Privacy Policy

This Privacy Policy explains how AIURION INC. collects, uses, discloses, and protects personal information through EXVIV websites, accounts, workspaces, monitoring and evidence services, machine-readable APIs, accountless x402 purchases, and related communications. It does not govern a third-party website or service you visit separately, including Stripe-hosted checkout, a monitored source, a blockchain explorer, or a wallet provider.

01Information we collect

EXVIV is designed to monitor commercial public pages rather than people. A public page can nevertheless contain incidental personal information such as an author name, employee name, testimonial, job-posting contact, or business contact detail. That information may appear in a raw capture or evidence record when it is part of the selected public page.

02Where information comes from

• From you: when you request a sign-in link, create or join a workspace, choose a monitored source, add workspace material, subscribe, purchase agent intelligence, or contact us.
• From your browser or device: through necessary cookies, request headers, logs, security controls, and optional analytics after consent.
• From service providers: including Stripe for billing, Cloudflare for infrastructure and email, and an x402 facilitator or public blockchain for settlement.
• From public sources: monitored websites and, for selected historical pricing research, public Internet Archive records.
• From workspace members: when another authorized user invites you, assigns a role, or adds shared workspace material.

03How we use information

• Authenticate users, create accounts and workspaces, manage roles, and maintain sessions.
• Collect public sources, preserve evidence, detect and review changes, generate comparisons and briefs, and provide exports.
• Process subscriptions, verify entitlements, prevent duplicate checkout, provide billing management, verify x402 payments, and deliver purchased intelligence.
• Send sign-in links, transactional messages, service notices, security notices, and replies to requests.
• Protect EXVIV, customers, sources, and third parties; prevent fraud, abuse, attacks, and unauthorized access; and diagnose incidents.
• Measure reliability and product performance, improve extraction and review quality, and develop the Service using aggregated or de-identified information.
• Comply with law, tax and accounting duties, sanctions and payment requirements, legal process, and enforceable agreements.

04Legal bases where required

Where European or similar data-protection law requires a legal basis, we process information to perform a contract or take requested pre-contract steps; for legitimate interests in providing, securing, improving, and documenting a business intelligence service; with consent for optional analytics; and to comply with legal obligations. You may withdraw analytics consent at any time through Cookie Settings. Withdrawal does not affect earlier lawful processing.

EXVIV does not make decisions producing legal or similarly significant effects about an individual solely through automated processing. Its classifications and recommendations support business research and remain subject to customer or operator judgment.

05How we disclose information

We do not sell personal information, disclose it to third parties for their own direct marketing, or use it for third-party behavioral advertising. We do not intentionally share personal information for cross-context behavioral advertising. If these practices change, we will update this Policy and provide any required choice before the change applies.

06Public and private boundaries

Public EXVIV pages contain curated company, market, pricing, and reviewed evidence information. Private workspace content is made available only to authorized workspace users and providers needed to operate the Service, unless the customer directs otherwise or disclosure is required by law. Raw public-page captures, pending observations, dismissed observations, and private notes are not published merely because EXVIV stores them.

Public source records and public blockchain transactions may remain available independently of EXVIV even if we correct or remove an EXVIV record. A source correction or rights request may be sent to legal@aiurion.com. A request concerning personal information should be sent to privacy@aiurion.com.

07Cookies, analytics, and tracking signals

EXVIV uses necessary first-party cookies for authentication, magic-link verification, and active workspace selection. We store your cookie choice in local browser storage. Optional Google Tag Manager and analytics technologies do not load until you affirmatively accept analytics. See the Cookie Policy for exact first-party names, purposes, and durations.

EXVIV does not track your activity across unrelated websites for advertising. Browser Do Not Track signals are not standardized; our optional analytics remain off until consent regardless. Where a browser exposes Global Privacy Control, EXVIV treats it as a direction to keep optional analytics disabled unless required law allows and you later make a specific contrary choice.

08Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of record, workspace status, source history, security need, legal and accounting duties, disputes, backups, and whether a public evidence record remains relevant. Authentication sessions are configured for 30 days and magic-link intent cookies for 15 minutes, but related security records may be retained longer for abuse prevention and audit.

Subscription and transaction records may be retained for accounting, tax, chargeback, fraud, and legal needs. Public-source evidence may be retained to preserve time-based comparisons and the integrity of reviewed records. Deletion from active systems may not immediately remove encrypted backups, public blockchain data, third-party records, or information we must retain by law.

09Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include scoped workspace access, HttpOnly session cookies, hashed authentication tokens, rate limiting, validated public-network destinations, and verified Stripe webhook processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal. You may also have the right to complain to a data-protection authority. These rights can be subject to identity verification, legal exceptions, the rights of others, and records we must retain.

To submit a request, email privacy@aiurion.com and identify EXVIV, your account email or relevant source, and the request. We will verify requests proportionately and respond within the time required by applicable law. Authorized agents should provide proof of authority. We will not discriminate against a person for exercising an applicable privacy right.

AIURION INC. currently does not meet the statutory applicability thresholds to be a “business” under the California Consumer Privacy Act and California Privacy Rights Act. Even so, we provide the request channel above, do not sell personal information, and do not intentionally share it for cross-context behavioral advertising. If our obligations change, we will update this Policy and our request process.

11International transfers

AIURION INC. and its providers may process information in the United States and other countries where privacy laws differ from those where you live. Where required, we use appropriate transfer safeguards and contractual protections. Contact us for information about safeguards applicable to a particular transfer.

12Children

EXVIV is intended for business users who are at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

13Policy changes

We may update this Policy as EXVIV, its providers, or legal requirements change. We will post the revised version and effective date here. For material changes, we will provide additional notice through the Service, email, or another reasonable method where required.