Legal
Privacy Policy
Updated November 1, 2026
In short: this site collects very little. The site has no accounts and no advertising; our app, B2A Cells, has accounts and is covered in its own section below. A small amount of information stays entirely in your own browser to remember a preference. We keep a record of your cookie-banner choice — your IP address, the choice, and when — so we can show it was properly requested and given. The forms on AI Model Performance store only what you type into them, and only for the purpose each one states. We count clicks on the "Reach out" links, without anything that identifies you. If you say yes on the banner, we also run cookieless analytics to see which pages are useful. The rest of this page explains each of these in the detail a policy is supposed to.
Who this is
Bits 2 Atoms (B2Atoms Inc., "B2A", "we", "us") operates b2atoms.com and the B2A Cells app at app.b2atoms.com. For anything on this page, the contact is privacy@b2atoms.com. We are a small, pre-revenue company; if something below is unclear or you think we have gotten a rule wrong, that address reaches a person, not a queue.
What we collect
On this website there is no account and no database of visitors. The "Reach out" menu — on the homepage and in the mobile navigation — offers three destinations (Investors, Join the team, Customers), each of which opens Cal.com in a new tab to book time. We do not embed that scheduling tool on our own pages, and nothing you enter there passes through us or this site — whatever a booking requires is provided directly to Cal.com and governed by Cal.com's own privacy policy, not this one. You can also simply email us at the address below instead.
When you choose one of those three links, our server counts the click before sending you on to Cal.com. It stores which of the three you chose, when, and — if the link you followed carried one — a short campaign tag such as ?ref=linkedin that says where the link was shared. It does not store your IP address or anything else about you.
Forms on AI Model Performance
Get notified appears on every page; theAI Model Performance page adds two more forms. All are optional. Each stores exactly the fields shown on it, with the time it was sent — never your IP address — in our own database on Cloudflare. Nobody else receives them, except as described for the report email below.
- Get notified (in the footer of every page) — your email address and the exact wording you agreed to, used only to send you one welcome email and then B2A updates: new results on AI Model Performance and news from the company. Emails are delivered throughResend. Every email has a one-click unsubscribe link, which deletes your address straight away. We keep it until you unsubscribe or ask us to delete it.
- Email me the report — your email address, used to send the report once through our email provider,Resend, which processes it only to deliver that email. We keep a record of the send (address, time, and whether it was delivered to Resend) for up to 24 months. To limit abuse, your IP address is used for a moment to cap how many reports can be requested per minute; it is not stored. Ticking the optional box also adds you to Get notified, above.
- Help keep this honest (AI Model Performance) andPartner to bring physical abundance to the world (the homepage) — what your message is about, the model and source link if you give them, and your message. Your email is optional; if you add it, we store it with the wording you agreed to and use it only to reply. Kept for up to 24 months, so we can show where a change to the data came from.
The legal basis for using your email is your consent, given by ticking the box beside it; you can withdraw it at any time. For a message without an email it is our legitimate interest in keeping the published data accurate. To see, correct or delete anything you have sent, write toprivacy@b2atoms.com.
The only things this site stores, and where:
- b2a-theme (browser
localStorage, kept until you clear it) — whether you chose light or dark mode. - b2a-nav (browser
sessionStorage, read once and deleted immediately) — which direction to animate the page transition you just clicked. - b2a-consent (browser
localStorage, kept until you clear it) — the choice you make on the cookie banner, so we do not ask again every visit.
None of these three are cookies, and none of them individually are sent to our servers or anyone else's — they exist only so the site remembers a setting on your own device.
The one exception is the choice recorded in b2a-consent itself. When you accept, reject, or save preferences on the banner, we separately send that decision — which option you chose and which version of this policy it was made against — to our own server, where it is stored together with the IP address and timestamp of that request. This exists solely so we can demonstrate, if ever asked, that consent was properly requested and given, which GDPR Article 7(1) requires a controller be able to do. We do not use this record for analytics, marketing, or anything beyond that single purpose, nothing in it is looked at automatically or linked to anything else about your visit, and we intend to keep it for no longer than we might reasonably need it — currently, up to 24 months.
The AI Model Performance MCP server (/mcp), which lets AI assistants query the published data, stores nothing about who uses it. As with the report email, the requesting IP address is used for a moment to cap how many requests can be made per minute, and is not stored.
Like any web host, Cloudflare — who serves this site — necessarily processes standard connection information for every request (IP address, requested URL, timestamp, user agent) to route traffic and keep the service secure. This is infrastructure logging, not something we query or build profiles from.
Cookies and analytics
We set no cookies for analytics or advertising, and there is no advertising on this site at all. If you accept analytics on the banner, we load Cloudflare Web Analytics, which Cloudflare designed specifically to run without cookies or any client-side identifier and without tracking you across other sites. It tells us aggregate numbers — which pages get read, roughly how many visits — never who you are.
That script is not requested from Cloudflare at all until you accept it. If you reject or simply close the banner without choosing, it never loads.
Note: some Cloudflare security features (for example, bot mitigation) can set a strictly necessary cookie of their own on certain requests, independent of anything on this site. These exist to keep the service reachable and are exempt from consent under GDPR Recital 66 and ePrivacy Article 5(3) for that reason — the same way a login session cookie would be, if this site had logins.
Your choices
The banner that appears on your first visit lets you accept or reject analytics, with both choices exactly as easy to make — there is no pre-checked box and no hidden step. You can change your mind at any time from Cookie Preferences in the footer of every page.
If your browser sends a Global Privacy Control signal, or the older Do Not Track header, we treat that as your answer and skip the banner entirely: analytics stays off, and you can still turn it on by hand from the footer if you want to.
You can also clear everything this site has stored on your device at any time through your browser's own site-data settings — that removes the theme and consent choices along with everything else, with no need to contact us.
The compliance record described above isn't reachable that way — it exists specifically to prove a decision was made, so we don't delete it automatically just because you change your mind on the banner. If you'd like it removed anyway, write to the address below with roughly when you visited and, if you know it, the IP address the request would have come from, and we will find and delete the matching record.
Your rights
Depending on where you are, you may have rights to access, correct, delete, or export information about you, to object to or restrict its use, and to withdraw consent at any time — broadly, the rights set out in the EU/UK GDPR and, for California residents, the CCPA/CPRA. We do not sell or share personal information, as those terms are defined under the CCPA, and there is no "sensitive personal information" of the kind that law singles out for us to limit.
Because there is no account system, most of this is already true by default — clearing your browser storage handles the local side yourself, the notify emails carry their own unsubscribe link, and disabling analytics removes you from future Cloudflare Web Analytics counts immediately. For anything else — including a request to see or delete data tied to an email you have sent us — write to privacy@b2atoms.com and we will handle it directly; we do not yet have enough volume to need an automated process for this.
Children's privacy
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has provided us information — realistically, by emailing us — contact us and we will delete it.
International visitors
This site is served by Cloudflare's global network, which may process requests from a data centre outside your own country as a normal part of routing traffic to the nearest edge. See Cloudflare's privacy policy for how they handle this at the infrastructure level.
B2A Cells (app.b2atoms.com)
This section covers our app, B2A Cells. Unlike the website, it has accounts, so it keeps more. Effective November 1, 2026.
1. Who we are
This policy explains how B2Atoms Inc. ("Bits 2 Atoms", "B2A", "we", "us") handles personal information in B2A Cells, our app at app.b2atoms.com for testing robot models on robot arms in our cells ("the Service"). Our website, b2atoms.com, is covered by the sections above.
The controller of your information is B2Atoms Inc., a Delaware corporation, 1297 E Putnam Ave #1089, Riverside, CT 06878, USA. Contact: privacy@b2atoms.com.
2. Information we collect
Information you give us
| What | Details |
|---|---|
| Account | Email address; password, stored only as a one-way hash; your name, if you give it. |
| Sign-in methods | If you use Google: your name and email address from Google. If you add a passkey: its public key. If you turn on two-factor authentication: its secret and backup codes. |
| Profile | Optional: company or lab, role, what you need. |
| Runs | What you set up and run: robot, task, objects, scene layout, model, prompt, trials, speed. Unfinished set-ups, so you can come back to them. |
| Your own models | The name of the Hugging Face repository of a model you bring. |
| Requests and messages | What you ask us for (a robot, object, model, fine-tune or task), and messages to cell support, with our replies. |
| Choices | Your data-sharing settings, and which version of this policy you accepted and when. |
Information created when you use the Service
| What | Details |
|---|---|
| Run results | Every trial's outcome (success or type of failure) and duration, successes and failures alike, which your reports and Dashboard are built from. On live cells: camera recordings and robot joint data of each trial. |
| Sign-in records | Each signed-in session, with the IP address and browser it came from. Counts of recent sign-in and sign-up attempts by IP address, to stop password guessing. |
On your device: a cookie that keeps you signed in, and a few preferences in your browser's storage (theme, sidebar, region, an invitation code). We use no advertising or tracking cookies and no analytics in the Service.
