Privacy Policy

This Privacy Policy applies to:

• Visitors to our public website, currently available at https://alphaagent.prometheusrl.com (the "Site")
• Prospective customers who contact us through the Site or related communications

This policy does not yet govern the AlphaAgent product platform itself. A separate, product-specific privacy and data processing framework will be published as the platform becomes publicly available.

Using the Site does not, by itself, mean that you consent to linked session analytics. The banner lets you accept session tracking, keep only basic counts, or turn off all analytics.

We collect only the information necessary to operate our marketing site, respond to inquiries, and understand how the Site is used.

2.1 Information You Provide Voluntarily

When you contact us or request information, we may collect:

• Name
• Work email address
• Company name
• Any information you choose to include in your message

This information is provided voluntarily and is used solely for prospecting, responding to inquiries, and relationship management.

2.2 Website Analytics

Unless you turn off all analytics, we collect basic counts of site activity. These counts use no analytics identifier cookies or session IDs. Events are combined into counts rather than kept as individual browsing histories. If you accept session analytics, we also use a random session identifier and a coarse country code to understand one journey. Accepted-only records also include a coarse viewport class, approved campaign/source categories, website content revision and cumulative active-visible page time with a random per-page-visit reference. Full referrers and supplied campaign values are discarded after bounded classification. A separate random consent reference supports evidence and withdrawal. These identifiers can link actions within a session and are treated as personal data where applicable. Analytics events:

• Do not include IP addresses
• Do not include contact-form names, email addresses, phone numbers or messages
• Do not include full referrer URLs or URL query strings

Examples of data collected include:

• Page and section views
• Navigation and button clicks
• Interactive demo video plays, contact submission attempts/results and service-accepted contact submissions
• Country code, coarse viewport class, registered campaign/source categories and cumulative active-visible page time only if accepted

This analytics data is collected using our own internal analytics tooling, hosted entirely on AWS, and is used strictly to improve site structure, performance, and clarity.

Linked session events are retained for up to 90 days, or erased from linked source storage after withdrawal. Existing derived Athena query outputs can remain until their separate three-day expiry; withdrawal does not claim immediate erasure from every past query result. Consent and withdrawal records are kept for up to one year. Temporary count files expire after four days, combined daily counts after one year, and Athena query results after three days. Pending analytics messages remain in the processing queue for up to four days; failed messages can remain in its recovery queue for up to 14 days. Basic events are combined into counts rather than kept as individual browsing histories in S3.

2.3 Contact-Service Operations

Contact-service acceptance, email delivery, bounce and complaint accounting operate independently of website analytics preference so we can reliably handle enquiries. Service acceptance is not proof of delivery, a qualified enquiry or a booked conversation. Seven-day idempotency records prevent repeated logical submissions and store request status rather than your form content. Internal aggregate business-outcome tallies contain counts, reporting dates and bounded source-reference codes, without joining them to a visitor or contact record.

Internal aggregate reports expire after 90 days. Aggregate outcome/correction history expires after one year and application logs after 30 days. The enquiry you submit is handled separately to respond to you; these aggregate retention periods do not define retention of your contact correspondence.

After you make a choice, a first-party preference cookie remembers whether you accepted session analytics, chose basic counts only, or turned off all analytics, so the banner does not return on every visit. If you accept session analytics, a separate first-party cookie assigns a random session identifier for 30 minutes of activity. The preference cookie also contains a random consent reference for recording and withdrawing an accepted choice. We do not use these cookies for advertising or tracking across other websites.

If you decline session tracking or make no choice, we collect only basic counts without analytics identifier cookies. Choosing Turn off all analytics stops these counts too. You can change or withdraw your choice at any time using Analytics settings in the footer.

Read our Cookie Policy for each cookie’s purpose and duration.

We use collected information for the following purposes:

• To respond to inquiries and contact requests
• To communicate about our products or services, when appropriate
• To understand basic website activity unless you object, and, with your permission, individual sessions so we can improve the Site
• To operate, secure, and maintain the Site

We do not sell, rent, or trade personal information.

We may, in the future, send product updates or marketing communications.

If and when such communications are sent:

• They will be relevant to Prometheus RL and its products
• You will be able to opt out at any time via an unsubscribe link or by contacting us directly

We may continue to send non-promotional administrative or operational communications if required.

We do not share personal information with third parties for marketing purposes.

Information may be processed by trusted service providers strictly as required to operate the Site, including:

• Cloud infrastructure providers (currently AWS)

These providers are permitted to process information only on our instructions and in accordance with this Privacy Policy.

We may disclose information if required to do so by law, regulation, legal process, or enforceable governmental request.

We implement reasonable administrative, technical, and organizational safeguards to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no system can be guaranteed to be completely secure. By using the Site, you acknowledge and accept this risk.

Prometheus Research Labs Limited is incorporated in England and Wales and operates globally.

If you access the Site from outside the United Kingdom, you acknowledge that your information may be processed in the United Kingdom or other jurisdictions where our infrastructure operates.

The Site is intended for a professional, institutional audience and is not directed to individuals under the age of 18.

We do not knowingly collect personal information from minors.

As a company established in the United Kingdom, we handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where applicable, you have the right to access the personal information we hold about you, to request its correction or deletion, to object to or restrict its processing, and to request a copy in a portable format.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your information has been handled improperly.

We may update this Privacy Policy from time to time to reflect changes in our practices, operations, or legal requirements.

Material changes will be posted prominently on the Site. If a change requires new analytics consent, we will ask for it.