Privacy notice
Privacy notice
GembaOS is a zero-trust governance runtime for enterprise AI agents: policy-decided access, single-use clearance tokens bound to exact parameters, and accountable human approvals, running on-premises or in a private VPC.
This website, gembaos.dev, is operated by Lux Mentis Limited. It collects personal data in one place only, the contact form. This notice says what is collected, why, where it goes, how long we keep it and how to have it removed.
What does the website itself collect?
Nothing that identifies you. The site sets no cookies, uses no local storage and loads no third-party script that profiles visitors. Traffic may be measured with Cloudflare Web Analytics, which sets no cookies, does not fingerprint the browser and gives us aggregate page counts only. Our web server keeps an access log (IP address, requested address, time, browser type) for 14 days for security and fault diagnosis, then deletes it.
What does the contact form collect, and why?
| Field | Why we ask for it |
|---|---|
| Work email | To reply to you |
| Full name and company | To know who we are replying to |
| Your note (optional) | Whatever you choose to tell us |
| Language of the page, time received | To reply in your language and keep the record in order |
The purpose is to answer your request and set up the demo you asked for. Where a legal basis is required, it is your request (steps taken before a contract) and our legitimate interest in answering it.
Where does it go?
- The entry is stored on a server we operate at a hosting provider in the European Union (Hetzner Online GmbH).
- A notification with the same content is sent to our team by email through Amazon Web Services (Amazon SES, United States) and, when configured, to our internal team chat.
- Nobody else receives it. It is not sold, not shared for advertising and not used for any automated decision.
How long do we keep it?
Until your request is closed and at most 12 months after our last exchange with you, unless a pilot or a contract follows, in which case that agreement governs the retention.
What are your rights?
You can ask what we hold about you, have it corrected or deleted, or object to its use. Use the contact form and say what you would like us to do; we answer from the address you gave. Where the Personal Data (Privacy) Ordinance of Hong Kong, the Act on the Protection of Personal Information of Japan, the GDPR or the UK GDPR applies to you, these rights follow those laws, and you may also complain to your supervisory authority.
Changes
We update this page when the processing changes and put the date at the top.
Last updated: · GembaOS v0.2