Privacy Policy

This Privacy Policy explains how Meval ("we", "us", or "our") collects, uses, stores, and protects the personal data and any content submitted to us. We are committed to compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

01 Who We Are

Meval is a real-world data infrastructure company working with AI teams on authorized access to professional environments and expertise. Our registered address is in Spain (EU). For data protection enquiries, contact us at: contributors@meval.ai

02 What Data We Collect

When you contact us or take part in a Meval project, we may collect:

• Your first name and email address
• Your country and city of residence
• The video file you upload (egocentric footage of physical tasks)
• Your explicit consent record (timestamp and checkbox confirmation)
• Device metadata automatically collected by Google Forms (IP address, browser type)

03 Legal Basis for Processing

We process your personal data and video content on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): You have given explicit, freely given, informed, and unambiguous consent by ticking the consent checkbox in our submission form.
• Legitimate interest (Art. 6(1)(f)): To operate our services and respond to enquiries.

04 How We Use Your Data

Your submitted video and personal data are used exclusively for:

• Quality assessment of your submitted footage
• Inclusion in anonymised egocentric video datasets sold or licensed to AI research laboratories and robotics companies for the purpose of training artificial intelligence and robotic manipulation models
• Communicating with you about your enquiry or participation in a project
• Complying with our legal and contractual obligations

We do not use your data for advertising, profiling, or any purpose unrelated to the above.

05 Who We Share Your Data With

Your personal data (name, email, location) is never shared with third parties.

Your video content may be included in datasets licensed to:

• AI research laboratories
• Robotics companies and physical AI developers

Video datasets are delivered in anonymised, aggregated form. Individual participant identities are not disclosed to clients.

We use the following sub-processors to operate our platform:

• Google LLC (Google Forms, Google Drive) — data storage and form processing
• Google LLC (Gemini API) — automated video annotation

All sub-processors are bound by GDPR-compliant data processing agreements.

06 Data Retention

• Personal data (name, email, location): retained for 3 years from the date of last activity, or until you request deletion.
• Submitted video content: retained indefinitely as part of our training dataset, unless you request deletion prior to dataset delivery to a client.
• Consent records: retained for 5 years to demonstrate compliance.

07 Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data and video content, subject to our legal obligations.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to withdraw consent: Withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with your national data protection authority (in Spain: the AEPD — www.aepd.es).

To exercise any of these rights, contact us at: contributors@meval.ai

We will respond to all requests within 30 days.

08 Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Video files are stored in encrypted Google Drive environments with access restricted to authorised Meval personnel only.

09 International Transfers

Meval operates within the European Union. Some of our sub-processors (Google LLC) may process data in the United States. Such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.

10 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify affected individuals of any material changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

11 Contact

For any questions about this Privacy Policy or your data rights: