Privacy
Policy.

1. Introduction

//AIRGAPT ("we") is committed to protecting your personal data. This Policy explains how we collect, use, and safeguard information when you visit our website or use our Services. //AIRGAPT is established in the Slovak Republic, European Union.

2. Roles

For personal data processed through our Services on behalf of a customer organisation, the customer is the data Controller and //AIRGAPT acts as a Processor, processing data only on the customer's documented instructions. For data collected directly through our website (e.g. contact forms), we act as Controller.

3. Information We Collect

Website: contact details you provide (name, email, company, message), and usage analytics. Services: signed work-state event metadata — the fact that a hardware key was engaged or disengaged, a timestamp, and a pseudonymous device identifier, together with the associated cryptographic signatures.

• We do NOT collect, through the Services: communication content, message metadata, keystrokes, screen contents, location or GPS data, or biometric data.

4. How We Use Information

• To provide, maintain, and improve the Services
• To respond to enquiries and communicate with you
• To generate tamper-evident working-time evidence on behalf of the customer Controller
• To protect against fraud, abuse, and security risks

5. Legal Basis (GDPR)

We process personal data on the basis of: performance of a contract; your consent (e.g. non-essential cookies); and our legitimate interests in operating and securing the Services, balanced against your rights.

6. Processors and Third-Party Services

We use the following processors: Base44 (website hosting), PostHog (analytics), Google (scheduling), and Stripe (payment processing). Each processes data under its own terms and appropriate safeguards. We do not sell personal data.

7. Data Retention

Website enquiry data is retained only as long as necessary for the purpose collected. Working-time evidence generated through the Services is retained per the customer Controller's instructions and applicable record-keeping law; on termination we delete or return such data within 30 days, save for anonymised, aggregated statistics.

8. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact info@airgapt.eu. You also have the right to lodge a complaint with your supervisory authority (in Slovakia, the Úrad na ochranu osobných údajov).

9. International Transfers

Where personal data is transferred outside the EEA, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) in accordance with GDPR.

10. Security

We apply appropriate technical and organisational measures. Evidence records are cryptographically signed and tamper-evident; access is controlled and minimised.

11. Changes

We may update this Policy and will post changes with an updated date.

12. Contact

If you have any questions about this Privacy Policy, please contact us at: