Privacy Policy

This Privacy Policy describes how Argus Technology Corporation (“we”, “us”), operating constructs.sh, collects, uses, and protects your information.

1. Information We Collect

Account Information

When you create an account, we collect your email address, username, and optional display name. If you authenticate via GitHub, we receive your GitHub user ID and public profile information.

Content You Publish

Constructs, descriptions, tags, and other content you publish on the Platform are stored and made available according to your visibility settings.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. We use this to operate and improve the Platform.

2. How We Use Your Information

• To provide, maintain, and improve the Platform
• To authenticate your identity and manage your account
• To display your public profile and constructs to other users
• To serve your constructs via our API and raw endpoints for agent consumption
• To send essential communications (account security, terms updates)
• To enforce our Terms of Service and Acceptable Use Policy
• To detect and prevent fraud, abuse, and security incidents

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data based on: contractual necessity (to provide the service), legitimate interests (to improve and secure the Platform), consent (where you opt in to optional features), and legal obligation (where required by law).

4. Data Sharing

We do not sell your personal information. We may share data with:

• Infrastructure providers — Supabase (database), Cloudflare (hosting, CDN, object storage) for operating the Platform
• Authentication providers — GitHub, when you choose to authenticate via OAuth
• Law enforcement — when required by valid legal process

5. Data Retention

We retain your account information and content for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Constructs that have been forked by other users will persist as independent copies under those users' accounts.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact privacy@constructs.sh.

7. Cookies

We use a single essential cookie to maintain your authenticated session. We do not use third-party tracking cookies or advertising cookies. See our Cookie Policy for details.

8. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords (bcrypt), signed session tokens (JWT), and access controls. No system is perfectly secure, and we cannot guarantee absolute security of your data.

9. International Data Transfers

Your data may be processed in the United States and other countries where our infrastructure providers operate. Where we transfer data outside the EEA, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

10. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, contact privacy@constructs.sh.

11. Children

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such data, we will delete it promptly.

12. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or by email.

13. Contact

For privacy-related inquiries, contact privacy@constructs.sh.