Privacy Policy

ARMOR Exo, Inc. is the controller of the personal data described in this policy. You can reach us about anything in this policy at info@armor-exo.com or by mail at ARMOR Exo, Inc., 313 Summit Forest Dr, Marietta, GA 30068, United States.

This policy covers the armor-exo.com website, our newsletter, and messages you send us. Our products and apps, including Shield, may have their own notices, which apply when you use them.

• We do not use cookies, advertising trackers, or social media plugins on this website. We count visits with cookieless analytics that don’t identify you.
• We collect personal data only when you choose to give it to us: by subscribing to the newsletter, emailing us, or booking a demo.
• We do not sell your personal data or share it for advertising.

Newsletter. If you subscribe, we collect your email address, along with your subscription status and the date you subscribed or unsubscribed. We use it only to send you ARMOR updates. We may count how many times a newsletter is opened or a link is clicked in total, but we do not link this to individual subscribers.

Emails to us. If you email us, we receive your email address, your name if you include it, and whatever you write. We use it to reply and to follow up on your request.

Demo bookings. Demos are booked through Calendly, a scheduling service. Calendly collects the details you enter there, such as your name, email address, and any answers you give, and shares them with us so we can hold the meeting. Calendly’s own privacy policy applies to its service.

Website visits. Like any website, our hosting provider automatically processes technical data when you visit, such as your IP address, browser type, the page requested, and the time of the request. This is needed to deliver the site and keep it secure. We do not use this data to identify you or build profiles.

Visit statistics. We use Vercel Web Analytics to see how many people visit each page. For each page view it records the page address, the referring website, and your browser, operating system, device type, and country. Your country is derived from your IP address, but the IP address is not stored, and visits are grouped using a temporary identifier that is discarded within 24 hours. It does not set cookies or store anything on your device, and we see only totals, never individual visitors. We also use Vercel Speed Insights, which works the same way, to measure how quickly pages load, along with your connection type (for example, 4G). We remove query parameters from page addresses, except campaign tags such as utm_source, and we don’t record your visits at all if your browser sends a Global Privacy Control or Do Not Track signal.

Where data protection laws such as the GDPR, UK GDPR, or Thailand’s Personal Data Protection Act (PDPA) apply, we rely on the following legal bases:

• Consent, for the newsletter. You can withdraw it at any time with the unsubscribe link in every email or by contacting us.
• Taking steps at your request before a possible contract, and our legitimate interest in responding to people who contact us, for emails and demo bookings.
• Our legitimate interest in running a secure, working website, for technical data processed by our hosting provider.
• Our legitimate interest in understanding how the website is used so we can improve it, for visit statistics. You can object at any time by turning on Global Privacy Control or Do Not Track in your browser.
• Compliance with legal obligations, where the law requires us to keep or disclose data.

We share personal data only with service providers that process it on our behalf and under our instructions:

• Vercel, which hosts this website and provides our visit and performance statistics.
• Google (Google Workspace), which provides our email.
• Cloudflare, which protects and delivers our mailing-list service, and the providers that host it and deliver newsletter emails.
• Calendly, which schedules demo meetings.

We may also disclose data if the law requires it, to protect our rights or the safety of others, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

Links to LinkedIn and Instagram take you to those services. Their privacy policies apply once you are there.

ARMOR is based in the United States, and our service providers may process data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom, Switzerland, or Thailand, we rely on appropriate safeguards, such as the EU-U.S. Data Privacy Framework where a provider is certified, or standard contractual clauses.

• Newsletter: until you unsubscribe or ask us to delete your data. After you unsubscribe, we may keep your email address on a suppression list only to make sure we do not email you again.
• Emails and demo bookings: as long as needed to handle your request and any business relationship that follows, then deleted.
• Technical data: for a short period set by our hosting provider, then deleted automatically.
• Visit statistics: kept by Vercel only as totals that can’t be linked back to you.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing.

To make a request, email info@armor-exo.com. We will respond without undue delay, within the time limit set by applicable law (usually 30 days), and may ask you to confirm your identity first. We will not treat you differently for exercising your rights.

You also have the right to complain to a data protection authority, such as the authority in your EU country (for example, the AEPD in Spain), the Information Commissioner’s Office in the UK, or the Personal Data Protection Committee in Thailand. We would appreciate the chance to address your concern first.

The website is served only over encrypted HTTPS connections, and access to personal data is limited to the people at ARMOR who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.

This website is intended for businesses and professionals and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

We will update this policy when our practices change and revise the date at the top of the page. If a change significantly affects how we use your data, we will let newsletter subscribers know before it takes effect.