Privacy Notice

Version: 1.3-2026-08-05
Effective Date: August 5, 2026
Last Updated: August 5, 2026

This Privacy Notice explains how Aegis Trade Systems LLC ("Aegis," "we," "us," or "our") collects, uses, discloses, and retains information when you visit or interact with:

• aegistradesystems.com;
• www.aegistradesystems.com;
• aegis-one.ai; or
• www.aegis-one.ai.

This notice applies only to the four websites listed above. It does not apply to any other website, application, or property.

This notice describes practices currently in operation. A beta-interest application form is available through the covered marketing website. Submitting it does not create an account, does not sign you in, and does not guarantee selection, an invitation, access, or any particular timing. Production authentication remains inactive unless we separately change it and update this notice.

1. Who We Are

The websites covered by this notice are operated by:

Privacy questions and requests may be submitted to:

privacy@aegistradesystems.com

Other contacts include:

• General beta and early-access inquiries: earlyaccess@aegistradesystems.com
• Product and website feedback: feedback@aegistradesystems.com
• General support: support@aegistradesystems.com
• Legal notices: legal@aegistradesystems.com

2. Information We Collect

A. Information You Submit

The websites allow visitors to submit product feedback and record general interest in future beta access.

Depending on the form used, submitted information may include:

• a rating or overall impression;
• what you liked;
• what you found confusing;
• the audience or user category you identify with;
• whether you would use the product;
• feature, research, guidance, or platform interests;
• whether you are interested in early access;
• additional comments;
• the page associated with the submission; and
• the date and time of submission.

The feedback interface within the Aegis One application collects a related set of information. When you submit feedback there, the application sends:

• your rating of the overall experience;
• your rating of how easy the application was to understand;
• your rating of the visual design;
• your rating of trust and professionalism;
• what you found confusing;
• which feature interested you most;
• what would increase your confidence in the platform;
• whether you would join an early access program;
• any additional comments;
• an indication of which part of the application you were viewing; and
• an indication that the submission came from the Aegis One application.

Of these, the four experience ratings and the early-access response are selections you choose from fixed options. What you found confusing, which feature interested you, what would increase your confidence, and your additional comments are free-text fields. The remaining items are generated by the application rather than entered by you.

The Aegis One application does not send a submission time of its own. Aegis records the time each submission is received on our server.

The product-feedback interfaces described above do not request your name, email address, or telephone number.

The beta application form described in the next subsection does request your name and email address, and optionally your telephone number, because its purpose is to let us contact you about the beta.

No interface on the covered websites requests:

• a brokerage account number;
• broker credentials or API keys;
• portfolio holdings or balances;
• payment information; or
• government identification numbers.

Beta application form. The beta application form on the public beta page collects information that is separate from product feedback and is stored separately from it. When you submit that form, we record:

• your full name;
• your email address;
• your telephone number, if you choose to provide one;
• the user category you identify with;
• your trading or investing experience;
• your primary beta interest;
• what you would like to test or evaluate, if you choose to describe it;
• your acknowledgment that we may contact you about the beta;
• your acknowledgment that you have read this notice;
• the version of this notice shown on the form when you submitted it;
• the date and time your application is received and the date and time it was last updated on our server; and
• the number of times you have submitted the form.

Your name, email address, telephone number, and description of what you would like to test are free-text fields. The user category, experience level, and primary interest are selections you choose from fixed options.

The beta application record does not store the Internet Protocol address associated with your request, the user-agent string your browser sends, or a copy of the complete request. That is a deliberate difference from the feedback records described below. Ordinary web-server logging still records request information as described in the Web-Server and Network Logs subsection, under the separate retention period stated there.

If you submit the form again using the same email address, we update your existing application rather than creating a second one. Your original submission date is preserved, the last-updated date moves forward, and the retention period described in the Retention section is measured from that later date.

Please do not enter broker credentials, API keys, account numbers, balances, holdings, payment information, government identification, or other sensitive financial information in the beta application form.

Free-text fields may contain personal information if you choose to include it.

