This privacy policy (“Privacy Policy”) applies to all visitors and users of the Aegis desktop app, mobile apps, social and messaging apps, and website found at www.aegisdefender.com (collectively, the “Services”), which are offered by Spearfish Corporation (“Spearfish”, “we” or “us”) and describes how we process your Personal Data in connection with those Services, and how we collect information through the use of cookies and related technologies. Please read this Privacy Policy carefully. By accessing or using any part of the Services, you acknowledge you have been informed of and consent to our practices with regard to your Personal Data.

When you use our Services, you’ll share some information with us. This Privacy Policy describes the information we collect, how we use it, whom we share it with, and the controls we give you to access, update, and delete your data.  Please also read our Terms of Service (https://www.aegisdefender.com/terms), which describe the terms under which you use and we provide our Services.

If you do not want us to share Personal Data or feel uncomfortable with the ways we use information in order to deliver our Services, please do not use the Services.

Personal Data We Collect

There are three basic categories of Personal Data we collect:

• Personal Data you provide.

• Personal Data we automatically collect when you use our services.

• Personal Data we get from third parties.

Here’s a little more detail on each of these categories.

Personal Data You Provide

When you create an account or interact with our Services, we collect Personal Data that you provide to us.

• Account Information. You must provide your email address and basic information to create an account. If you don’t provide us with this information, you will not be able to create an account to use our Services.

• User Content. We collect Personal Data that you provide as input to our Services, depending on the features you use, including your text and voice prompts to our Services through our website, desktop app, mobile apps, and social media accounts; content you upload, such as files, images⁠, and audio; and content you send to us, such as emails, sms and voicemails. 

• Customer Support and Other Communications. When you contact us for customer support or otherwise communicate with us, you may provide us with information related to your use of our Services, including copies of your messages, any other information you deem helpful, and how to contact you (e.g., an email address). For example, you may send us an email with information relating to app performance or other issues.

Personal Data We Automatically Collect

When you use our Services, we collect information about which services you’ve used and how you’ve used them. We might know, for instance, that you watched a particular video, sent a few messages, or responded to another user’s video or message. Here’s a fuller explanation of the types of information we collect when you use our Services:

• Usage and Log Information. We collect information about your activity on our Services, like service-related, diagnostic and performance information. This includes information about how you interact with our Services, such as which videos you have posted or shared, what searches you have made, how you communicate with other Spearfish users, such as their names, the time and date of your communications, the number of messages you exchange with your friends, and your interactions with videos and messages.  Additionally, we collect diagnostic, crash, website and performance logs and reports.

• Device Information. We collect device and connection-specific information when you install, access, or use our Services. This includes information such as hardware model, operating system information, battery level, signal strength, app version, browser information, mobile network, connection information (including phone number, mobile operator or ISP), language and time zone, IP address, device operations information and device identifiers.

• Location Information. When you use our Services we may collect information about your location. With your permission, we may also collect information about your precise location using methods that include GPS, wireless networks, cell towers, Wi-Fi access points, and other sensors such as gyroscopes, accelerometers and compasses.

• Cookies and Other Technologies.  We use cookies, web beacons, web storage, and unique identifiers to collect information about your activity, browser and device.  These technologies help us to operate and provide our Services, including to provide our Services that are web-based, improve your experiences, understand how our Services are being used, and customize them.

Personal Data We Collect from Third Parties

We work with third-party service providers to help us operate, provide, improve, understand, customize, support, and market our Services. For example, we work with them to distribute our apps; provide our technical and physical infrastructure, delivery, and other systems; provide engineering support, cybersecurity support, and operational support; supply location, map, and places information; help us understand how people use our Services; market our Services; conduct surveys and research for us; ensure safety, security, and integrity; and help with customer service. These companies may provide us with information about you in certain circumstances; for example, app stores may provide us with reports to help us diagnose and fix service issues.

We also collect information from other sources, like information that is publicly available on the internet, to develop the models that power our Services.

How We Use Personal Data

We use Personal Data we have (subject to choices you make and applicable law) to operate, provide, improve, understand, customize, support, and market our Services. Here's more detail on how we use your data:

• Operate Our Services. We use Personal Data we have to operate and provide our Services, for example to determine whether content you submit for analysis is malicious or related to a scam. We also use Personal Data we have to provide customer support; improve, fix, and customize our Services; connect our Services with other Providers that you may use; evaluate and improve our Services; research, develop, and test new services and features; and conduct troubleshooting activities. We also use your Personal Data to respond to you when you contact us.

