Privacy Policy

This Privacy Policy describes how AIRNEXUS ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website, submit an investor inquiry, or interact with any of our digital services.

By using this platform, you consent to the practices described in this policy. If you do not agree, please do not use our services or submit personal information through our forms.

This policy applies to all visitors, prospective investors, and registered users of the AIRNEXUS platform, regardless of jurisdiction.

Personal Information

• Full name and contact details (email, phone)
• Investor type and accreditation status
• Investment range preferences
• Country, state, and jurisdiction of residence
• Messages or inquiries submitted through forms
• Payment information (processed securely via Stripe — we do not store card details)

Technical Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referral source and UTM parameters
• Cookies and similar tracking technologies

We use your personal information strictly for the following purposes:

• Investor qualification, verification, and suitability assessment
• Communication regarding investment opportunities and platform updates
• Regulatory compliance, including anti-money laundering (AML) and know-your-customer (KYC) obligations
• Processing application fees and payment transactions
• Platform security, fraud prevention, and abuse detection
• Internal analytics to improve user experience and platform performance
• Legal defense and enforcement of our rights

We do not use your personal data for unsolicited marketing, advertising, or sale to third-party data brokers.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases:

• Consent: You explicitly consent when submitting the investor waitlist form.
• Contract: Processing necessary to perform our agreement with approved investors.
• Legal Obligation: Compliance with securities, tax, and anti-money laundering regulations.
• Legitimate Interests: Platform security, fraud prevention, and business analytics.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service Providers: Stripe (payment processing), Supabase (data hosting), and email delivery services. All are bound by confidentiality and data protection obligations.
• Regulatory Authorities: When required by law, court order, or regulatory investigation (SEC, FINRA, tax authorities, etc.).
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred subject to the same privacy commitments.
• Legal Protection: To enforce our terms, protect our rights, or prevent fraud or harm.

We implement industry-standard technical and organizational measures to protect your data:

• SSL/TLS encryption for all data in transit
• Encrypted data storage at rest (AES-256)
• Role-based access control and Row Level Security (RLS)
• Regular security audits and penetration testing
• Automated backup and disaster recovery procedures
• Employee access limited to need-to-know basis

Despite our efforts, no internet transmission is completely secure. We encourage you to use strong passwords and protect your account credentials.

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Investor leads: retained for the duration of the investment opportunity plus 7 years for regulatory compliance
• Payment records: retained for 7 years per tax and accounting requirements
• Technical logs: retained for 90 days for security monitoring
• Marketing consents: retained until withdrawn or for 2 years of inactivity

After the retention period expires, data is securely deleted or anonymized in accordance with our data destruction protocols.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request limitation of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing)

To exercise any of these rights, contact us at privacy@airnexus.ai. We will respond within 30 days of receiving a verified request.

We use cookies and similar technologies to enhance your experience, analyze traffic, and understand platform usage.

Types of Cookies:

• Essential: Required for platform functionality (login, forms, security)
• Analytics: Helps us understand visitor behavior and improve the platform
• Preferences: Remembers your settings and preferences

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure that such transfers are protected by appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for jurisdictions with equivalent data protection standards
• Binding corporate rules where applicable

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email: privacy@airnexus.ai

Legal: legal@airnexus.ai

We will make every reasonable effort to address your concerns. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.