Please do not submit:

• usernames or passwords;
• broker credentials or API keys;
• brokerage or financial-account numbers;
• account balances or portfolio holdings;
• payment-card information;
• Social Security numbers or other government identifiers;
• health information; or
• other sensitive personal or financial information.

B. Information Collected With a Feedback Submission

This subsection describes feedback records. It also covers the earlier beta-interest signals described in the Historical Beta-Interest Records section, because those were recorded through the feedback service. It does not describe beta application records, whose contents are listed in the beta application form subsection above.

When you submit feedback, we record:

• the information you submit;
• the date and time the submission is received on our server;
• the Internet Protocol address associated with the request;
• the user-agent string that your browser sends with the request; and
• a normalized copy of the accepted submission fields.

A beta application record does not include the Internet Protocol address, the user-agent string, or a normalized copy of the complete request. Web-server logging, described in the next subsection, applies to the beta application request itself in the same way it applies to any other request to the websites.

The Aegis One application does not send a separate, application-generated copy of your browser's user-agent string among the feedback fields. Our server continues to record the user-agent header that accompanies the request itself, and it continues to record the network-address information associated with the request.

The normalized submission record is not a literal copy of the complete network request. Fields that the feedback service does not accept are not included in the normalized record.

The network-address information stored with a submission may include information supplied through network-forwarding headers. It should not be treated as a verified identity.

C. Web-Server and Network Logs

Our web server automatically records requests made to the websites.

These records include:

• the IP address from which the request reached the web server;
• the request method;
• the requested page or resource, including any query string;
• the protocol used;
• the response status;
• the amount of data returned;
• the referring page, when supplied by the browser;
• the browser user-agent string; and
• the date and time of the request.

Web-server logging applies to ordinary page requests, to requests to the website-feedback service, and to requests to the beta application service. It therefore records the IP address and user-agent string associated with a beta application request, even though the beta application record itself stores neither. Web-server logs are retained for the period stated in the Retention section, which is shorter than the beta application retention period.

D. Application and Diagnostic Logs

Our application systems record operational information such as:

• service start-up messages;
• configuration or initialization failures;
• database or application errors;
• delivery failures involving operational notifications; and
• technical stack traces or filesystem paths associated with an error.

The current feedback application does not intentionally write submitted feedback content, stored IP addresses, or user-agent strings to its application logs.

E. The Aegis One Demonstration Workspace

The Aegis One application currently operates as a demonstration workspace. It does not request or accept a username, password, or other sign-in credential, and it does not create an account. It contains no sign-in form and no credential fields. Entry occurs through an "Enter Demo Workspace" button. No server-side authentication is performed, and the demonstration access state is maintained only in your browser. You can end the demonstration session at any time using the "Exit Demo" control.

The information presented within the demonstration workspace is simulated demonstration data. It does not reflect a real brokerage account, real holdings, real balances, or live trading activity. Production authentication is not currently active.

A future production authentication or account system will require a revised privacy review and an updated Privacy Notice before activation.

F. Cookies and Browser Storage

Our practices differ between the public website and the Aegis One application.

The Aegis public website (aegistradesystems.com and www.aegistradesystems.com) does not currently set or use:

• cookies;
• local storage;
• session storage;
• IndexedDB;
• browser cache storage;
• service workers; or
• similar browser-storage technologies.

The Aegis One application (aegis-one.ai and www.aegis-one.ai) does not currently set or use:

• cookies;
• session storage;
• IndexedDB;
• browser cache storage; or
• service workers.

The Aegis One application does use your browser's local storage. It stores three things:

• a fixed demonstration-session state, recording that you have entered the demonstration workspace;
• a fixed value recording whether you have completed the demonstration onboarding sequence; and
• application-authored demonstration notifications, each consisting of an identifier, a title, a message, a category, and a read or unread flag.

These values do not contain information typed by the visitor, personal identifiers, or timestamps. The demonstration notifications are content we author and display within the demonstration; they are not derived from your activity.

These browser-storage values are functional first-party storage. They are not used for advertising or for tracking you across websites.

Values stored in your browser's local storage are not transmitted to Aegis. They are not included in feedback submissions, request headers, web addresses, or any other request the application makes.

