Privacy policy

Last updated: October 23, 2026

This policy explains how Aegis Technologies Inc. (“Aegis”, “we”, “us”), a Delaware corporation, handles personal information. It covers our websites (www.aegistechnologies.tech, www.aegis-aeroassure.com, www.aegis-autoassure.com, www.aegis-medassure.com and www.aegis-skyassure.com), our emails and calls, and the business side of our engagements. Our products are sold to businesses. This policy is about people acting in a work role: a quality manager who fills in the fit check, a consultant who refers a client, or an employee named in a training record.

The records a customer sends us for an Audit Defense Pack are covered by the signed Audit Defense Pack Services Agreement and its data-handling exhibit (Exhibit B). Section 4 summarizes them. If this policy and a customer’s signed agreement differ, the agreement controls for that customer.

1. What we collect

Information you give us

• Fit check answers. Your role, company size, certification status, audit timing, the systems you use, which records you could export, whether those records contain restricted data, and whether the price fits.
• Contact details. Your name, work email, and optionally your company, phone number, a note, and whether you want occasional updates (“keep me posted”). If you choose “Buy the pack now” after the AeroAssure fit check, also your company’s name, your job title and your phone number, so we can prepare the agreement and the invoice.
• Messages and calls. What you write to us, and our notes from calls. When you book a call, the scheduling service gives us the name, email and answers you entered there.
• Business and billing details. For customers and partners: the people named in an agreement or order form, billing contacts, purchase order numbers and tax-exemption status.
• Job and contractor applications. What you send when you apply, such as your CV, work history and references.

Information collected automatically

• Server logs. The company that hosts our websites records standard request details: IP address, browser type, the page requested and the time.
• Fonts and media from other hosts. Our pages load their fonts from Google Fonts. Some videos and sample files load from Wix’s file servers. Those providers receive your IP address and browser details when your browser fetches the files.
• Walkthrough count. When you play the walkthrough video on www.aegis-aeroassure.com, the page tells our booking page that it was played and, later, that three-quarters was watched. It sends a random number kept for that browser tab (in session storage) and nothing else: no name, email address or cookie. We use the counts only to see how well the walkthrough explains the pack.
• Storage in your browser. On our sites other than www.aegis-aeroassure.com, the quick fit check saves your answers in your browser’s local storage, so they are still there if you come back. They stay until you clear your browser data. Campaign tags in a link you followed (utm_ tags) and the fit check you just completed sit in session storage until you close the tab. This information stays on your device. It reaches us only if you send the fit check email, which includes those campaign tags, or, on www.aegis-aeroassure.com, when you open the fit check, whose link carries the campaign tags to our booking page.

Information from other sources

• Business contact data. To find suppliers and consultants who may need our products, we collect work contact details (name, job title, employer, work email, work phone, LinkedIn profile address) and company facts. Our sources are business-data providers, company websites, LinkedIn, and trade and certification directories.
• Email delivery data. Our outbound email service records whether each message was delivered, bounced or answered. Where the feature is turned on, it also records whether a message was opened or a link clicked.
• Referrals. A consultant or partner who introduces you may give us your name, contact details and a short description of your needs.

2. How we use it

• To answer you, judge whether a product fits, and arrange calls.
• To prepare and carry out an agreement with you or your company, including invoicing, collecting payment, delivering the work and supporting you afterwards.
• To contact businesses about our products by email or LinkedIn, and to send updates to people who asked for them. Every marketing email tells you how to opt out.
• To run our partner and referral program, including working out and paying partner fees.
• To consider job and contractor applications.
• To run and secure our websites and services, and to prevent abuse.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.

We use AI tools in our own work, for example to draft replies, prepare call notes and research companies. These tools are covered in section 5. Nobody is subject to a decision with legal or similarly significant effects that is made by automated means alone. The fit check result is only a first indication. A clean AeroAssure result lets you choose to buy straight away, and we then email you the agreement and the invoice; any other result goes to a call with a person, and you can always ask for one.

3. Restricted data: please do not send it

Do not send us controlled unclassified information (CUI), ITAR- or EAR-controlled technical data, classified information, records a contract or law stops you sharing, or sensitive personal information such as government ID numbers, financial account numbers or health information. This applies to the website, the fit check, email and every other channel. If restricted data reaches us anyway, we stop work on it, restrict access to it, tell you, and delete it.

4. Customer records during an engagement

For an Audit Defense Pack, the customer sends us quality records: CAPA and nonconformance logs, calibration lists, training matrices, supplier lists, document registers, audit findings and similar registers. In these records, people appear only as names, employee IDs, job roles and qualification dates. For this information we act as the customer’s service provider (processor), and the customer’s signed agreement governs. In summary:

• Exchange. Records reach us through a private Google Drive folder shared only with the people you name, not as email attachments. The finished pack is returned the same way.
• Processing. We check and process records on an Aegis-controlled server in Google Cloud with encrypted storage, which only Aegis can reach. AI-assisted parts of the analysis are processed by Anthropic (Claude), under terms and account settings that do not allow Anthropic to use the records to train its models. A person checks every file before analysis starts and reviews every page of the pack before release.
• Use. We use a customer’s records only to produce that customer’s pack. We do not use them for another customer, for benchmarking, or to train any model, unless the customer agrees separately in writing.
• Retention and deletion. We keep the records for 30 days after delivery so we can hold the review call and make any corrections. We then delete them from our active systems within 30 days, and from backups within 90 days. A customer can ask for earlier deletion at any time, and we confirm deletion in writing. A subscriber's records are deleted the same way, 30 days after each pack is delivered.
• Record copy. The Services Agreement allows us to keep one archived copy of the delivered pack and its evidence manifest for three years after delivery. That copy is kept confidential and used only as a record of what we delivered and to defend claims. For a subscriber, we also use it to compare each new pack with the previous one. It is then deleted.

Our data and security page explains more.

5. Who we share it with

We share personal information only with the service providers who help us run the business, and only for that purpose. Each is bound by its own terms to protect the information:

We may also share information:

• with our accountants, bank, insurers and lawyers, under duties of confidentiality;
• with a consultant or partner who introduced you, limited to whether and when you bought, so that we can pay their fee. We never share your records or your pack with them unless you ask us to;
• when the law requires it, or to protect our rights, our customers or the public;
• with a buyer of, or successor to, our business, which must keep this policy’s protections in place.

6. How long we keep it

• Fit check answers and emails, enquiries and call notes: 24 months after our last contact with you, unless you become a customer or partner.
• Business contact data used for outreach: 24 months after our last activity with that contact. If you opt out, we keep only your email address on a do-not-contact list, so that we never email you again.
• Agreements, invoices and payment records: as long as tax and accounting law requires, usually seven years.
• Customer records in an engagement: as in section 4.
• Job and contractor applications: 12 months after the decision, unless you join us.
• Server logs: as long as our hosting provider keeps them.

7. Your choices and rights

Whichever state or country you are in, you can ask us to:

• tell you what personal information we hold about you and send you a copy;
• correct it;
• delete it;
• stop using it for marketing. Every marketing email has an opt-out, and you can also reply “no” or email us.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for profiling with legal or similarly significant effects, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of sale and sharing anyway.

To make a request, email jamestporter@aegistechnologies.tech with the subject “Privacy request”. We may need to confirm your identity first, usually by replying to the email address we hold for you. An authorized agent can make a request for you with your signed permission. We answer within 45 days. If we turn your request down, we tell you why, and you can appeal by replying with “Appeal” in the subject. We will answer the appeal in writing. If you are not satisfied after an appeal, you can contact your state attorney general. We do not treat you differently for using these rights.

Customer records. If your details are in quality records an employer sent us, we hold them on that company’s behalf. We will pass your request to that company and act on its instructions.

Visitors in the European Economic Area, the United Kingdom or Switzerland. We rely on our legitimate interests in running and marketing a business-to-business service, on steps you ask us to take before entering a contract, on performing a contract, and on legal obligations. You also have the right to object to processing and to restrict it, and to complain to your data protection authority. We are based in the United States, and our providers process information in the United States and in the other countries where they operate.

8. Security

We protect personal information with safeguards suited to a small company: encrypted connections to our websites, encrypted storage and transfer for customer records, access limited to the people who need it, and providers chosen for their security. No method is completely secure. If a breach affects your personal information, we will tell you as the law and our agreements require.

9. Children

Our websites and products are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16.

10. Other websites

Our pages link to other services, such as LinkedIn, Google and Square. Their own privacy policies govern what they collect.

11. Changes to this policy

When we change this policy, we post the new version here with a new date. If a change materially affects customers, we also tell them by email before it applies to their records.

12. Contact us

Aegis Technologies Inc.
300 Delaware Ave, Suite 210, Wilmington, DE 19801
jamestporter@aegistechnologies.tech