Privacy Policy

Last updated: February 28, 2026

AIRG Systems (“AIRG,” “we,” “us,” or “our”) is committed to protecting the privacy and security of all data processed through our platform. This Privacy Policy describes how we collect, use, and safeguard information.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and role. Authentication is handled through Clerk with JWT (RS256) verification.

Platform Data

Operators submit gambling event data (anonymized player identifiers, event types, amounts, timestamps) through our API for risk analysis. This data is processed by our ORBIT AI model to generate risk predictions.

Usage Data

We collect standard analytics about platform usage including page views, feature usage, and performance metrics to improve our service.

2. How We Use Information

• Provide and operate the AIRG responsible gambling platform
• Process gambling events through our ORBIT AI model for risk detection
• Generate compliance reports and audit trails
• Improve model accuracy and platform performance
• Communicate about account and service updates
• Meet regulatory and legal obligations

3. Data Retention

We retain data in accordance with jurisdiction-specific compliance requirements. Retention periods range from 3 to 7 years depending on the applicable state regulations. Audit trails are retained for the maximum required period with cryptographic integrity verification.

4. Data Security

We implement industry-standard security measures including:

• AES-256 encryption at rest and TLS 1.3 in transit
• JWT (RS256) authentication with JWKS verification
• Role-based access control (RBAC) with 6 granular roles
• Cryptographically signed immutable audit trails
• Multi-tenant data isolation at the organization level
• Regular security assessments and penetration testing

5. On-Premise Deployment

For operators with data sovereignty requirements (e.g., New York, tribal jurisdictions), AIRG offers on-premise deployment where all data remains within the operator's infrastructure. No data is transmitted to AIRG systems in on-premise configurations.

6. Data Sharing

We do not sell personal information. We may share data only in the following circumstances:

• With regulatory bodies when required by law or subpoena
• With service providers who assist in operating our platform (under strict data processing agreements)
• In anonymized, aggregated form for research purposes

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to regulatory retention requirements)
• Object to or restrict certain processing activities
• Data portability

8. Contact Us

For privacy-related inquiries, contact us at privacy@airg.systems.