AEGISYST
The AI Detection Engineering Platform
Legal

Privacy Policy

Last updated: July 20, 2026

1. Who we are

Aegisyst is operated personally by the site owner (referred to as "we", "us", or "Aegisyst") and is reachable at support@spectreai.in. This site (aegisyst.com) is the sole point of contact.

2. Data we collect

  • Account data: email address, hashed password, role (Admin / Analyst / Viewer), and account creation timestamp.
  • Product data you create: detection rules, threat-intel notes, sandbox test logs you upload, and audit-log entries generated by your actions.
  • Usage analytics: anonymous page views and feature interactions via Google Analytics 4 (if enabled). No personally identifiable content is sent to the analytics provider.
  • Technical logs: standard server logs (IP address, user-agent, timestamp) kept for 30 days for security/abuse investigation.

3. How we use the data

  • To provide the Aegisyst service (authentication, rule storage, audit logging).
  • To improve the product (aggregated analytics).
  • To investigate security incidents or terms-of-service violations.
  • To respond to your support requests.

We do not sell your data. We do not share it with advertisers.

4. Third-party processors

  • OpenAI (via Emergent): Rule-generation prompts contain the MITRE technique ID and a short natural-language description of the intended detection. Uploaded sample logs, alert data, and IoCs are never sent to the AI provider.
  • Google Analytics 4: Anonymous usage metrics only (if enabled).
  • Emergent (hosting): Application hosting and MongoDB database.

5. Data retention

Account and product data are retained for the lifetime of your account. On deletion request (email support@spectreai.in), we remove your data within 30 days. Server logs are auto-purged after 30 days.

6. Security

Passwords are hashed with bcrypt. All traffic is TLS 1.2+ encrypted. Access is role-based (RBAC). A tamper-evident audit log records every rule change, approval, and export.

7. Your rights (GDPR / DPDP)

  • Right to access — request a copy of your data.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — delete your account and data.
  • Right to data portability — export your rules and audit log.

Email support@spectreai.in to exercise any of these.

8. Cookies

Aegisyst uses a single first-party cookie (JWT session token) required for login. If analytics are enabled, Google sets its own analytics cookies. No third-party advertising cookies are used.

9. Changes to this policy

Material changes will be posted on this page with a new "Last updated" date. Continued use of Aegisyst after changes constitutes acceptance.

10. Contact

Questions? Email support@spectreai.in.