SAIERA™ Privacy Policy

1. Who we are

The data controller for purposes of this Policy is Cinderpoint Systems LLC, a Wyoming limited liability company ("Cinderpoint", "we", "us"). SAIERA™ is a trademark of Cinderpoint Systems LLC. To contact us about this Policy, email legal@cinderpoint.com.

2. Information we collect on the Site

When you visit saiera.ai, our hosting provider's servers automatically log basic technical information that is generated by your browser. This includes:

• IP address (truncated where feasible);
• browser type and version, operating system, and device type;
• referring URL and the pages you visit on the Site;
• date and time of access;
• any information you voluntarily submit, for example when you contact us via the email addresses listed on the Site.

We do not require accounts to browse the Site. We do not run advertising trackers, do not run third-party social-media trackers, and do not sell, rent, or share personal information for cross-context behavioral advertising.

3. Cookies and similar technologies

The Site uses only strictly necessary technical state. We do not currently use third-party analytics that set cross-site identifiers, and we do not use advertising cookies. If we add analytics in the future, we will use privacy-preserving analytics that do not set persistent identifiers, and we will update this Policy and, where required, present a cookie consent banner.

4. Information collected by SAIERA™ software

Where SAIERA™ software is made available for download, that software stores scenario progress, session state, and configuration locally on your device. SAIERA™ software does not transmit personal information back to Cinderpoint by default. Optional online features, if you choose to use them, may involve limited telemetry such as download metadata, software version, and feature flags; the LICENSE file or in-software documentation describes what any optional feature transmits.

4a. SAIERA Safemachine: Screening specifically

SAIERA Safemachine: Screening (the free assessment at cinderpoint.com/screening, also available as an offline download) stores your progress, settings, content-filter preferences, and any name you type into the completion certificate only in your browser's local storage on your device. This information is not transmitted to Cinderpoint or anyone else by the current build.

At the end of the assessment you may optionally submit an email address to request a free book chapter sample and/or a notification when a future game becomes available, or to request an educator/HR discussion pack. As of this Policy's last update, this signup is captured and stored locally on your device only; it is not yet sent to Cinderpoint or to any email delivery provider. When a live signup pipeline is connected, this section will be updated to name the email service provider used and to confirm signups are transmitted and processed under this Policy, and we will not enable that transmission silently without updating this disclosure first.

5. How we use information

We use the information described above to:

• operate, maintain, and improve the Site and SAIERA™ software;
• respond to inquiries you send us;
• monitor for and prevent fraud, abuse, and security incidents;
• comply with legal obligations and enforce our Terms of Use.

We do not use information about you to make automated decisions that produce legal or similarly significant effects.

6. Third parties

We use a small number of service providers strictly to operate the Site. These providers process information only on our behalf and only as needed to provide their service:

• web hosting and content delivery provider, which receives the technical log information described in Section 2;
• email provider, used for inbound and outbound mail at the addresses published on the Site.

We do not sell or rent personal information to third parties. We do not share personal information for cross-context behavioral advertising. We may disclose information when legally required to do so, or to protect the rights, property, or safety of Cinderpoint, our users, or others.

7. Your rights under GDPR (visitors in the European Economic Area and the United Kingdom)

If you are in the EEA or the UK, the General Data Protection Regulation grants you rights with respect to personal information about you. You may:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information (the "right to be forgotten");
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability of information you provided to us;
• lodge a complaint with your national data protection authority.

To exercise these rights, contact legal@cinderpoint.com. The legal bases on which we rely are our legitimate interest in operating and securing the Site, performance of any agreement with you (where applicable), compliance with legal obligations, and your consent where consent is the appropriate basis.

8. Your rights under US state privacy laws

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or any other US state with a comprehensive privacy law in effect, that law may grant you rights to:

• know what personal information we have collected about you;
• request a copy of your personal information;
• request deletion of your personal information;
• correct inaccurate information;
• opt out of sale, sharing for advertising, or targeted advertising (we do not engage in any of these);
• limit use of sensitive personal information (we do not collect sensitive information from Site visitors).

California residents may also designate an authorized agent to make a request on their behalf. To exercise any of these rights, email legal@cinderpoint.com with the nature of the request and enough information for us to verify your identity. We will not discriminate against you for exercising any privacy right.

9. Data retention

Our web servers automatically collect basic technical request data (IP address, User-Agent, timestamp) for security and diagnostic purposes. This data is automatically discarded within 24 hours and is not used for analytics, profiling, or marketing. Email correspondence is retained for as long as necessary to address the inquiry and any follow-up, then for a reasonable period to allow continuity, after which it is deleted or archived. Information stored locally by SAIERA™ software remains on your device until you delete it.

10. Security

We use commercially reasonable administrative, technical, and physical measures to protect information we hold. No method of transmission over the internet is fully secure; while we strive to protect your information, we cannot guarantee absolute security. If we become aware of a personal data breach that creates a risk to affected individuals, we will notify those individuals and competent authorities as required by applicable law.

11. Children

The Site and SAIERA™ software are not directed to children under the age of thirteen, and we do not knowingly collect personal information from children under thirteen. If you believe a child under thirteen has provided personal information to us, contact legal@cinderpoint.com and we will take appropriate action, including deletion of the information.

12. International transfers

Cinderpoint Systems LLC is established in the United States. If you access the Site from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions where Cinderpoint or its service providers maintain facilities. By using the Site, you consent to such transfers. Where required by applicable law, we use appropriate safeguards for international transfers.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The updated Policy becomes effective when posted on this page. Material changes will be noted at the top of this page for a reasonable period.

14. Contact

For questions about this Privacy Policy or to exercise any of the rights described above, contact:

Cinderpoint Systems LLC
Email: legal@cinderpoint.com

Last updated: 2026-07-01 (added Section 4a, SAIERA Safemachine: Screening data handling).