Payment information: while cells are simulated, runs are free and we hold no payment details. When payments start, card details go to our payment provider (Stripe), not to us, and we keep billing records.
We don't ask for sensitive information, and our cells are set up so that people don't appear in recordings. Please don't send us personal information about others.
3. How we use it
- To provide the Service: create and secure your account, run your tests, produce your reports and Dashboard, show your history, and answer requests and support messages.
- To keep it secure: sign-in protection, rate limits, preventing misuse, and enforcing our terms.
- To improve our models and benchmarks: by default, we use the data from your runs, successes and failures alike, to improve the robot models and benchmarks we provide. You can turn this off at any time in Settings ("Help improve B2A's models"); runs started while it's off aren't used for this.
- To improve the app: only if you turn on "Help improve the app" (off by default): how you use it (pages, choices, errors).
- To suggest a test: the suggestion on the Workbench sends a summary of your past runs (no name or email) to an AI provider to find patterns. You can turn it off in Settings ("AI suggestion on the Workbench"); then nothing is sent and the suggestion is made without AI.
- To communicate with you: account emails (confirming your address, resetting your password), and replies to you. The app sends no marketing email.
- For legal reasons: to comply with law and protect our rights.
We don't sell your personal information or use it for advertising.
4. How we share it
We share information only with service providers that help us run the Service, under contracts that limit their use of it, and as described here:
| Provider | Purpose | What they receive |
|---|---|---|
| Cloudflare | Hosting the app and its database | Everything the app stores, on our behalf |
| Sign-in, only if you choose it | Your sign-in | |
| Resend | Account emails | Your email address and the message |
| Slack (our team's workspace) | Notifying our team of sign-ups, requests and support messages | Your name, email, company and message; for support, the run it concerns |
| Hugging Face | Checking that a model repository you name exists | The repository name |
| Anthropic | The Workbench suggestion | A summary of your past runs, without your name or email |
| Stripe | Payments, once they start | Card and billing details |
We may also share information: if required by law or to protect rights and safety; with a buyer or successor in a merger, acquisition or sale of assets, under this policy; and with your consent. We may publish anonymised, aggregated statistics (for example, a model's average success on a task across many runs) that don't identify you or your organisation.
5. How long we keep it
| What | How long |
|---|---|
| Signed-in sessions | Until you sign out, or 14 days without use |
| Sign-in attempt counts | One minute (sign-in) or one hour (sign-up) |
| Account, profile, unfinished set-ups, requests, support messages | Until you delete your account; then deleted from our database |
| Runs started with "Help improve B2A's models" on | Kept after you delete your account, de-identified: without your account, name, email or company, and without your own model's repository name |
| Run data with sharing off | Deleted with your account |
| Your model's weights | Loaded for a run only; not kept after it, unless you ask |
| Copies in our team's email and Slack, and backups | As long as needed for the purposes above, then deleted |
| Billing records | As long as the law requires |
You can download every episode as CSV from the Dashboard before deleting your account.
6. Security
We protect your information with encryption in transit (HTTPS), passwords stored only as hashes, optional two-factor authentication and passkeys, rate limits on sign-in, and access limited to the people who need it. If a breach affects you, we'll tell you as the law requires.
7. Your rights and choices
- In the app: edit your profile, change your data-sharing settings, download your episodes, and delete your account, all in Settings and the Dashboard.
- On request: depending on where you live, you may have the right to access, correct, delete or export your information, and to withdraw consent. Write to privacy@b2atoms.com; we'll answer within the time the law sets and may need to verify your identity.
- California: we don't sell or "share" personal information as the CCPA defines those terms, and we don't use sensitive personal information. We won't discriminate against you for using your rights.
8. Children
The Service is for professionals and is not directed to children. You must be at least 18 to use it. If you believe a child has given us information, contact us and we'll delete it.
9. Business customers
If you use the Service on behalf of an organisation, that organisation's agreement with us (the Master Services Agreement and order forms) also governs its data. A data processing agreement is available on request.
10. Changes to this policy
We'll update this policy when the Service or the law changes, and change the effective date above. If a change is material, we'll ask you to accept the new version the next time you use the app.
11. Contact
Questions or requests: privacy@b2atoms.com, or by post to B2Atoms Inc., 1297 E Putnam Ave #1089, Riverside, CT 06878, USA.
Changes to this policy
If our practices change in a way that matters — a new tool that sets cookies, for instance — we will update this page and, where the change is material, ask for consent again rather than carrying an old answer forward. The date at the top is the last time anything here changed.
Contact
Questions, requests, or corrections about any of this: privacy@b2atoms.com.