Privacy Policy

1. Who we are and what this policy covers
2. Information we collect
3. Cookies, pixels, and similar technologies
4. How we use information
5. Legal bases (EEA, UK, and Switzerland)
6. How we share information
7. Customer data in the Proviguard platform
8. How long we keep information
9. Security
10. Your choices and rights
11. Additional information for U.S. state residents
12. International transfers
13. Children
14. Third-party sites
15. Changes to this policy
16. Contact us

1. Who we are and what this policy covers

Proviguard, Inc. ("Proviguard," "we," "us," or "our") builds a governance and control platform for AI agents in regulated industries. This Privacy Policy explains how we collect, use, share, and protect personal information through our website at proviguard.ai and its subdomains (the "Site"). It also covers our related communications with you, such as email, demos, and events, and explains the choices you have.

For personal information covered by this policy, Proviguard is the "controller" or "business," meaning we decide how and why it is processed. This policy does not cover data that our customers process through the Proviguard platform. Section 7 explains how that data is handled.

2. Information we collect

Information you give us

• Contact and inquiry details: your name, work email address, company, job title, phone number (if you include one), and the content of your message when you email us, request access, or apply to a design-partner or partner program.
• Meeting and event details: information you share when you schedule or attend a demo, meeting, webinar, or event with us.
• Recruiting details: if you apply for a job, your résumé and the information you include in your application.

Please do not send us sensitive personal information, such as government ID numbers, financial account numbers, or health information, or confidential customer data through the Site or by email unless we have agreed in writing to receive it.

Information collected automatically

• Device and log data: IP address, browser type and version, operating system, device type, language settings, and approximate location (city or region) inferred from your IP address.
• Usage data: the pages you view, links you click, referring and exit pages, and the date, time, and length of your visit.

Information from third parties

• Business-visitor identification: our analytics provider (see Section 3) may match your IP address or device data against business databases. This can tell us which organization a visitor is likely from. In some cases it can also tell us professional details, such as the name, job title, and work email of an individual associated with the visit.
• Publicly available and business sources: professional information from public sources, such as company websites and professional networking profiles, and from business-contact data providers. We use it to understand who is interested in Proviguard and to keep our records accurate.
• Partners and referrals: information from partners, event organizers, or people who refer you to us.

3. Cookies, pixels, and similar technologies

The Site uses a small number of third-party technologies:

• Visitor analytics and identification (1eye.ai). We load a JavaScript pixel from 1eye.ai. It collects device, log, and usage data and may set cookies or similar identifiers. We use it to measure Site traffic and to identify the businesses, and in some cases the business contacts, that visit the Site. The provider processes this data on our behalf and under its own privacy policy.
• Web fonts (Google Fonts). We load fonts from Google's servers. Your browser therefore sends your IP address and basic browser information to Google when you visit the Site. Google's privacy policy applies to that data.

You can set your browser to block or delete cookies and to block third-party scripts. If you do, parts of the Site may display differently. The Site honors the Global Privacy Control (GPC) signal as a request to opt out of sale and sharing, as described in Section 11. Because there is no common industry standard for "Do Not Track" browser signals, we do not respond to them separately.

4. How we use information

• To respond to your inquiries, schedule demos, and evaluate access, design-partner, and partnership requests.
• To send you information about Proviguard that you have asked for, or that is related to a conversation you started. You can unsubscribe at any time.
• To operate, secure, maintain, and improve the Site, and to understand overall interest in our products.
• To identify organizations that may be interested in Proviguard and to tailor our business-to-business outreach.
• To evaluate job applicants.
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• To comply with law, enforce our Terms of Use, and protect the rights, property, and safety of Proviguard and others.

We do not use information collected through the Site to train artificial-intelligence models.

5. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these legal bases:

• Legitimate interests: operating and securing the Site, understanding business interest in Proviguard, and responding to and following up with business contacts. In each case we weigh our interests against your rights.
• Contract: taking the steps you request before entering into an agreement with us.
• Consent: where the law requires it, for example for certain cookies or for marketing emails. You may withdraw consent at any time.
• Legal obligation: where we must process information to comply with law.

