Privacy Policy
Effective: February 27, 2026 · Last Updated: February 27, 2026
1. Introduction
DATUM LLC ("DATUM," "we," "our," or "us") operates the DrillSense platform ("Platform"), an intelligent drilling analytics service for the oil and gas industry. This Privacy Policy describes how we collect, use, store, and protect information when you access or use the Platform, visit our website at drillsense.com, or interact with our services, including our AI-powered analysis tools and messaging services.
By accessing or using the Platform, you acknowledge that you have read and understand this Privacy Policy. If you are using the Platform on behalf of an organization, you represent that you are authorized to accept this policy on behalf of that organization.
2. Information We Collect
2.1 Account Information
When you create an account or are provisioned by an administrator, we collect:
- Name, email address, and phone number
- Company or operator affiliation
- Role and access permissions
- Authentication credentials (managed by our identity provider)
2.2 Drilling & Operational Data
Data uploaded to or processed by the Platform, including:
- Drill cuttings photographs and lithology images
- XRF elemental composition data
- Mud log data, surveys, and formation tops
- Real-time drilling parameters (when connected via WITSML or similar feeds)
- Geosteering interpretations and well plans
- Mass spectrometry and gas chromatography data
- Documents and reports forwarded to the Platform via email
2.3 Usage Information
We automatically collect certain information when you use the Platform:
- Device type, browser, operating system, and IP address
- Pages visited, features used, and interaction patterns
- Date and time of access
- Referring URLs
2.4 Communications
When you interact with our conversational AI services or contact support:
- Message content and conversation history
- Voice memos (transcribed and discarded after processing)
- Images shared within conversations
- Email communications sent to Platform-managed addresses
3. How We Use Your Information
We use collected information for the following purposes:
3.1 Service Delivery
- Providing drilling data analysis, visualization, and reporting
- Processing uploaded images through computer vision and AI models
- Delivering real-time drilling insights and alerts
- Generating well reports and geochemical analyses
- Routing data to the correct operator and project
3.2 Platform Improvement
- Improving accuracy of AI models and analysis pipelines
- Identifying and resolving technical issues
- Developing new features based on usage patterns
- Conducting internal analytics and performance monitoring
3.3 Communication
- Responding to support requests and inquiries
- Sending service-related notifications (alerts, reports, status updates)
- Providing conversational AI assistance via messaging services
3.4 Security & Compliance
- Detecting and preventing unauthorized access or misuse
- Maintaining audit logs for compliance purposes
- Enforcing data isolation between operators
- Complying with legal obligations
4. Legal Basis for Processing
We process personal information based on the following legal grounds:
- Contractual necessity: Processing required to deliver the services you or your organization have contracted for.
- Legitimate interests: Improving our services, ensuring platform security, and conducting business operations, balanced against your privacy rights.
- Consent: Where required by applicable law, particularly for optional communications and certain data processing activities.
- Legal obligation: Processing required to comply with applicable laws and regulations.
5. Data Sharing & Third Parties
5.1 Operator Data Isolation
Drilling and operational data is strictly isolated by operator. Data belonging to one operator is never accessible to, shared with, or visible to any other operator. This isolation is enforced at the database level through access control policies.
5.2 Service Providers
We engage trusted third-party service providers to help us operate the Platform. These providers are contractually obligated to protect your information and may only process it on our behalf for the purposes described in this policy. Categories of service providers include:
- Cloud infrastructure and hosting providers
- Identity and authentication services
- AI and machine learning model providers
- Email delivery services
- Data storage and database services
- Messaging platform providers
5.3 When We May Disclose Information
We may disclose your information:
- To comply with a legal obligation, court order, or governmental request
- To protect the rights, property, or safety of DATUM, our users, or the public
- In connection with a merger, acquisition, or sale of assets (with notice to affected users)
- With your explicit consent
5.4 What We Never Do
- We do not sell your personal information or drilling data
- We do not share operator-specific drilling data with other operators
- We do not use your data for advertising or marketing by third parties
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services under your organization's agreement with us. Specifically:
- Account information: Retained for the duration of your account and for a reasonable period after account closure for audit and compliance purposes.
- Drilling and operational data: Retained for the duration of the service agreement with the operator. Upon termination, data is available for export for 90 days, after which it is permanently deleted.
- Usage logs and audit trails: Retained for up to 24 months for security and compliance purposes.
- Conversation history: Retained for the duration of the service agreement for continuity and context.
- Voice memos: Transcribed in real time and the original audio is not permanently stored.
Upon request, we will delete or anonymize your personal information, subject to any legal obligations requiring retention.
7. Data Security
We implement administrative, technical, and physical safeguards designed to protect your information. Our security program includes:
- Encryption of data in transit (TLS 1.2+) and at rest
- Role-based access controls with principle of least privilege
- Row-level security policies enforcing operator data isolation
- Multi-factor authentication for administrative access
- Regular security assessments and vulnerability management
- Comprehensive audit logging of data access and modifications
- Incident response procedures and breach notification protocols
We are currently undergoing a SOC 2 Type II examination. For details on our security posture, visit our Trust Portal.
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
8. AI & Automated Processing
The Platform uses artificial intelligence and machine learning to analyze drilling data, including computer vision for image analysis, natural language processing for conversational assistance, and statistical models for pattern detection. Regarding AI processing:
- AI-generated outputs are advisory in nature and should not be used as the sole basis for operational decisions.
- Your drilling data may be used to improve the accuracy of models that serve your organization, but is never shared across operator boundaries for model training.
- We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
- Conversational AI interactions are logged for service quality and continuity but are not used to build user profiles for advertising.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request your data in a structured, machine-readable format.
- Restriction: Request that we limit processing of your information in certain circumstances.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@datum-ixs.com. We will respond within 30 days of receiving a verifiable request.
10.1 California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of personal information. We do not sell personal information.
11. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.
12. International Data Transfers
The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using the Platform, you consent to this transfer. We implement appropriate safeguards to protect your information during international transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Platform with a revised "Last Updated" date, and, for material changes, by sending a notification to the email address associated with your account at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
14. Contact Information
For questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, contact us at: