Privacy Policy

1. Zero-PII Architecture

25 Alpha is built on a Zero-PII architecture. We process personal information only to the extent required to deliver services. We do not sell, rent, or broker personal data. Personal information is deleted within 30 days of operational necessity unless a longer retention period is required by law.

2. Information We Collect

Contact Information: Name, email, phone, and business name submitted via contact or licensing inquiry forms.

Usage Data: Pages visited, time on page, referral source, and device type. No cross-site tracking.

Platform Data: Business information entered into X.R.A.Y. to enable autonomous agent operations. Stored in AWS us-east-1 (Northern Virginia) with AES-256 encryption at rest.

3. How We Use Information

We use collected information solely to: (a) respond to inquiries and licensing requests; (b) deliver and improve platform services; (c) maintain security and compliance; (d) comply with applicable law. We do not use personal information for advertising or third-party marketing.

4. Data Retention

Contact form submissions are purged automatically after 30 days. Platform tenant data is retained for the duration of the service agreement plus 90 days. Algorithm of Trust™ audit logs are retained for a minimum of 7 years per compliance framework requirements.

5. AWS us-east-1 & Data Residency

All platform data is stored and processed in AWS us-east-1 (Northern Virginia), located in the United States. No personal data is transferred outside the United States without explicit written consent.

6. Cookies & Tracking

25alpha.ai uses only functional cookies necessary for site operation (session state, CSRF protection). No advertising cookies, third-party tracking pixels, or behavioral profiling. The intelligent routing classifier on our homepage is entirely client-side and stores no data.

7. Third-Party Services

We use: Cloudflare (edge delivery, KV storage), AWS us-east-1 (infrastructure), SENTINEL-AUTH (enterprise authentication), Anthropic (AI inference — no data retained beyond the session). Each provider is bound by a data processing agreement.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us at licensing@25alpha.ai. We respond within 30 days.

9. Security

We maintain SOC 2 Type II compliance posture, FedRAMP-aligned controls, OWASP Top 10 mitigations, AES-256 encryption at rest, TLS 1.3 in transit, and SENTINEL-AUTH-managed MFA. Security incidents are disclosed per applicable law.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors.

11. Governing Law

This policy is governed by the laws of the State of Delaware, without regard to its conflict of law provisions. Any dispute arising under this policy shall be brought exclusively in the state or federal courts located in Delaware.

12. Contact

25 Alpha LLC · 611 Commerce Street, Suite 2611-E68, Nashville, TN 37203
licensing@25alpha.ai · 567-252-5742