G. Analytics, Advertising, and Third-Party Tracking

The websites do not currently use:

• web analytics services;
• advertising networks;
• behavioral-advertising technologies;
• tracking pixels;
• tag-management systems;
• third-party web fonts;
• third-party embedded media;
• telemetry or error-reporting services; or
• third-party scripts that monitor visitor activity.

Scripts, stylesheets, images, and fonts used by the websites are currently served from Aegis-operated domains.

The websites may contain links to other websites or online properties. A request to another property occurs when you choose to follow the link.

3. How We Use Information

We use information collected through the websites to:

• receive and evaluate product and website feedback;
• record general interest in Aegis One and future beta access;
• evaluate beta applicants;
• contact applicants about beta selection, access, onboarding, scheduling, and related beta communications;
• maintain beta application records and identify repeat submissions from the same email address so that a single application is updated rather than duplicated;
• administer the beta-interest queue;
• understand what visitors find useful, clear, or confusing;
• improve website and product usability;
• operate the Aegis One demonstration workspace and maintain its demonstration state within your browser;
• troubleshoot errors and technical problems;
• operate and secure the websites and feedback service;
• detect abuse, misuse, automated scanning, or operational problems;
• maintain the integrity of submitted records;
• notify authorized personnel that feedback was submitted;
• respond to support, privacy, legal, or security inquiries;
• comply with applicable legal obligations; and
• establish, exercise, or defend legal claims.

We do not use website-feedback information to:

• provide individualized investment advice;
• access a brokerage account;
• execute a securities transaction;
• determine creditworthiness;
• make lending, insurance, housing, or employment decisions; or
• create targeted-advertising profiles.

4. How We Disclose Information

We disclose information only as described in this notice.

We use service providers to perform hosting, communications, and operational-support functions on our behalf. We disclose information to them only as necessary for those functions, subject to applicable agreements and law. The information provided to Discord is limited as described below.

A. Cloud Hosting and Infrastructure

Amazon Web Services provides cloud-hosting infrastructure used to operate the websites and feedback service.

Information processed through that infrastructure may include:

• IP addresses;
• browser and device information;
• requested pages and resources;
• request and response information;
• feedback submissions;
• server and application logs; and
• protected database and backup information.

B. Operational Messaging

Discord is used as an operational messaging service.

After a feedback submission is recorded, Discord may receive a limited operational summary that may include:

• the source of the submission;
• the associated page or application view;
• the rating or overall impression;
• the selected audience category;
• whether the visitor indicated that they would use the product; and
• whether the visitor expressed interest in early access.

After a beta application is recorded, Discord may receive a limited operational summary that may include only:

• a fixed notice that a beta applicant was recorded;
• the selected user category;
• the selected experience level; and
• the selected primary beta interest.

The operational summary does not include:

• the stored IP address;
• the stored user-agent string;
• free-text comments;
• a name;
• an email address;
• a telephone number;
• the description of what an applicant would like to test;
• the acknowledgments recorded with an application;
• a record identifier; or
• brokerage, account, or financial information.

Applicant contact information is not sent to Discord. Authorized personnel review it through an administrative dashboard that is reachable only from the server itself and is not published on the websites.

Information sent to Discord is retained according to Discord's practices and the actions of authorized recipients.

C. Email Services

Microsoft 365 provides email services for Aegis business communications.

The current website-feedback service does not send email alerts containing feedback submissions.

The beta application form does not send you an automatic confirmation email. If we later contact you about the beta using the email address you provided, Microsoft 365 may process that communication and the contact information it contains.

When you contact us directly by email, Microsoft 365 may process:

• your email address;
• your name, if supplied;
• the content of your message;
• attachments you choose to send;
• email-routing and delivery information; and
• related technical metadata.

D. Domain and Certificate Providers

Domain-name, DNS, and digital-certificate providers process technical information necessary to direct traffic to the websites and establish encrypted connections.

E. Professional Advisers

We may disclose information to attorneys, accountants, auditors, consultants, insurers, and other professional advisers when reasonably necessary for the services they provide.

F. Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

• comply with law, regulation, subpoena, court order, or legal process;
• respond to a lawful government request;
• investigate fraud, misuse, abuse, or a security incident;
• protect the rights, safety, security, or property of Aegis, website visitors, or others; or
• establish, exercise, or defend legal claims.

