1. Information We Collect

1.1 Information You Provide Directly

We collect information that you explicitly provide when interacting with our public-facing web infrastructure, acquiring hardware, or creating an optional gateway account. This may include:

• Contact Data: Name, email address, and physical address (if requesting hardware shipping).
• Account Credentials: Hashes and cryptographic keys used for authentication.
• Communications: Records of support requests, bug reports, and correspondence with our teams.

1.2 Sovereign Telemetry (Opt-In Only)

By default, systems like AuraOS, AuraFS, and g0dm0d3 operate in a zero-telemetry, offline-first state. However, if you explicitly opt-in to help improve the network, we may collect:

• Diagnostic Logs: Crash reports, anonymized system performance metrics, and mesh-routing efficiency data.
• Anonymized Interaction Data: Non-personally identifiable metrics regarding AI multimodal usage to refine Audry's neural response times.

2. How We Use Your Information

We use the strictly necessary data we collect to:

• Provision, secure, and authenticate your access to Aurphyx services.
• Process transactions and fulfill hardware/software orders.
• Respond to your technical support inquiries and provide critical security updates.
• Prevent fraudulent activity and maintain the integrity of the mesh network.

3. Data Sovereignty and Storage (AuraFS)

The Aurphyx ecosystem utilizes AuraFS—a fractal-sharded, distributed filesystem. This means your personal files, AI models, and local operating system states are not stored in a centralized corporate database. They are encrypted and stored locally on your bare metal, or sharded securely across your own designated mesh nodes.

Aurphyx LLC does not possess the cryptographic keys to decrypt, harvest, or monetize the contents of your sovereign data drives.

4. Information Sharing and Disclosure

We have a strict zero-harvesting policy. We do not sell, rent, or trade your personal information to advertisers or data brokers. We only share information under the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our legal business (e.g., payment processors like Stripe or PayPal), strictly bound by confidentiality agreements.
• Legal Requirements: If compelled by a legally binding court order or subpoena, we will comply. However, our decentralized architecture means we often mathematically cannot provide data we do not hold the keys to.
• Protection of Rights: To protect the rights, property, or safety of Aurphyx LLC, our users, or the public.

5. Your Rights and Choices

Subject to your local jurisdiction (including GDPR, CCPA, and COPPA), you possess the right to:

• Access and Export: Request a copy of the personal data held on our central servers.
• Correction and Deletion: Request the modification or permanent deletion of your data ("Right to be Forgotten").
• Opt-Out: Withdraw consent for any optional telemetry or marketing communications at any time.

6. Compliance and Certifications

Aurphyx is committed to maintaining rigorous compliance with applicable privacy laws globally, including but not limited to:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Children's Online Privacy Protection Act (COPPA)
• CAN-SPAM Act

7. Contact Information