This policy explains how Camley collects, uses, shares and protects personal information when you visit camley.ai, and the choices you have. We have tried to keep it short and specific: it describes what this website actually does, not what websites in general might do.
1. Who we are
The website at camley.ai (the "Site") is operated by Camley, Inc., a Delaware corporation ("Camley", "we", "us" or "our"). For the personal information described in this policy, Camley is the controller: we decide why and how it is processed.
You can reach us about anything in this policy at contact@camley.ai.
2. What this policy covers
This policy covers personal information we collect through the Site and through the emails you send to the addresses published on it. It applies to visitors to the Site, people who request a demo or contact us, and people who apply for a role with us.
It does not cover the Camley platform that our customers use under a written agreement with us. Data processed in the platform is governed by that agreement, and where we process personal data on a customer's behalf we do so as their processor, under their instructions.
3. Information we collect
Information you give us
- Demo requests. When you complete the "Request a demo" form we collect your first and last name, business email address, phone number (if you provide one), firm name, firm type, firm assets under management, the country where you are primarily based, and whether you would like to receive updates from us.
- Emails to us. When you write to an address published on the Site, such as contact@camley.ai or careers@camley.ai, we receive your email address, your message and anything you attach.
- Job applications. If you apply for a role, we receive the information you choose to share, typically your CV, contact details, work history and any links you include.
Please do not send us sensitive information (for example, information about health, religion or political opinions), or confidential information about your fund or investors, through the Site or by email. We do not need it to respond to you.
Information collected automatically
When you visit the Site, our hosting provider automatically records standard technical information in its server logs, such as your IP address, browser type, the pages you request and the time of each request. This is used to deliver the Site, keep it secure and diagnose problems. We do not use it to build a profile of you.
We do not use analytics, advertising or session-recording tools on the Site.
4. How we use it, and why
Data protection laws such as the EU and UK General Data Protection Regulation (GDPR) require us to have a lawful basis for each use of personal information. The table below sets out what we use your information for and the basis we rely on.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to a demo request or enquiry, and arranging and following up on a demo | Demo form details; emails you send us | Steps taken at your request before entering into a contract, and our legitimate interest in responding to people who contact us |
| Sending you updates about our products, services and events, if you ask us to. We do not send these yet; if we start, we will only email people who ticked the box | Name and email address | Your consent, given by ticking the box on the demo form. You can withdraw it at any time. |
| Considering your job application | Information you send with your application | Steps taken at your request before entering into an employment contract, and our legitimate interest in recruiting |
| Operating, securing and troubleshooting the Site | Server log information | Our legitimate interest in running a secure, working website |
| Meeting legal obligations and protecting our rights | Any of the above, as needed | Compliance with a legal obligation, and our legitimate interest in establishing or defending legal claims |
Where we rely on legitimate interests, we have weighed those interests against your rights and expectations. We will not use your information for a purpose that is incompatible with the one we collected it for. We do not sell personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
5. Cookies and similar technologies
Cookies are small files a website stores in your browser. The Site does not set any cookies, and does not use tracking pixels, advertising tags or analytics scripts. Because of this, there is no cookie banner.
Everything the Site needs to display, including its fonts, is served from our own domain, so visiting the Site does not send your information to other companies.
If we ever introduce cookies or similar technologies that are not strictly necessary, we will update this policy first and, where the law requires it, ask for your consent before using them.
Do Not Track and Global Privacy Control
Some browsers can send a "Do Not Track" or Global Privacy Control signal to tell websites you do not want to be tracked. Because the Site does not track visitors across websites or over time, or share information for targeted advertising, it behaves the same way whether or not your browser sends one of these signals. If that changes, we will honour these signals as the law requires and update this policy.
6. Who we share it with
We share personal information only with service providers that help us run the Site and our business, and only as much as they need to provide their service. Each provider handles personal information under its agreement with us and only to provide its service to us.
| Provider | What they do for us | Location |
|---|---|---|
| Vercel | Hosts the Site and keeps its server logs | United States |
| Formspree | Receives demo form submissions, forwards them to our inbox and keeps a copy for 30 days | United States |
| Google (Google Workspace) | Provides our business email, where demo requests, enquiries and applications are received | United States |
We may also disclose personal information:
- where required by law, regulation, court order or a valid request from a public authority;
- to protect the rights, property or safety of Camley, our customers or others; and
- to a buyer, investor or successor in connection with a merger, acquisition, financing or sale of all or part of our business, subject to equivalent confidentiality and data protection commitments.
7. International transfers
Camley is based in the United States, and the providers listed above process information in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, this means your personal information will be transferred to a country whose laws may not give it the same protection as your home country.
Where we transfer personal information from those regions, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) in our agreements with service providers, or, where appropriate, on the transfer being necessary to respond to a request you have made. You can ask us for more information about the safeguards we use by contacting us.
8. How long we keep it
We keep personal information only for as long as we need it for the purposes described in this policy:
- Demo requests and enquiries: for as long as we are in discussion with you or your firm, and then for up to 24 months after our last contact, unless you ask us to delete them sooner. Our form provider keeps a copy of each demo request for 30 days and then deletes it automatically.
- Marketing preferences: until you withdraw consent. We keep a record of the withdrawal so that we do not contact you again.
- Job applications: for up to 12 months after the role is filled, unless you agree to us keeping your details for future roles. If you join us, your application becomes part of your employee record.
- Server logs: for the limited period set by our hosting provider.
We may keep information for longer where the law requires it, or where it is needed to establish or defend a legal claim.
9. How we protect it
The Site is served only over encrypted HTTPS connections. Access to the inboxes and systems where we hold your information is limited to the people who need it, and is protected by authentication controls. We use service providers with established security programmes. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly if anything goes wrong, including notifying you and the relevant authorities where the law requires.
10. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it;
- correct information that is inaccurate or incomplete;
- erase your information;
- restrict how we use it;
- object to our use of it where we rely on legitimate interests, and to direct marketing at any time;
- port the information you gave us to another organisation, in a commonly used format; and
- withdraw your consent at any time, where we rely on it. Withdrawing consent does not affect anything we did with your information before you withdrew it.
To exercise any of these rights, email contact@camley.ai. We will respond within one month, and may need to confirm your identity before acting on your request. We will not charge you or treat you differently for exercising your rights.
To withdraw your consent to receive updates, email us at contact@camley.ai. Any marketing email we send in future will also include an unsubscribe link.
If you are not satisfied with how we have handled your information or your request, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe a breach took place. In the UK this is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first, so please contact us.
11. Data protection contact
Questions about this policy, requests to exercise your rights, and any other data protection matters can be sent to our data protection contact at contact@camley.ai. Please include "Data protection" in the subject line so that your message reaches the right person quickly.
12. Children
The Site is intended for business professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, please contact us and we will delete it.
13. Other websites
The Site links to websites we do not operate, such as LinkedIn. Those sites have their own privacy policies, and we are not responsible for how they handle your information.
14. Changes to this policy
We review this policy at least once a year, and whenever we make a significant change to how we handle personal information. When we update it, we will change the "Last updated" date at the top of this page. If a change materially affects how we use information we already hold, we will tell you before it takes effect.
15. Contact us
Camley, Inc.
Email: contact@camley.ai
See also our Terms of Use.