Privacy Policy — Physis Defense LLC

Contents

1. 1. Information We Collect
2. 2. How We Use Your Information
3. 3. Data Storage
4. 4. Third-Party Services
5. 5. Data Retention
6. 6. Your Rights
7. 7. Children
8. 8. California Residents (CCPA)
9. 9. Nevada Residents
10. 10. Virginia, Colorado & Connecticut
11. 11. Do Not Track
12. 12. Changes to This Policy
13. 13. Governing Law
14. 14. Contact

Physis Defense LLC ("Physis Defense," "we," "us," or "our") operates the Inventi Matrix platform (dashboard.inventimatrix.com) and the LUMINA Private App. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

We collect the following categories of information:

• Account information — email address, password (hashed), organization name, account tier
• Conversation history — messages you send to LUMINA and her responses
• Usage data — features used, pages visited, session duration, actions taken within the platform
• Device and technical information — browser type, operating system, device type
• IP address — used for security, fraud prevention, and rate limiting
• Payment information — processed by Stripe; Physis Defense does not store full card numbers
• Support communications — messages sent to hello@physisdefense.com

2. How We Use Your Information

We use your information to:

• Operate, maintain, and improve LUMINA and the Inventi Matrix platform
• Provide your selected subscription tier and features
• Send transactional emails (account verification, password reset, billing receipts)
• Send service-related notifications with your consent
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve LUMINA's AI capabilities through fine-tuning (you may opt out — see Section 6)

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

3. Data Storage

Inventi Matrix operates on sovereign infrastructure. LUMINA's AI inference is performed on company-controlled systems. Your conversations and personal data are stored in our Turso database, which is hosted within our controlled infrastructure. We do not transmit your conversation data to third-party AI providers for inference purposes — LUMINA runs on our own infrastructure.

4. Third-Party Services

We use the following third-party services, each with their own privacy practices:

• Turso — database hosting (turso.tech)
• Resend — transactional email delivery (resend.com)
• Stripe — payment processing (stripe.com)
• Vercel — frontend hosting (vercel.com)
• Cloudflare — DNS and CDN (cloudflare.com)

We share only the minimum data necessary with each service to perform its function.

5. Data Retention

We retain your account information as long as your account is active. Conversation history is retained to provide you with access to your past interactions and to improve LUMINA's capabilities, unless you request deletion (see Section 6). You may request deletion of your conversation history at any time.

When you delete your account, we delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Opt out of AI training — request that your conversations not be used for LUMINA fine-tuning
• Data portability — request an export of your data in a machine-readable format
• Unsubscribe — opt out of non-critical email communications at any time

To exercise any of these rights, contact us at hello@physisdefense.com. We will respond within 30 days.

7. Children

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us immediately at hello@physisdefense.com and we will delete it.

8. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to Know — the categories and specific pieces of personal information collected about you
• Right to Delete — request deletion of your personal information
• Right to Opt Out of Sale — Physis Defense does not sell personal information
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, email hello@physisdefense.com with subject "CCPA Request." We do not charge a fee and will respond within 45 days.

9. Nevada Residents

Nevada residents may opt out of the sale of their covered information. Physis Defense LLC does not sell personal information. If you have questions, contact hello@physisdefense.com.

10. Virginia, Colorado & Connecticut Residents

Residents of Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA) have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of processing for targeted advertising and profiling. We do not engage in targeted advertising or sale of personal data. To exercise your rights, contact hello@physisdefense.com.

11. Do Not Track

Our platform does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for such signals. We do not engage in cross-site behavioral tracking.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice by posting the updated policy on this page and, where appropriate, by email. Your continued use of our services after the effective date of the updated policy constitutes acceptance of the changes.

13. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Massachusetts.

14. Contact

Physis Defense LLC
Privacy inquiries: hello@physisdefense.com