Privacy Policy

AUSPEX UAP Intelligence Platform (“AUSPEX,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using AUSPEX, you agree to the terms of this policy.

Account Information: When you create an account, we collect your email address(es), username (optional), phone number (optional, used if your account requires it for sign-in or two-factor authentication), and password. Account credentials and authentication factors are managed by our authentication provider, Clerk (see Section 6); passwords are hashed and salted by Clerk using industry-standard cryptography and are never visible to AUSPEX.

Usage Data: We automatically collect information about how you interact with the platform, including pages visited, features used, search queries, and time spent on modules. This data is anonymized and used solely to improve the platform.

Investigation Data:Any investigations, saved searches, or annotations you create are currently stored in your browser's local storage on your device. They are not transmitted to our servers. Persistent server-side storage of investigations tied to your account is planned but not yet implemented.

Device & Technical Data: We collect browser type, operating system, IP address, and device identifiers to ensure platform security and optimize performance. Authentication-related telemetry (sign-in attempts, session activity, device fingerprints) is collected by Clerk per its privacy policy.

We use collected information to:

• Provide, maintain, and improve the AUSPEX platform
• Authenticate your identity and secure your account
• Personalize your experience (saved preferences, investigation history)
• Analyze aggregate usage patterns to improve platform features
• Communicate important updates about the service
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

AUSPEX aggregates publicly available information from government agencies (CIA, FBI, AARO, DoD), congressional records, and public reporting databases (NUFORC, MUFON). These records are public domain or publicly accessible and do not contain private user data. Our analysis, indexing, and cross-referencing of these records is original work performed by our platform.

We use cookies and similar technologies for:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Preference cookies: Store your display settings, filter preferences, and UI state.
• Analytics cookies: Help us understand how the platform is used. These are anonymized and can be opted out of.
• Advertising cookies: Third-party advertising partners (currently Adsterra) may place cookies to serve relevant ads. See the partner's privacy policy for details and opt-out options.

You can manage cookie preferences through the cookie consent banner displayed on your first visit, or at any time through your browser settings.

We use the following third-party services that may process your data:

• Clerk: Authentication, session management, and account data (email addresses, password hashes, phone numbers, multi-factor authentication factors, sign-in activity). User authentication data is stored on Clerk's SOC 2 Type II compliant infrastructure. Clerk Privacy Policy · Clerk DPA
• PostHog: Product analytics, page-view tracking, session replay, and feature flag delivery. PostHog associates events with your authenticated user ID once you sign in (otherwise events are tied to an anonymous device identifier). PostHog Privacy Policy · PostHog DPA
• Adsterra: Serves advertisements. Adsterra's privacy policy applies to ad-related data collection. Adsterra Privacy Policy
• Vercel: Hosts the platform. Vercel Privacy Policy

We only share the minimum data necessary for these services to function.

We retain your account data for as long as your account is active. Investigation data and saved analyses are retained until you delete them or close your account. Anonymized usage analytics may be retained indefinitely for platform improvement. Upon account deletion, personal data is purged within 30 days, except where retention is required by law.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate personal data
• Deletion: Request deletion of your personal data (“right to be forgotten”)
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Opt out of non-essential data processing, including analytics and ad personalization
• Restrict processing: Request that we limit how we use your data

To exercise any of these rights, use our contact formand select the “Privacy / GDPR / CCPA request” subject. We will respond within 30 days (or sooner where required by applicable law).

If you are a California resident, you have the right to:

• Know what personal information is collected and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal data)
• Non-discrimination for exercising your CCPA rights

To submit a CCPA request, use our contact formwith the “Privacy / GDPR / CCPA request” subject and reference “CCPA Request” in your message.

If you are located in the European Economic Area (EEA), our legal bases for processing your data are:

• Contract performance: Processing necessary to provide the service you requested
• Legitimate interest: Platform security, fraud prevention, and service improvement
• Consent: Analytics and advertising cookies (which you may withdraw at any time)

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

AUSPEX is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will delete it promptly. Use our contact form if you believe a child has submitted data to our platform.

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Effective Date” above. Continued use of the platform after changes constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your data rights:

AUSPEX UAP Intelligence Platform
Use our contact formand select the “Privacy / GDPR / CCPA request” subject for fastest routing.