How we handle your data.
What this site and our products collect, what they deliberately don't, and how to ask us to delete anything we hold about you.
Updated June 2026
AegisMesh is in the process of being incorporated. Until the entity “AegisMesh” is registered, the data controller is Akash Shaw (founder), reachable at hello@aegismesh.dev. On incorporation, controllership will be assigned to AegisMesh by founder assignment deed, and an updated notice will be posted here.
What this site collects
- Server logs (IP address, browser type, timestamp): for abuse prevention and uptime. Retained 30 days, then discarded.
- Design-partner intake form (name, work email, company, role, use case): submitted through our forms provider. Retained 365 days (one full pilot-evaluation cycle), encrypted while stored, then deleted.
- No analytics today. If we add a privacy-respecting analytics provider, we will name it here before turning it on.
Retention summary
- Server logs: 30 days, then discarded.
- Form submissions: 365 days, encrypted while stored, then deleted.
- Email correspondence (follow-up after a form submission): kept for the active design-partner cycle, then archived or deleted on request.
What we do not collect
No advertising trackers. No social-media pixels. No session-replay. No cross-site identifiers. We never use your submissions to train any AI model. We do not sell, rent, or share your data with marketers or data brokers.
Cookies and third parties
We set no cookies of our own. The site loads typefaces from Google Fonts. Forms are processed by Netlify, Inc. (a service provider; their data-processing agreement is at netlify.com/legal/dpa). Hosting and content delivery are also provided by Netlify.
Service providers
- Netlify, Inc.: static hosting, content delivery, and form processing.
- Google LLC (Google Fonts): the web typefaces used on this site.
If we add a service provider that handles your data, we will list it here before turning it on.
Requesting access, correction, or deletion
Email hello@aegismesh.dev. We respond within 5 business days, verify your identity before acting, and complete verified deletions within 30 days. You may also withdraw consent at any time.
Children
This site is not directed at, and we do not knowingly collect data from, anyone under 18.
India / DPDP Act 2023
Where the Digital Personal Data Protection Act 2023 applies to people in India, you have the rights to access, correction, erasure, and grievance redressal. Direct grievances to the same email; we will acknowledge within 7 days.
The Aegisbox product
When you install Aegisbox on your Mac, here is exactly what it sees and what, if anything, leaves your device:
- What Aegisbox observes on your Mac: attempts by your AI assistants to read or write files, start programs, and make network connections. By default, this stays entirely on your device and is never sent to us.
- What is sent when you activate a licence: your licence key, a one-way scrambled identifier for the machine (so the same Mac isn't counted twice), and your plan tier. Never your file paths, never your credentials, never the contents of what your AI assistants did.
- What is sent to your own logging system (only if you set one up): nothing goes anywhere unless you point Aegisbox at a destination you control, and then it goes only there. We never receive it.
- Approval prompts and related signals: when this feature is turned on, the prompts and the events behind them are handled on your Mac. Anything forwarded to the logging destination you configure carries only the category of what was touched (for example, “a cloud credential”) and never the underlying file paths or secret values.
Looking ahead
This notice will be re-issued after incorporation under AegisMesh. Earlier versions are available on request.