Privacy Policy

Last updated: 3 February 2026

Stateful Robotics Ltd ("the Company," "we," "us," or "our") operates the fleet orchestration platform at statefulroboticshq.com. This policy explains how we collect and use personal data in connection with that platform and this website. It applies to visitors, early-access applicants, pilot partners, and the warehouse and 3PL operators who use our task orchestration software.

Because our core service processes operational data generated by warehouse robot fleets, including task graphs, lane-block events, WMS credentials, and operator account information, we take our data-handling obligations seriously. This policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Stateful Robotics Ltd (1 Victoria Street, Floor 4, Bristol, BS1 4XE, United Kingdom) is the data controller for personal data processed through statefulroboticshq.com under the UK GDPR and the Data Protection Act 2018. You can contact us at [email protected].

2. Personal Data We Process

We process personal data in the following categories depending on how you interact with us:

  • Identity and contact data: name, work email, company name, job title, and phone number submitted via our contact form, early-access application, or account registration.
  • Fleet and integration credentials: WMS API credentials, robot fleet API tokens, and warehouse configuration details provided by operators who connect the orchestration platform to their systems. These are processed solely to operate the task compilation and replanning service and are never used to train models or shared with third parties without your written consent.
  • Operational telemetry: robot task status events, lane-block notifications, and task-graph state data submitted through the platform API. This data is processed to compile task graphs, trigger replanning cycles, and maintain task history for audit purposes. It is retained per the terms of your pilot agreement.
  • Communications content: messages, questions, and support requests you send to us.
  • Technical data: IP address, browser type, device type, and pages visited, collected automatically when you access this website.
  • Analytics data: aggregated usage metrics, collected with your prior consent via cookies.

3. Lawful Bases (Article 6 UK GDPR)

We rely on the following lawful bases:

  • Contract performance: processing operator account data and fleet credentials is necessary to deliver the orchestration platform under our pilot agreements.
  • Legitimate interests: handling early-access enquiries, operating website security, and maintaining task-history audit logs that benefit both us and our pilot partners.
  • Legal obligation: retaining records as required by applicable UK law.
  • Consent: setting non-essential analytics cookies and sending marketing communications, where you have opted in.

4. Recipients and International Transfers

We share personal data with processors under Article 28 contracts, including cloud infrastructure providers and email service providers. Transfers to processors outside the UK are protected by the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy regulation, as applicable.

We do not sell personal data. We do not share fleet telemetry or WMS credentials with any third party except as strictly necessary to deliver the contracted orchestration service.

5. Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

  • Early-access application and enquiry data: 24 months after last contact.
  • Operator account and fleet credentials: for the duration of the pilot agreement plus 90 days after termination, unless a longer period is required by law or agreed in the pilot terms.
  • Operational task-graph and telemetry data: as specified in the individual pilot agreement.
  • Website access logs: 90 days.
  • Consent records for cookie choices: 12 months.

6. Your UK GDPR Rights

Under the UK GDPR you have the following rights in relation to your personal data:

  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object, including to direct marketing without further conditions;
  • Rights related to automated decision-making (we do not engage in automated decisions with legal effects).

Email [email protected] to make a request. We respond within one month, extendable by two further months for complex requests.

7. Right to Complain to the ICO

You have the right to lodge a complaint with the UK Information Commissioner's Office ("ICO"). The ICO's website is ico.org.uk; helpline 0303 123 1113.

8. Cookies

See our Cookie Policy. Non-essential cookies are not set without your prior consent under the Privacy and Electronic Communications Regulations (PECR). When you use the Stateful Robotics platform, session management and CSRF-protection cookies are strictly necessary for secure operation of the orchestration API.

9. Security and Changes

We implement technical and organisational measures appropriate to the risk, including encrypted transmission of fleet credentials and access controls on operational data stores. Material changes to this policy are reflected by an updated "Last updated" date at the top of this page.

10. Contact

Stateful Robotics Ltd
1 Victoria Street, Floor 4
Bristol, BS1 4XE
United Kingdom
Email: [email protected]
Phone: +44 117 456 2180