AegisLedgerAI is an evidence, risk, compliance, and security console. This privacy statement describes the data classes the console processes, the purposes, and your choices. It is not legal advice.
Data classes
The public dashboard renders synthetic, non-identifying sample data only. It does not collect or display real network transactions, personal identities, credentials, or provider payloads. Authenticated surfaces (when enabled) process compliance matter metadata, evidence hashes, audit records, and quarantine entries — stored as bounded metadata and hashes, not raw payloads.
Purposes and lawful basis
Data is used to verify proof packages, manage review and quarantine, and display derived status. Processing is performed under an explicit, documented purpose per record. The console does not infer owner authority or sell data.
Storage and retention
Evidence retention is policy-driven. Deletion creates a tombstone where audit requirements apply; evidence needed for an active legal hold or incident is never deleted. Quarantine, incident, ledger, and proof records are append-only.
Cookies and local storage
The console uses a secure, HTTP-only, same-site, host-only session cookie for authenticated access. Local storage may hold non-sensitive interface preferences. No tracking cookies are used on the public surface.
Telemetry
Operational telemetry is structured and limited to safe fields (timestamp, level, service, event type, correlation IDs, safe actor class, policy code, duration). No raw payloads, secrets, signed URLs, prompts, results, or private identifiers appear in logs, metrics, or analytics.
Your rights
You may request access to, correction of, or deletion of your personal data subject to audit and legal-hold obligations. To exercise these rights, contact us through the Contact page.