Privacy Policy

This Privacy Policy ("Policy") describes how FeltSense, Inc., doing business as Aegis AI ("Company," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with the Aegis AI platform, the website located at aegis-ai.com, and all related services (collectively, the "Service"). This Policy applies to all individuals who access or use the Service, including those who submit personal information through our waitlist or early-access registration forms. By accessing or using the Service, you acknowledge that you have read and understood this Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you interact with the Service. As of the date of this Policy, the sole category of personal information we collect directly from users is:

• Email Address. When you submit your email address through our waitlist or early-access registration form, we collect and store your email address for the purposes described in Section 2 below.

We do not collect names, physical addresses, phone numbers, payment information, government-issued identifiers, or any other categories of personal information through the waitlist form.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect certain technical information through cookies, web beacons, pixels, and similar tracking technologies, including but not limited to:

• IP address (which may be anonymized or truncated prior to storage);
• Browser type and version;
• Operating system;
• Referring URL and pages visited;
• Date, time, and duration of access;
• Device identifiers and general geolocation data (city/region level only).

This information is collected through Vercel Web Analytics and is used solely for the purposes of analyzing aggregate usage patterns and improving the Service. Vercel Web Analytics is designed to be privacy-friendly and does not use cookies for tracking purposes.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Waitlist Administration. To manage your position on our early-access waitlist and notify you when the Service becomes available to you.
• Communications. To send you product updates, launch announcements, and promotional materials related to the Service. You may opt out of promotional communications at any time by following the unsubscribe instructions contained in each email or by contacting us directly.
• Service Improvement. To analyze aggregate usage data to improve the performance, functionality, and user experience of the Service.
• Legal Compliance. To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area ("EEA") or the United Kingdom, our legal bases for processing your personal information are as follows:

• Consent. You provide your email address voluntarily by submitting the waitlist form, constituting your explicit consent to the processing described herein. You may withdraw your consent at any time.
• Legitimate Interests. We process aggregate, non-identifying analytics data based on our legitimate interest in understanding how users interact with the Service and improving its functionality.

4. Data Sharing and Disclosure

We do not sell, rent, lease, or otherwise commercially transfer your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers. We may share your email address with trusted third-party service providers who perform services on our behalf, including email delivery platforms (e.g., Resend) and hosting providers (e.g., Vercel, Supabase). These providers are contractually obligated to use your information solely for the purposes of providing services to us and are prohibited from using it for their own purposes.
• Legal Requirements. We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect and defend our rights or property, (c) prevent fraud or other illegal activity, or (d) protect the personal safety of users or the public.
• Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of such transaction. We will notify you via email and/or a prominent notice on the Service of any change in ownership or uses of your personal information.

5. Data Retention

We retain your email address for as long as it is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically, we will retain your email address for the duration of the waitlist period and, if applicable, for the duration of your use of the Service. Upon your request or when your email address is no longer necessary for the stated purposes, we will securely delete or anonymize it within thirty (30) days.

6. Data Security

We implement commercially reasonable technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, without limitation, encryption of data in transit (TLS 1.3) and at rest (AES-256), access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your information.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right of Access. You may request confirmation of whether we process your personal information and obtain a copy of such information.
• Right to Rectification. You may request that we correct any inaccurate or incomplete personal information.
• Right to Erasure. You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Restrict Processing. You may request that we restrict the processing of your personal information under certain circumstances.
• Right to Data Portability. Where technically feasible, you may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing performed prior to withdrawal.
• Right to Opt Out. You may opt out of receiving promotional emails by following the unsubscribe link in any such email or by contacting us directly.

To exercise any of these rights, please contact us using the information provided in Section 12 below. We will respond to verifiable requests within thirty (30) days or as otherwise required by applicable law.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights regarding your personal information. The categories of personal information we collect are limited to identifiers (specifically, email addresses). We do not sell or share (as defined under the CCPA/CPRA) your personal information for cross-context behavioral advertising purposes. You have the right to request disclosure of the categories and specific pieces of personal information we have collected, to request deletion of your personal information, and to not be discriminated against for exercising your privacy rights.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Policy, including the use of Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

10. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18), and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our records. If you believe that a child under 18 has provided us with personal information, please contact us immediately using the information in Section 12 below.

11. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by posting the revised Policy on the Service and updating the "Last updated" date above. We encourage you to review this Policy periodically. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

FeltSense, Inc. (d/b/a Aegis AI)
Email: support@feltsense.com

For data protection inquiries from the EEA or UK, you may also contact your local supervisory authority.