Privacy Policy

Effective date: July 12, 2026

1. Interpretation and Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• Account: A unique account created for you to access specific parts of our Service, secured by credentials you establish.
• Affiliate: An entity that controls, is controlled by, or is under common control with a party, where "control" means direct or indirect ownership of 50% or more of the voting shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority.
• Company: AegiSight AI, operating from the United States.
• Cookies: Small text files placed on your Device by a website that collect and store certain information about your browsing activity. Cookies cannot execute code or deliver viruses.
• Device: Any device capable of accessing the Service, including but not limited to computers, mobile phones, tablets, and other internet-connected devices.
• Personal Data: Any information relating to an identified or identifiable individual, including but not limited to name, contact information, IP address, and online identifiers.
• Service: The AegiSight AI website (www.aegisight.ai and associated subdomains), the AegiSight AI platform (including tenant workspaces, the Coverage catalog, proof workflows such as Risk Audit, and related APIs), and any applications or services provided by AegiSight AI.
• Service Provider: Any natural or legal person who processes data on behalf of the Company, including third-party companies or individuals employed to facilitate the Service, provide the Service, perform related services (such as hosting, maintenance, analytics, marketing, and customer service), or assist in analyzing Service usage. We carefully select our Service Providers and ensure they comply with applicable data protection laws.
• Third-party Identity Provider: An enterprise or social identity service (for example Google or an OIDC provider, where enabled for your environment) through which you may authenticate to the Service.
• Usage Data: Data collected automatically, generated by the use of the Service or from the Service infrastructure itself, such as the duration of a page visit, pages viewed, and interactions with Service features.
• Website: The AegiSight AI website, accessible from www.aegisight.ai.
• You/Your: The individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

2. Information Collection and Use

We collect the following types of data:

Personal Data

We may collect Personal Data when you interact with our Service, such as when you create an account, complete onboarding, request early access, contact us, or engage with a subscription or pilot program. This information may include:

• Email address
• First name and last name
• Phone number
• Address (State, Province, ZIP/Postal code, City)
• Company name (if applicable)
• Job title (if applicable)
• Any other information you choose to provide

Usage Data

Usage Data is collected automatically and may include:

• Your Device's Internet Protocol address (IP address)
• Browser type and version
• Operating system
• Referring website
• Pages of our Service you visit
• Time and date of your visit
• Time spent on those pages
• Links clicked
• Unique device identifiers
• Other diagnostic data

When you access the Service through a mobile device, we may collect additional information, such as the type of mobile device, your mobile device's unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers, and other non-sensitive data.

Tenant-Scoped Operational Data

When you use platform features, we process data inside your tenant workspace to deliver the Service. This is separate from your account profile and may include:

• Onboarding responses (risk scope, category interest, and configuration choices)
• Tenant settings (organization name, newsletter preferences, partner program requests)
• Risk Audit packages, dataset manifests, and proof-run inputs you upload or connect
• Signed Reports, Evidence Ledger entries, and related proof artifacts produced in your workspace

Customer telemetry and audit packages remain tenant-scoped and are not aggregated across customers for operator analytics. Sandbox environments are intended for evaluation; do not upload regulated production data until residency, retention, and data-processing terms match your target environment.

Information from Third-Party Identity Providers

Where enabled, you may authenticate using a third-party identity provider. If you choose to do so, we may collect Personal Data associated with your identity on that provider, such as your name, email address, and profile information authorized for sharing. We only collect what the provider makes available for authentication and account provisioning.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies (beacons, tags, scripts, pixels) to track activity on our Service, store certain information, personalize your experience, and improve and analyze the Service. These technologies may include:

• Cookies: Small text files placed on your Device. We use both session cookies (deleted when you close your browser) and persistent cookies (remain on your Device for a set period). You can control cookies through your browser settings, but disabling cookies may affect the functionality of some parts of our Service.
• Web Beacons: Small electronic files (clear gifs, pixel tags) that allow us to count users who have visited certain pages or opened an email, and other website statistics.

We use cookies for the following purposes:

• Strictly Necessary Cookies: These cookies are essential for the Service to function properly and cannot be disabled. They enable core functionalities such as account login and security.
• Performance/Analytics Cookies: These cookies collect information about how you use the Service, such as which pages you visit and how long you stay. This information helps us improve the Service.
• Functionality Cookies: These cookies allow us to remember choices you make (e.g., language preference) and personalize your experience.
• Marketing/Advertising Cookies: These cookies may be used to deliver targeted advertisements based on your interests. We may also use these cookies to track the effectiveness of our marketing campaigns.

3. Use of Your Personal Data

We may use your Personal Data for the following purposes:

• Provide and maintain the Service: Including monitoring Service usage, troubleshooting technical issues, and providing customer support.
• Manage your Account: Facilitating account creation, login, and access to Service features.
• Process transactions: Fulfilling subscription requests, pilot engagements, and related customer service.
• Communicate with you: Sending you service-related notifications, updates, marketing communications (if you have opted in), and responding to your inquiries.
• Personalize your experience: Tailoring the content and features of the Service to your interests and preferences.
• Improve the Service: Analyzing Service usage data to identify trends, improve functionality, and develop new features.
• Legal compliance: Complying with applicable laws and regulations.
• Marketing: With your consent, we may use your Personal Data to send you marketing communications about our products and services. You can opt out of receiving these communications at any time.
• Other purposes: We may use your information for other purposes with your consent or as permitted by law.

4. Sharing Your Personal Information

We may share your personal information in the following situations:

• Service Providers: We may share your information with Service Providers who perform services on our behalf, such as hosting, data analysis, payment processing, customer service, and marketing. We require our Service Providers to protect your information and only use it for the purposes we specify.
• Business Transfers: In connection with, or during negotiations of, any merger, acquisition, financing, or sale of all or a portion of our assets. In such events, your information may be transferred to the acquiring entity.
• Affiliates: We may share your information with our affiliates, who are required to comply with this Privacy Policy.
• Legal Authorities: We may disclose your information to law enforcement or other government agencies if required by law or in response to a valid legal request.
• Protection of Rights: We may disclose your information to protect our rights, property, or safety, or the rights, property, or safety of others.
• With your consent: We may share your information for any other purpose with your explicit consent.

5. Data Security

We take reasonable measures to protect your Personal Data from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

6. Data Retention

We will retain your Personal Data only for as long as necessary for the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

7. Your Rights

You have certain rights regarding your Personal Data, including:

• Access: You have the right to access the Personal Data we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
• Deletion: You have the right to request that we delete your Personal Data under certain circumstances.
• Objection: You have the right to object to the processing of your Personal Data for certain purposes, such as direct marketing.
• Restriction: You have the right to request that we restrict the processing of your Personal Data under certain circumstances.
• Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Withdrawal of Consent: If we have collected your Personal Data based on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 15 days. We may require you to verify your identity before processing your request.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child under 13 has provided us with Personal Data, please contact us at [email protected]. If we become aware that we have collected Personal Data from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers. If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

9. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites. We encourage you to review the privacy policies of any websites you visit.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy. We may also provide you with additional notice, such as via email, depending on the nature of the changes. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service following the posting of such changes constitutes your acceptance of the revised Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]