• Manage Safety and Security. We use Personal Data we have to enhance the safety and security of our Services, such as verifying accounts and activity; combating harmful conduct; protecting users against bad experiences and spam; and promoting safety, security, such as by investigating suspicious activity or violations of our Terms and policies.  In some cases, we may also use or share your Personal Data to cooperate with law enforcement requests or comply with our legal obligations.

• Communicate About Our Services. We use Personal Data we have to communicate with you about our Services and let you know about our terms, policies, and other important updates. We may provide you marketing for our Services.

• Aggregate and De-identify Information. We may use Personal Data about you to create de-identified and/or aggregated information, such as de-identified demographic information, location information, information about the device from which you access the Services, or other data sets we may create. 

How We Disclose Personal Data 

We disclose your Personal Data for a variety of business purposes, as described below. 

• Service Providers. We work with third-party service providers to help us operate, provide, improve, understand, customize, support and market our Services. We work with these companies to support our Services, such as to provide technical infrastructure, delivery and other systems; market our Services; conduct surveys and research for us; protect the safety, security, and integrity of users and others; and assist with customer service. When we disclose Personal Data with third-party service providers in this capacity, we require them to use your Personal Data on our behalf in accordance with our instructions and terms.

• Business and Family Account Administrators. When you join a family or business account, the administrators of that account may access and control your account. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.

• Government Authorities or Other Third Parties. We may share your Personal Data, including information about your interaction with our Services, with government authorities or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.

Control Over Your Information

We want you to be in control of your information, so we provide you with the following tools.

• Access and Privacy. You can access and edit most of your basic information by accessing your account through our Services. If you are unable to update your information through your account, please submit your request to privacy@aegisdefender.com.

• Leaving a Family or Business Account. If you no longer want to be part of a group account such as a family or business account, you may leave the account by selecting the appropriate settings under your profile. When you leave a group account, you will retain access to any content, assessments and interactions that you have completed to date. However, if your account was previously paid for by a family administrator or business, you may be required to register for a new paid subscription to continue to submit and analyze new content through our Services.

• Account Deletion.  If you decide to stop using our Services, you can delete your account through our Services.  Just remember that once you delete your account, that you will no longer have access to any of your content or history, and the process is not reversible.  However, there may be legal requirements to store your data and we may need to suspend the deletion process if we receive valid legal process asking us to preserve content, if we receive reports of abuse or other Terms of Service violations, or if your account or content created by you is flagged by others or our systems for abuse or other Terms of Service violations. Finally, we may also retain certain information in backup for a limited period of time or as required by law.

How We Store and Process Information

We are committed to protecting your privacy and data. We have put in place appropriate safeguards and security measures to help prevent your personal information from being lost, used or accessed in an unauthorized way, altered or disclosed. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its security.

We will retain personal information we process pursuant to statutory requirements, for as long as needed to provide the Services, and to comply with our legal and compliance obligations, resolve potential or actual disputes, or enforce our agreements.  How long we retain Personal Data will depend on a number of factors, such as:

• Our purpose for processing the data (such as whether we need to retain the data to provide our Services)

• The amount, nature, and sensitivity of the information

• The potential risk of harm from unauthorized use or disclosure

• Any legal requirements that we are subject to

Your Data Rights

Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:

• The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;

• The right to request deletion of your Personal Data;

• The right to correct your Personal Data; and

• The right to be free from discrimination relating to the exercise of any of your privacy rights.

We do not “sell” Personal Data or “share” Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for “targeted advertising” purposes (as those terms are defined under state privacy laws). We also do not process sensitive Personal Data for the purposes of inferring characteristics about a consumer.

Exercising Your Rights. You can exercise privacy rights described in this section by sending a request to dsar@aegisdefender.com.

Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.

Authorized Agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@aegisdefender.com.

Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@aegisdefender.com.

International Data Transfers

By using the Services, you acknowledge and understand that your information will be stored within the United States, where privacy rules differ and may be less stringent than those of the country in which you reside.

Children

Our services are not intended for — and we don’t direct them to — anyone under 13. And that’s why we do not knowingly collect personal information from anyone under 13.  If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account if applicable.

Revisions to the Privacy Policy

We may change this Privacy Policy from time to time. But when we do, we’ll let you know one way or another. Sometimes, we’ll let you know by revising the date at the top of the Privacy Policy that’s available on our website and mobile application. Other times, we may provide you with additional notice (such as adding a statement to our websites’ homepages or providing you with an in-app notification).