Privacy Policy

Effective Date: January 13, 2026 | Version 7.2

Ashes2Echoes, LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services, including METATRON v7.2, FORGE v2.1, and AIORA.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, payment information when you subscribe
• Communications: Messages you send to us, feedback, support requests
• User Content: Prompts, queries, and inputs you submit to the Services

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs

1.3 Evidence Ledger Data

When using METATRON v7.2, the Evidence Ledger may store:

• Claim IDs and verification status
• Source URLs and retrieval timestamps
• SHA256 hashes of evidence spans
• Agent and model version identifiers

This data is used for audit trails and quality assurance in accordance with ALCOA+ compliance standards.

2. How We Use Your Information

Purpose	Legal Basis
Provide and maintain Services	Contract performance
Process payments and subscriptions	Contract performance
Improve and optimize Services	Legitimate interest
Monitor drift indicators and quality	Legitimate interest
Prevent fraud and security threats	Legitimate interest
Comply with legal obligations	Legal requirement
Send service communications	Contract performance
Marketing (with consent)	Consent

3. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy:

• Account Data: Duration of account plus 2 years
• Evidence Ledger: Minimum 2 years (ALCOA+ requirement)
• Usage Analytics: 13 months
• Payment Records: 7 years (legal requirement)

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Payment processors, hosting providers, analytics services
• AI Model Providers: Queries may be processed by third-party AI services (OpenAI, Anthropic, Google, xAI, DeepSeek) subject to their privacy policies
• Legal Requirements: When required by law, court order, or to protect rights
• Business Transfers: In connection with merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest
• Security Gate (Gate 9) protects against RAG injection attacks
• Access controls and authentication
• Regular security assessments
• SHA256 hash verification for Evidence Ledger integrity

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limitation of processing

To exercise these rights, contact us using the information below.

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for Services to function
• Analytics Cookies: Understanding usage patterns
• Preference Cookies: Remembering your settings

You can manage cookie preferences through your browser settings.

8. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Significant changes will be communicated via email or prominent notice on our Services.

11. Contact Us

For privacy-related inquiries or to exercise your rights: