Privacy Policy

1. Who This Policy Covers

This policy applies to visitors who use the Nauticus Robotics website and related web pages controlled by Nauticus Robotics, Inc. It covers website browsing, contact and demo requests, sales, press and investor inquiries, careers communications, downloadable materials, subscriptions, and similar online interactions.

A third-party website or service linked from this website may provide its own privacy notice. That notice governs the third party's independent processing. This does not limit Nauticus's responsibilities for personal information that Nauticus discloses to, receives from, or processes through a service provider or other third party on its behalf.

2. Personal Information We Collect

In this policy, "personal information" includes "personal data" and other information protected by applicable privacy law. The precise definition and scope depend on the law that applies; information may be protected even if it does not identify a person by itself.

Information you provide

You may provide personal information when you contact us, request information, download materials, request a demo, email our team, submit careers information, subscribe to investor materials or alerts, or otherwise communicate with us. This may include:

• Name, work email address, phone number, company, job title, and country or region.
• Inquiry details, project notes, preferred demo dates, and commercial or technical interests.
• Resume, work history, and other careers information if you contact us about employment.
• Investor communication details if you request investor information or alerts.

Some staged website forms may open your email client or start a download locally. If a form does not transmit data to Nauticus, we receive the details only if you send them to us by email or another submission method.

Whether information is required or optional

Fields marked as required must be provided for us to process the relevant request. Other information is optional. If you do not provide required contact or request information, we may be unable to respond, provide a requested download, consider an application, or take requested steps toward a business relationship. Providing website browsing and analytics information is not a contractual requirement; non-essential analytics remain optional.

Information collected automatically

When you visit the site, we and authorized service providers may receive technical information such as IP address, browser and device type, operating system, referring and exit pages, pages and links viewed, timestamps, approximate location derived from IP address, consent status, and cookie or similar-technology identifiers. We use this information for site operation, security, diagnostics, and, with any consent required by law, analytics.

The website is not intended to request sensitive personal information through general inquiry channels. Please do not send sensitive personal information unless we specifically request it and explain why it is needed. Careers or accommodation communications and free-text messages may nevertheless contain sensitive information that you choose to provide; where applicable, we process it only for the relevant request and as permitted by law.

For California and similar U.S. state privacy-notice purposes, during the preceding 12 months we collected or may have collected: identifiers and contact information; internet or other electronic network activity; approximate geolocation derived from IP address; professional or employment-related information; commercial or inquiry information; and the contents of communications you choose to send us. Sources include you, your browser or device, affiliates, and service providers supporting the website. We use these categories for the purposes described below.

3. How We Use Personal Information

We use personal information to:

• Respond to inquiries, demo requests, sales requests, investor requests, press contacts, and careers communications.
• Provide requested downloads, information, and follow-up communications.
• Operate, secure, troubleshoot, and improve the website.
• Understand website usage and content performance when analytics cookies are accepted.
• Maintain business records and comply with legal, regulatory, accounting, public company, and security obligations.

We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

4. Legal Bases For EU And UK Visitors

Where the EU GDPR or UK GDPR applies, we rely on: consent for non-essential cookies and similar technologies and, where required, electronic marketing; our legitimate interests in securing and administering the website, responding to ordinary business communications, developing business relationships, and understanding site performance, provided those interests are not overridden by your rights; taking steps at your request before entering into, or performing, a contract; and compliance with legal obligations, including applicable corporate, accounting, regulatory, and records requirements.

You may withdraw consent for analytics cookies at any time through the Cookie settings link in the footer and may withdraw marketing consent through an unsubscribe link or by contacting us. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

5. Cookies And Tracking Technologies

Cookies are small files stored on a visitor's device. Similar technologies include local storage, pixels, tags, scripts, software development kits, and other technologies that store or access information or recognize a browser or device. We apply a consent-based approach globally to non-essential technologies: they are activated only after the visitor affirmatively accepts them. Visitors can reject them and continue using the site.

EU and UK visitors

For visitors in the European Union, European Economic Area, and United Kingdom, we treat non-essential cookies, including analytics cookies, as consent-based. Consent must be freely given, specific, informed, and shown by a clear action. Rejecting analytics cookies does not block access to the website. This approach is intended to align with applicable EU and UK privacy and cookie rules, including the EU GDPR, UK GDPR, and UK PECR where they apply.

On a first visit, the cookie banner appears before non-essential technologies are activated. If a visitor rejects them, we do not set the analytics identifier or activate non-essential analytics, and the banner does not automatically reappear while the rejection preference remains stored. If a visitor accepts analytics, the banner does not automatically reappear while the acceptance preference remains stored. Visitors can reopen the banner through the Cookie settings link in the footer. The Reject option is provided as readily as the Accept option.

If you delete cookies

If you clear all Nauticus cookies in your browser, the website treats you as a first-time visitor and shows the cookie banner again. Analytics tracking is not enabled unless you accept it again.

If you delete only the analytics visitor identifier but leave an accepted consent cookie, the website may create a new analytics identifier on your next visit because your consent remains stored. If you use the Delete tracking cookie control, the visitor identifier is removed, analytics consent is treated as withdrawn, and a withdrawal preference is stored for up to six months so that the identifier is not recreated automatically. If the consent cookie is missing, the website clears any remaining visitor identifier before showing the banner again.

United States visitors

Privacy and cookie rules vary across the United States. For this website, Nauticus applies a consistent global privacy baseline to all visitors, including U.S. visitors. For cookie controls, we use the stricter EU and UK consent-based approach globally: non-essential analytics cookies are off unless the visitor accepts them, visitors can reject tracking and continue using the site, visitors can reopen Cookie settings, and visitors can delete the first-party analytics identifier from the browser. All visitors, regardless of location, are covered by these cookie controls as a Nauticus website policy.

This is a voluntary website standard and may provide more cookie control than some local U.S. laws require. EU, UK, and U.S. state rights apply only when the relevant law covers the individual and the processing. Based on our current practices, we do not use targeted-advertising cookies and do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws. If those practices change, we will update this policy and implement required notices and opt-out controls before the change takes effect.

Global Privacy Control

If your browser sends a recognized Global Privacy Control signal, the website treats it as a request to reject non-essential analytics and, where applicable, as a legally valid request to opt out of sale, sharing, or targeted advertising.

6. How We Share Personal Information

We may disclose personal information to: service providers and contractors that perform hosting, content delivery, security, analytics, communications, investor-relations, recruiting, document-delivery, and business-system services on our behalf; Nauticus affiliates and subsidiaries, including SeaTrepid where relevant to subsea-operations inquiries; professional advisers such as lawyers, auditors, insurers, and accountants; transaction counterparties; and government or legal recipients as described below. We require service providers and contractors to process personal information consistently with applicable contractual and legal restrictions.

During the preceding 12 months, we disclosed or may have disclosed the categories listed in Section 2 to the recipient categories above for the business purposes described in this policy. We did not sell those categories or share them for cross-context behavioral advertising.

We may disclose information if required by law, regulation, subpoena, court order, public company obligations, government request, safety need, security investigation, or in connection with a merger, financing, restructuring, asset sale, or similar business transaction.

7. International Visitors And Data Transfers

Nauticus Robotics, Inc. is based in the United States. If you visit from outside the United States, personal information may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate, which may not provide the same level of legal protection as your jurisdiction. Where EU or UK transfer restrictions apply, we use an applicable lawful transfer mechanism, such as an adequacy decision or regulation, the European Commission's Standard Contractual Clauses, and/or the UK International Data Transfer Addendum or Agreement, together with supplementary measures where required. To request information about relevant safeguards, contact us using Section 15.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, security, dispute-resolution, and records requirements. We determine retention using the nature and sensitivity of the information, the purpose of processing, legal limitation and records periods, security needs, and whether the purpose can be achieved by other means. Cookie durations are described in Section 5. We delete or de-identify information when retention is no longer necessary, unless law permits or requires continued retention.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, email transmission, or online system can be guaranteed to be completely secure.

10. Your Choices And Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to access or know about personal information; obtain a portable copy; correct inaccurate information; request deletion; object to or restrict processing; withdraw consent; opt out of targeted advertising, sale, sharing, or certain profiling; limit certain uses or disclosures of sensitive personal information; and appeal a decision concerning a request. You also have the right not to receive unlawful discriminatory treatment for exercising applicable privacy rights.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, access, correct, delete, opt out, limit certain uses of sensitive personal information, and receive non-discriminatory treatment. An authorized agent may submit a request where permitted by law, subject to verification requirements. Texas residents and residents of other U.S. states may have similar rights and, where applicable, a right to appeal our decision. Individuals covered by the EU GDPR or UK GDPR may have rights of access, correction, deletion, objection, restriction, portability, consent withdrawal, and complaint to the competent supervisory authority.

To make a privacy request, contact us at info@nauticusrobotics.com. We may verify your identity and request information reasonably necessary to locate records and protect against fraudulent requests. We will respond within the time required by applicable law. To appeal a decision where state law provides an appeal right, reply to our decision or contact us with the subject line "Privacy Appeal." If an appeal is denied, we will provide any regulator-contact information required by applicable law.

11. Marketing Communications

If you receive marketing or business-development emails from Nauticus, you can opt out through the unsubscribe instructions in the email or by contacting us. We will honor opt-out requests as required by law and may retain limited suppression information to ensure that we do not send further marketing. We may still send non-marketing communications, such as responses to your inquiry or messages related to an ongoing business relationship.

12. Children

The website is intended for business, investor, recruiting, and informational audiences and is not directed to children. We do not knowingly collect personal information from children under 13 through the website. If we learn that we collected such information without legally required authorization, we will take appropriate steps to delete it. We do not knowingly sell or share personal information of individuals under 16.

13. Third-Party Links

The website may link to or integrate investor-relations pages, social-media platforms, hCaptcha, email providers, recruiting channels, customer sites, and other third-party websites or services. Third parties may process information under their own notices when you interact directly with them. When a third-party service is embedded in our website or processes information on our behalf, our disclosures and responsibilities remain subject to applicable law.

14. Updates To This Policy

We may update this policy as the website, analytics tools, business systems, or legal requirements change. The updated version will be posted on this page with a revised last updated date.

15. Contact

For privacy questions or requests, contact:

Nauticus Robotics is the controller or business responsible for the processing described in this policy unless a collection notice identifies another entity.

Nauticus Robotics, Inc.
17146 Feathercraft Lane, Suite 450
Webster, Texas 77598
United States
info@nauticusrobotics.com