Privacy Policy

1. Introduction

AegisPlane ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI governance platform.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and organization details.

Usage Data: We collect information about how you interact with our platform, including feature usage, configuration changes, and performance metrics.

AI Interaction Metadata: AegisPlane processes AI requests as a gateway. We record metadata (timestamps, model used, token counts, cost) but never store raw prompts, responses, or conversation content.

PII Handling: PII detected in transit is tokenized for processing and immediately discarded. We do not persist personally identifiable information from your AI interactions.

3. How We Use Your Information

• Providing and maintaining the AegisPlane platform
• Processing your transactions and managing your subscription
• Sending you service-related communications
• Improving our platform and developing new features
• Complying with legal obligations

4. Data Retention

Account data is retained while your account is active. Audit trail data is retained according to your plan's retention period. You can request deletion of your data at any time.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), zero-trust architecture (SPIFFE/SPIRE mTLS), and role-based access control.

6. Your Rights

Under GDPR and applicable laws, you have the right to access, correct, delete, and port your data. Contact privacy@aegisplane.com to exercise these rights.

7. Contact

For privacy inquiries: privacy@aegisplane.com