G. Business Transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, asset sale, bankruptcy, or similar business transaction, subject to applicable legal and confidentiality requirements.

H. With Your Direction or Consent

We may disclose information for another purpose when you direct us to do so or provide consent.

5. Sale, Sharing, Advertising, and Profiling

We do not currently:

• sell personal information;
• share personal information for cross-context behavioral advertising;
• use personal information for targeted advertising;
• use advertising networks or tracking pixels;
• allow third-party scripts to track visitors across unrelated websites; or
• use website-feedback information for automated decisions producing legal or similarly significant effects.

6. Do Not Track and Global Privacy Control

The websites do not currently alter their behavior in response to a browser's Do Not Track signal.

The websites do not currently alter their behavior in response to a Global Privacy Control signal.

We do not currently sell personal information, use targeted advertising, or deploy technologies that track visitors across unrelated websites.

7. Retention

A. Feedback and Beta-Interest Records

Feedback selections and comments are generally retained for up to 12 months.

The IP address and browser user-agent information associated with a feedback submission are generally retained for up to 90 days.

Beta application records are generally retained for up to 12 calendar months measured from your most recent submission or update, and are then deleted in full. Because the record is deleted rather than partially cleared, your name, email address, telephone number, selections, and any description you provided are removed together.

If you submit the beta application form again using the same email address, we update your existing record and the 12-calendar-month period is measured from that later update rather than from your first submission.

The 90-day period described above applies to the IP address and user-agent information stored with feedback records. It does not apply to beta application records, because those records do not store an IP address or user-agent string at all.

We may retain particular records longer when reasonably necessary for security, legal compliance, dispute resolution, or protection of our rights.

B. Web-Server Logs

Web-server access and error logs are rotated daily.

Up to 14 rotated log archives are retained. This generally results in a retention period of approximately 14 to 15 days.

C. Application Logs

Application and service logs are retained subject to storage limits rather than a fixed time period.

Older records are removed automatically when system storage limits require it.

D. Operational Messages

Operational notifications sent through Discord are retained according to Discord's practices and the actions of authorized recipients.

E. Email Records

Email communications are retained according to Aegis business-record requirements and Microsoft 365 configuration.

F. Backups

Information may remain in protected database or system backups after it has been removed from an active system.

Backup information remains until the applicable backup is securely retired or expires under the relevant operational process.

G. Browser Storage

The values stored by the Aegis One application in your browser's local storage do not expire automatically. They remain in your browser until they are removed.

You can remove them at any time:

• Exit Demo removes the demonstration-session value;
• Replay Onboarding resets the onboarding-completion value;
• Clear Notifications removes the stored demonstration notifications; and
• your browser's site-data controls can clear all of these values.

Clearing this storage may reset the demonstration session, the onboarding sequence, or the demonstration notifications.

8. Historical Beta-Interest Records

Before the beta application form described in this notice was introduced, the websites allowed visitors to record general interest in future beta access through the feedback system. Those earlier records still exist and are described here so that they are not confused with beta applications.

These earlier records:

• are feedback and interest records, not beta applications;
• do not contain an applicant email address;
• do not establish acceptance of future beta terms;
• do not establish acceptance of a future privacy notice;
• do not guarantee beta access; and
• will not be treated as evidence of consent that was not actually provided.

They remain subject to the feedback retention periods described in the Retention section, and they are kept separate from beta application records. Recording interest through the earlier feedback route does not create a beta application, and submitting the beta application form is the route we monitor for beta access.

9. Privacy Requests

You may ask us to:

• confirm whether we maintain personal information associated with you;
• provide information about how that information has been used;
• correct inaccurate information;
• delete information that is eligible for deletion;
• stop optional communications; or
• reconsider a prior privacy-request decision.

Submit requests to:

privacy@aegistradesystems.com

or by mail:

We will ordinarily acknowledge a privacy request within 10 business days.

We will ordinarily provide a substantive response within 45 days. We may require additional time when reasonably necessary to:

• verify identity;
• locate responsive records;
• protect the rights of others;
• evaluate legal obligations; or
• address security or fraud concerns.

