AEGIS OVERSIGHT

• Account Information: When you register, we collect your name, email address, company name, and password.
• Payment Information: When you subscribe to a paid plan, we use a third-party payment processor to collect your payment information. We do not store this information ourselves.
• Your Data: We collect and store the data you upload or submit to the service, such as AI model metadata, audit logs, and risk assessments.
• Usage Information: We automatically collect information about how you interact with our Service, such as IP address, browser type, and pages visited.

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: Including account management, user support, and service improvements.
• To Improve Our Service: Analyzing usage patterns to enhance features and user experience.
• To Communicate with You: Sending service-related notifications, updates, and marketing communications (with your consent).
• For Security and Fraud Prevention: Detecting and preventing unauthorized access, fraud, and other malicious activities.
• To Comply with Legal Obligations: Meeting regulatory requirements, responding to legal requests, and enforcing our Terms of Service.
• For Analytics and Research: Understanding how users interact with our Service to develop new features and improve existing ones.

2.1 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the specific data and context:

• Contractual Necessity: Processing necessary to perform our contract with you (e.g., providing the Service).
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving the Service, security).
• Consent: Where you have given explicit consent for specific processing activities.
• Legal Obligation: Processing required to comply with legal or regulatory obligations.

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who help us operate our Service, such as cloud hosting providers and payment processors. These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.

We implement a variety of security measures, including encryption and access controls, to maintain the safety of your personal information and Your Data. However, no method of transmission over the Internet is 100% secure.

4.1 Security Measures

• Encryption: All data transmitted to and from our Service is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: We implement role-based access controls to ensure only authorized personnel can access sensitive data.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Data Backup: Your data is regularly backed up to prevent loss.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. When you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

5.1 Retention Periods

• Account Information: Retained for the duration of your account plus 90 days after closure
• Usage Data: Retained for 24 months for analytics and service improvement
• Audit Logs: Retained for 7 years for compliance purposes
• Payment Information: Retained by our payment processor according to their policies

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

7.1 Access and Correction

You have the right to access, update, and correct your personal information at any time through your account settings or by contacting us.

7.2 Data Portability

You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.

7.3 Deletion

You have the right to request deletion of your personal data, subject to certain exceptions (e.g., legal obligations, security purposes). To request deletion, please contact us at privacy@aegisoversight.com.

7.4 Object to Processing

You have the right to object to certain types of processing, including processing for direct marketing purposes.

7.5 Withdraw Consent

If we are processing your data based on your consent, you have the right to withdraw that consent at any time.

7.6 Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as soon as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after we post any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to be bound by the modified Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: