Privacy Policy

Overview and Scope

FERZ, Inc. provides runtime authorization infrastructure, deterministic-governance materials, technical descriptions, research summaries, and related business communications for sophisticated enterprise, institutional, and government audiences. This Privacy Policy describes how FERZ collects, uses, discloses, protects, and retains personal information in connection with its websites, public materials, inquiries, events, business communications, and related digital properties.

What this policy covers

• Visitors to FERZ, Inc.-operated websites and subdomains.
• Individuals who submit inquiries through contact forms or email.
• Business communications and partnership discussions.
• Professional conference and networking interactions.
• Marketing communications and thought-leadership content.

What this policy does not cover

• Personal data processed through client deployments of FERZ infrastructure, which is governed by separate data processing agreements.
• Employee and personnel data, which is covered by separate notices.
• Third-party websites or services that FERZ materials may link to.

Information FERZ Collects

Information you provide directly

• Contact information: name, email address, phone number, job title, company name.
• Communication content: messages, inquiries, and other content submitted through contact forms or email.
• Professional information: industry, company size, technology interests, and other business-related details.
• Event information: details collected at professional conferences, networking events, or business meetings.

Information collected automatically

• Device information: IP address, browser type and version, operating system.
• Usage information: pages visited, time on site, referring websites.
• Security information: data necessary to maintain website security and prevent fraud.

Sources of personal information

FERZ collects personal information directly from the individual; automatically through the individual's interaction with FERZ websites; and, where applicable, from event organizers, business contacts, referrals, and publicly available professional sources.

Sensitive information

FERZ does not request or intentionally collect sensitive personal information through its public websites or general inquiry channels. Users should not submit health information, financial account information, government identification numbers, precise geolocation data, biometric data, classified information, controlled unclassified information, export-controlled technical data, or other sensitive information unless expressly authorized in a written agreement. If such information is submitted inadvertently, FERZ may delete, restrict, or handle it as appropriate under applicable law and operational security requirements.

Purposes of Processing

FERZ processes personal information to respond to inquiries and requests; to conduct business communications, partnership discussions, and events; to provide and improve its public materials and websites; to maintain website security and prevent fraud or misuse; to send communications a person has requested or that are permitted by law; and to comply with legal, regulatory, and contractual obligations.

Legal Bases for Processing

Where the EU General Data Protection Regulation or the UK GDPR applies, FERZ relies, as applicable, on the following legal bases: the individual's consent, for example for optional communications or certain cookies; FERZ's legitimate interests in operating, securing, and developing its business, balanced against the individual's rights; the performance of a contract or steps taken at the individual's request before entering into a contract; and compliance with legal obligations. Where FERZ relies on consent, the individual may withdraw consent at any time without affecting prior processing.

Cookies, Analytics, and Tracking

FERZ websites use essential cookies for site operation and security, and use Google Analytics for limited analytics about how the site is used. Google Analytics sets analytics cookies and processes usage data, including IP address, on FERZ's behalf. FERZ does not use advertising pixels, cross-context behavioral advertising cookies, or targeted-advertising technologies. Users can control cookies through their browser settings, and can opt out of Google Analytics using the Google Analytics opt-out browser add-on. Disabling certain cookies may affect site functionality.

Categories of Recipients and Service Providers

FERZ may disclose personal information to categories of recipients that support its operations, which may include hosting and cloud-infrastructure providers, email and communication providers, security providers, analytics providers, and professional advisors, and to authorities where required by law. Service providers are permitted to process personal information only as necessary to perform services for FERZ and consistent with applicable law.

Sale, Share, and Targeted Advertising

FERZ does not sell personal information and does not process personal information for targeted advertising or cross-context behavioral advertising. FERZ uses Google Analytics for limited site analytics and does not use Google Analytics advertising features, Google signals, advertising personalization, advertising pixels, or cross-context behavioral advertising technologies.

FERZ does not currently provide a "Do Not Sell or Share My Personal Information" link or separately recognize Global Privacy Control signals because FERZ does not sell or share personal information as those terms are used in applicable consumer privacy laws and does not process personal information for targeted advertising. If FERZ later engages in activity requiring recognition of opt-out preference signals under applicable law, FERZ will update this Privacy Policy and implement the required mechanism.

International Transfers

FERZ is based in the United States, and personal information is processed in the United States. Where individuals in the European Economic Area or the United Kingdom provide personal information through FERZ websites, or where analytics data is collected from such individuals, that information is processed in the United States. FERZ relies on the safeguards offered by its United States-based service providers, such as Standard Contractual Clauses or Data Privacy Framework participation, where required by applicable law.

Data Retention

FERZ retains personal information only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law, contractual obligations, or legitimate business needs such as security, dispute resolution, and recordkeeping. Inquiry and business-contact records are retained for as long as necessary to respond to the inquiry, maintain business records, manage prospective business relationships, resolve disputes, and comply with legal obligations. Website-security logs and analytics records are retained according to the applicable provider configuration and FERZ's security and recordkeeping needs.

Your Privacy Rights

Subject to applicable law and to verification of identity, individuals may have the right to: request access to and information about the personal information FERZ holds; request correction of inaccurate information; request deletion; request a copy in a portable format; opt out of the sale or sharing of personal information and of targeted advertising; object to or request restriction of certain processing; and withdraw consent where processing is based on consent. FERZ does not discriminate against individuals for exercising these rights.

The specific rights available depend on the applicable law and the individual's location, including the CCPA as amended for California residents, the VCDPA for Virginia residents, and the EU and UK GDPR for individuals in those regions.

How to Submit a Request

Individuals may submit a privacy-rights request using the contact details below. FERZ will take steps to verify the identity of the requester and may request additional information for that purpose. Authorized agents may submit requests where permitted by applicable law, subject to verification of authority.

FERZ will respond to privacy-rights requests within the timeframe required by applicable law. Where permitted by law, FERZ may extend the response period when reasonably necessary due to the complexity or number of requests, and will notify the requester of the extension as required.

Appeals

Where required by applicable law, including the VCDPA, an individual whose request is declined may appeal the decision by contacting FERZ using the details below. FERZ will respond to appeals within the period required by applicable law and will provide information on further escalation, including to the relevant supervisory authority, where required.

Children's Privacy

FERZ materials and services are intended for business, institutional, and government audiences and are not directed to children. FERZ does not knowingly collect personal information from children under the age of 18. If FERZ becomes aware that it has collected such information without appropriate authorization, it will take steps to delete it as required by applicable law.

Security

FERZ maintains reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and FERZ does not guarantee absolute security. FERZ addresses security incidents in accordance with applicable law and its incident-response procedures.

Complaints and Supervisory Authorities

If an individual is not satisfied with FERZ's response to a privacy concern, the individual may have the right to lodge a complaint with the relevant supervisory authority:

• Individuals in the EU: the national data protection authority in their country.
• Individuals in the UK: the Information Commissioner's Office (ico.org.uk).
• California residents: the California Privacy Protection Agency or the California Attorney General.
• Virginia residents: the Office of the Attorney General of Virginia.

Updates to This Policy

FERZ may update this Privacy Policy from time to time. Updates will be posted with a revised effective date. Where required by applicable law, FERZ will provide additional notice of material changes.

Contact

Data controller: FERZ, Inc., McLean, Virginia, USA.

Email: info@ferz.ai
Phone: 571-205-9511

For privacy inquiries or privacy-rights requests, use "PRIVACY REQUEST" in the subject line.