If additional time is needed, we will explain the reason where appropriate.

Anonymous Feedback Records

The product-feedback interfaces do not request a name, email address, account identifier, or other reliable identity credential, so the limitations described here apply to those records.

A beta application record is different: it contains the email address you supplied, so a request about a beta application can normally be matched to that record using that email address.

As a result, we may be unable to locate or verify a feedback record in response to a privacy request.

We do not require a person to provide additional personal information solely to make an otherwise anonymous record identifiable.

An IP address or browser user-agent string may not be sufficient to verify that a requester is the person associated with a submission.

Browser Storage

The values stored by the Aegis One application are held in your own browser and are not transmitted to us. You can inspect or remove them yourself using the application controls or your browser's site-data settings, without submitting a privacy request.

Verification and Limitations

We may request information reasonably necessary to verify identity and determine whether a request relates to information we maintain.

We may deny or limit a request where permitted by law, including when information must be retained for:

• security or fraud prevention;
• legal compliance;
• dispute resolution;
• protection of legal rights;
• internal record integrity; or
• protection of the rights and safety of others.

Appeals

If we deny a privacy request, you may ask us to reconsider by emailing:

privacy@aegistradesystems.com

Use the subject line:

Privacy Request Appeal

Explain why you believe the response should be reconsidered.

When reasonably practicable, the appeal will be reviewed by a person who was not responsible for the initial response.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, disclosure, loss, or destruction.

Our safeguards include measures intended to:

• protect information during transmission;
• limit access to systems and information;
• validate and safely process submitted information;
• monitor operational and security events; and
• support backup, recovery, and incident response.

No security system is completely effective, and we cannot guarantee absolute security.

Please do not send credentials, account information, sensitive financial information, or other sensitive personal information through ordinary email or website-feedback forms.

11. Security-Incident Notification

If a security incident affects personal information, we will investigate and provide notices as required by applicable law. Applicable laws may impose specific content and timing requirements.

12. Children

The websites and Aegis One are not directed to children under 13.

We do not knowingly request personal information from children under 13 through the website-feedback or beta-interest features.

The Aegis One beta application form is intended for United States residents who are at least 18 years old. Please do not submit a beta application if you are under 18.

If you believe a child has provided personal information, contact:

privacy@aegistradesystems.com

13. United States Audience

The websites and current beta-interest feature are directed to users in the United States.

Aegis does not currently direct these websites or features to residents of the European Union, European Economic Area, or United Kingdom.

The websites may remain technically accessible from other locations. Technical accessibility alone does not mean that Aegis is offering a service in every jurisdiction.

14. Email Communications

Product-feedback submissions do not collect an email address and cannot be used to contact the person who submitted them.

A beta application does collect an email address, and optionally a telephone number, so that we can contact you about the beta. We do not send marketing or promotional email through the beta application form.

When you contact us directly by email, we use your address and message to:

• respond to the inquiry;
• provide support;
• address a privacy, security, legal, or business matter; and
• maintain related business records.

Future optional commercial email, if offered, will include the disclosures and opt-out method required by applicable law.

Application, support, privacy, security, legal, and other non-promotional communications may be sent when necessary to respond to a request or administer a relationship.

15. Third-Party Links

The websites contain links to other websites or online properties.

Aegis does not control the privacy or security practices of every linked destination. Review the privacy notice applicable to the destination before providing information there.

16. Changes to This Notice

We may update this Privacy Notice when our websites, services, information practices, or legal obligations change.

When we make a material change, we will:

• update the version number;
• update the effective date; and
• post the revised notice on the websites.

The version applicable to an interaction is the version in effect at the time of that interaction.

Acceptance of one version will not be treated as acceptance of a materially different future version when additional consent is required.

17. Contact Us

Privacy requests and questions:

privacy@aegistradesystems.com

General beta and early-access inquiries:

earlyaccess@aegistradesystems.com

Product and website feedback:

feedback@aegistradesystems.com

General support:

support@aegistradesystems.com

Legal notices:

legal@aegistradesystems.com

Mail: