PRIVACY
Privacy.
What Aegisora processes, why, and how to reach us.
Controller
Eray Özer (trading as Aegisora), Zurmaiener Straße 98, 54292 Trier, Germany. Email: eray@aegisora.org. You may lodge a complaint with a data protection supervisory authority; for Rheinland-Pfalz this is the LfDI Rheinland-Pfalz.
What we process
- Account information: email address, name, and company.
- Authentication data, handled by our authentication provider.
- Workspace and product configuration, such as agents and policies.
- Runtime metadata and decision and evidence records that your integration submits through the API.
- Support and sales communications you send us.
Payments and sensitive data
Payments are processed by Stripe. We do not store card numbers. We store Stripe customer and subscription identifiers, payment status and the billing details you enter at checkout. Pilot workspaces are non-production: do not submit sensitive personal, health, or payment data.
Purposes
Operating accounts and workspaces, securing the service, providing support, and evaluating pilots. The final list of purposes and legal bases is pending legal review.
Cookies
We use essential cookies to run the site. We do not use analytics or advertising cookies. We use Sentry (EU region) for error monitoring; error reports can include your IP address and browser details.
Retention
A retention schedule has not been finalized. It will be published here once approved.
Providers and transfers
Providers that process data for us are listed on the subprocessors page. Primary hosting is in Frankfurt, Germany (Supabase eu-central-1, Vercel functions in fra1). Error monitoring uses the Sentry EU region. Some providers are headquartered outside the EU, so transfers may occur and rely on the data processing terms of each provider.
Your rights and contact
To request access, correction, or deletion of your data, write to hello@aegisora.org.