6. How we share information

We share personal information only in these situations:

• Service providers: vendors that help us run the Site and our business, such as hosting, analytics and visitor identification, email, scheduling, customer-relationship management, and recruiting. They act on our instructions.
• Professional advisers: lawyers, accountants, auditors, and insurers, under confidentiality obligations.
• Legal and safety reasons: to comply with law, a subpoena, or another legal process, or to protect the rights, property, or safety of Proviguard, our customers, or others.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to customary confidentiality protections.
• With your consent or at your direction.

We do not sell personal information for money. Section 11 explains how some U.S. state laws treat our use of analytics and visitor-identification tools, and how to opt out.

7. Customer data in the Proviguard platform

Customers process data through the Proviguard platform under their own written agreements with us, such as a master services agreement, an order form, and a data processing addendum. For that data, Proviguard acts as the customer's processor or service provider, and the customer's agreement and privacy notices govern it, not this policy. The platform is designed to minimize data exposure. Personal information is tokenized before an AI model sees it, and in Hybrid and Air-Gapped deployments it does not leave the customer's own environment.

If you are an individual whose information a Proviguard customer may process, please send any privacy request directly to that organization. If you contact us, we will forward your request to the relevant customer where we can identify them.

8. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy. Typical retention periods are:

• Inquiry and business-contact records: for the duration of our business relationship or discussions, and up to three years after our last interaction.
• Site analytics and log data: generally no more than 24 months.
• Job applications: up to two years, unless you ask us to delete yours sooner.

We may keep information longer if the law requires it, or to resolve disputes, enforce agreements, or protect our legal rights. When we no longer need information, we delete it or de-identify it.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and least-privilege access for our personnel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. To report a security concern, email info@proviguard.ai with "Security" in the subject line.

10. Your choices and rights

Depending on where you live, you may have the right to:

• Know about and access the personal information we hold about you, and receive a portable copy of it.
• Correct inaccurate information.
• Delete your information.
• Object to or restrict certain processing, including processing based on our legitimate interests.
• Opt out of marketing communications, of "sale" or "sharing," and of targeted advertising.
• Withdraw consent where we rely on it. This does not affect processing that took place before you withdrew it.

How to make a request. Email info@proviguard.ai with "Privacy Request" in the subject line. We will respond within the time the law requires. To protect your information, we may need to verify your identity before we act, usually by confirming details we already hold. You may use an authorized agent to make a request for you. We may ask the agent for proof of authority and ask you to verify your identity directly.

Marketing emails. Every marketing email we send has an unsubscribe link. You can also email us to opt out. We may still send you non-marketing messages, such as replies to your inquiries.

Appeals and complaints. If we decline your request, you may appeal by replying to our decision, and we will review it. You may also complain to your local data protection authority or your state attorney general.

We will not discriminate against you for exercising any of these rights.

11. Additional information for U.S. state residents

This section supplements the rest of the policy for residents of California and of other U.S. states with comprehensive privacy laws. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 4:

• Identifiers: name, email address, IP address, and online identifiers.
• Professional or employment-related information: employer, job title, and, for applicants, résumé details.
• Internet or other electronic network activity: browsing and interaction data from the Site.
• Approximate geolocation: location inferred from your IP address. This is not precise geolocation.
• Inferences: likely organizational affiliation and business interest in our products.

We disclose these categories to the recipients described in Section 6 for business purposes. We do not knowingly collect "sensitive personal information" through the Site, and we do not use or disclose it for purposes that would trigger a right to limit its use.

Sale and sharing. We do not exchange personal information for money. However, some state laws may treat our use of third-party analytics and visitor-identification tools as a "sale," or as "sharing" for cross-context behavioral advertising. You can opt out of any such sale or sharing in either of these ways:

• Enable the Global Privacy Control signal in your browser.
• Email info@proviguard.ai with "Do Not Sell or Share" in the subject line.

We do not knowingly sell or share the personal information of anyone under 16.

12. International transfers

Proviguard is based in the United States, and our service providers may process information in the United States and in other countries. Data protection laws there may differ from the laws where you live. When we transfer personal information out of the EEA, the UK, or Switzerland, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the related UK and Swiss addenda.

13. Children

The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Third-party sites

The Site may link to websites and services that we do not operate. Their own privacy practices apply, and we are not responsible for them.

15. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above. If we make a material change, we will give additional notice, for example by posting a notice on the Site. If you keep using the Site after a change takes effect, the updated policy will apply to you.

16. Contact us

If you have questions about this policy or our privacy practices, contact:

Proviguard, Inc.
Attn: Privacy
Email: info@proviguard.ai