Privacy Policy

Last updated: 27 August 2026 · Graffitecs, Lahore, Pakistan.

1. The important part first: the product

Aegis is deployed inside your own infrastructure — your servers, your cluster, your database. Prompts, model responses, tool calls, decision history and the audit log are written to your datastore and stay there.

We do not receive them, relay them, proxy them, or hold a copy. There is no telemetry channel from a deployed gateway back to us, and no "phone home" for licensing. This is a deliberate architectural decision rather than a policy promise: we are not in the path of your most sensitive traffic, so there is nothing for us to disclose, lose, or be compelled to hand over.

If you run Aegis, you are the controller of the data passing through it. This policy does not govern that data, and we cannot access it.

2. What this website collects

Exactly one thing, and only when you choose to give it:

• Your email address, when you submit the waitlist or pilot-request form.

The forms also contain a hidden field that real people never see or fill in. It exists to catch automated spam submissions. Its contents are discarded and never stored.

3. What this website does not collect

Stated explicitly, because most sites do all of these and this one does none:

• No cookies. The site sets none. There is no consent banner because there is nothing to consent to.
• No analytics. No Google Analytics, no product analytics, no session recording, no heatmaps.
• No third-party scripts. Every script and stylesheet is served from this domain. No tag managers, no advertising pixels, no embedded widgets.
• No browser storage. Nothing is written to localStorage or sessionStorage.
• No tracking across sites, and no profiling or automated decision-making about visitors.

4. Infrastructure that necessarily sees requests

Serving a website means some parties handle the request in order to deliver it. We name them rather than leave them implied:

• Cloudflare sits in front of this site as a CDN and DDoS filter. It processes connection metadata — IP address, user agent, requested URL — to route and protect traffic. Cloudflare may set its own security cookie for bot detection; that is Cloudflare's, not ours, and is governed by its policy.
• Our origin server is hosted in the European Union and keeps standard web-server logs (IP, timestamp, path, status) for operational and security purposes.

5. How we use your email, and for how long

Only to reply to you about Aegis — pilot access, availability, or the answer to a question you asked. We do not send marketing campaigns, we do not sell or rent it, and we do not share it with third parties for their own purposes.

We keep it until you ask us to delete it, or until it is clear the conversation has ended and the address serves no purpose.

6. Your rights

You can ask us to confirm what we hold about you, correct it, delete it, or send you a copy. If you are in the UK, EU, or another jurisdiction with equivalent law, these rights are yours by statute; we extend them to everyone regardless.

Because the only thing we hold is an email address you typed in yourself, "delete everything you have about me" is a request we can honour completely and quickly.

Write to [email protected]. If you believe we have handled your data improperly, you also have the right to complain to your local data protection authority.

7. Security

The site is served over TLS. The form submission goes to our own API over HTTPS. Access to the stored addresses is limited to the people who need it.

8. Children

Aegis is a business product. The site is not directed at children and we do not knowingly collect information from them.

9. Changes

If this policy changes we will update the date at the top. If a change is material — if we begin collecting something we do not collect today — we will say so plainly rather than quietly revising the text.

10. Contact

Graffitecs, Lahore, Pakistan. Privacy enquiries: [email protected].