and audit records; and
• comply with law and establish, exercise, or defend legal claims.

We do not sell personal information or Customer Content. We do not disclose Customer Content to another Calyx customer, and cross-company sharing is disabled for the pilot.

4. Legal bases for EU/UK personal information

When EU or UK data-protection law applies and we act as a controller, we rely on one or more of these legal bases:

• Contract and steps requested before a contract: to review an application, create an approved pilot company, authenticate users, provide Calyx, support users, and administer the pilot relationship.
• Legitimate interests: to operate and secure the website and Calyx, communicate with business contacts, select suitable pilot companies, prevent fraud and abuse, improve reliability, and protect our rights and the rights of others, after considering the effect on individuals.
• Legal obligation: to comply with law, lawful requests, sanctions restrictions, record duties, and the establishment, exercise, or defense of legal claims.
• Consent: where we expressly ask for consent for an optional use. Consent may be withdrawn at any time without affecting processing that occurred before withdrawal.

When we process personal information in Customer Content only on a Pilot Company's instructions, that company is responsible for identifying its lawful basis and giving lawful instructions.

5. How we share information

We share information only as reasonably needed with:

• hosting and database services that operate the website and Calyx;
• email-delivery services used for invitations and service messages;
• the contracted AI processing service described above;
• error-monitoring services used to identify and resolve failures;
• network-security and content-delivery services used to deliver and protect the services;
• people authorized to operate or support Jordan Valley AI or Calyx and subject to confidentiality duties;
• the Pilot Company and its authorized users;
• a person or organization you direct us to share with; or
• authorities or other recipients when required by law or reasonably necessary to protect rights, safety, users, or the services.

These categories describe function, not internal architecture. A provider may use its own subprocessors under its agreement with us.

A selected Pilot Company may request the current provider list by emailing [email protected].

Information may also transfer as part of a sale, reorganization, financing, or similar transaction involving the Jordan Valley AI or Calyx operation, subject to this policy and applicable law.

6. International processing

We and our service providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live.

Before we make an international transfer of EU or UK personal information, we will rely on an applicable adequacy decision or, where another safeguard is required, put in place the European Commission's Standard Contractual Clauses with the applicable UK addendum or another mechanism approved under applicable law.

7. Retention and deletion

We keep information only for as long as reasonably needed for the purposes described in this policy, including operating the services, security, business records, legal obligations, and legal claims.

The following periods apply to the pilot:

• a rejected pilot application is deleted 30 days after rejection;
• contact information for a selected applicant is kept through the pilot and for 30 days afterward; and
• Pilot Company Customer Content remains available for export for 60 days after the pilot ends, then active copies are erased.

We keep direct-contact email for 12 months after the last substantive exchange unless a legal or security hold requires longer retention.

We retain the minimum company and user acceptance record for four years after the pilot ends in a restricted service-only archive containing no Customer Content.

Deletion from active systems may not immediately remove limited copies kept for security, backup, fraud prevention, legal obligations, or legal claims. Those copies are restricted and removed or de-identified when no longer needed.

8. Cookies and similar technology

The website and Calyx may use cookies or similar technology that is necessary for sign-in, security, preferences, and reliable operation. We do not use Customer Content for advertising.

Browser settings can block or delete cookies, but blocking a necessary cookie may prevent part of the service from working.

9. Security

We use reasonable technical and organizational safeguards appropriate to the service and information. No internet transmission or storage system is completely secure.

Use the approved Calyx upload path for authorized company files rather than ordinary email. Report a suspected privacy or security issue to [email protected].

10. Your choices and requests

Subject to applicable law and identity verification, you may ask us to access, correct, or delete personal information associated with you; receive a portable copy where applicable; restrict or object to certain processing; or withdraw consent where processing relies on consent. Email [email protected] and describe your request.

We may verify your identity, company membership, and authority before acting. We may also retain information where law, security, the rights of another person, or the establishment or defense of legal claims requires it.

You may choose not to email us or submit a pilot application. A Pilot Company may end its pilot participation and request export or deletion under the Calyx Terms.

If EU or UK data-protection law applies, you may also complain to a data-protection supervisory authority where you live or work, or where you believe an infringement occurred.

11. Children

The Calyx application and pilot are for adults acting for businesses. We do not knowingly accept pilot applications from, or create Calyx pilot accounts for, anyone under 18. Contact us if you believe a minor submitted personal information.

12. Changes to this policy

We will identify the effective date of this policy. If a material change affects Calyx pilot users, we will provide a summary and require acknowledgement of the new version before continued access to Pilot Company work. Other updates will be posted at jordanvalleyai.com/privacy, with additional notice where reasonably appropriate.

13. Contact

Privacy questions and requests: [email protected].