Privacy Policy

When you visit our website, we may collect certain information automatically, including your IP address, browser type, operating system, referring URLs, and pages visited. This data helps us understand how visitors use our site and improve the user experience.

If you contact us through our contact form, we collect the information you provide, including your name, email address, company name, and message content. This information is used solely to respond to your inquiry.

We may also collect information when you subscribe to our newsletter, including your email address. The newsletter is entirely optional and is never a condition of contacting us, buying from us, or using the site: you subscribe only by entering your address and separately ticking the consent box, and we then email you a confirmation link that you must click before we send you anything. We record when and where that consent was given. You can unsubscribe at any time using the link provided in each email.

We use the information we collect for the following purposes:

• To provide, maintain, and improve our website and services

• To respond to your inquiries and communicate with you

• To send you updates about our projects and engineering insights (if you've opted in)

• To analyze website usage and optimize user experience

• To detect, prevent, and address technical issues or security concerns

• To comply with legal obligations

We do not sell, trade, or otherwise transfer your personal information to third parties. We do not use your data for targeted advertising.

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit

• Regular security audits and vulnerability assessments

• Access controls and authentication for internal systems

• Data minimization — we only collect what we need

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Our website uses minimal cookies and tracking technologies:

• Essential cookies: Required for the website to function properly (theme preference, session management)

• Analytics: We use privacy-respecting analytics to understand general usage patterns. No personal identifiers are collected or stored.

We do not use third-party advertising cookies, social media tracking pixels, or cross-site tracking mechanisms.

You can configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our site may not function properly without cookies.

Circuvent Technologies maintains 53+ open source repositories. All code in our public repositories is freely available under the MIT License unless otherwise specified.

For client projects, we maintain strict confidentiality. Client source code is never made public, shared with third parties, or used in our open source projects without explicit written consent.

Our AI systems (NEXUS AI OS, JARVIS, etc.) are designed with a local-first philosophy — all AI inference runs on-device by default, ensuring no user data is sent to external servers.

When you set up a Circuvent device, the control plane stores what it needs to show you your home and act on your instructions: the device's id, the name and room you give it, the state it reports (for example on/off, brightness, tank level, power draw), the commands sent to it and who sent them, and a record of when it was last seen online.

Command history exists so that a house has an honest record of what happened in it. Where a home is shared with other people, an action is recorded against the person who took it — not against the account holder — precisely so that the record means something.

Energy and sensor readings are kept as history so the app can show you trends. Device state is also sent, in real time, to the phones and browsers signed in to your account.

Devices talk to the control plane over an encrypted MQTT connection using credentials issued to that device alone. A device you remove from your account has its broker credentials withdrawn.

Some Circuvent products process images. What is kept, and for how long, differs by product, and the differences are deliberate.

• FaceDoor stores a mathematical descriptor of an enrolled face — a list of numbers — and not the photograph it was computed from. The photograph is used to compute the descriptor and then discarded. A descriptor cannot be turned back into a picture of a face. Every unlock attempt, granted or refused, is recorded so the household can see who came to the door.

• Number-plate recognition stores the plate read, the time and the camera. The captured image is kept for a shorter period than the reading itself, because a photograph of a gate also contains whoever was walking past and the inside of the car, and that is only useful for the short window in which somebody might dispute a specific read.

• Camera video is relayed live to your own signed-in devices on request. It is not recorded to our servers as part of that relay.

You can delete an enrolled face, a vehicle, or a whole device at any time from the app or the console, and the associated records go with it.

You can invite other people into your home and give each of them a level of access. A member can see the devices in that home and, depending on the access you chose, control them. They cannot see or change anything about your account — not your password, not your signed-in devices, not your billing.

Invitations are single-use and expire. Removing somebody ends their access immediately rather than when their session happens to expire.

People you invite are told what access they have and can leave a home at any time.

Linking Circuvent to Google Home or Amazon Alexa is entirely optional and is something you do yourself. Nothing is shared with either company unless you link your account.

When you link, we share with that assistant only what it needs to show and control your devices: each device's id, the name and room you gave it, its type, and its current state — whether it is on, its brightness, a fan's speed, and whether it is reachable. When you speak a command, the assistant sends it to us and we pass it to your device.

We do not send them your email address, your address, your other devices, your camera images, enrolled faces, number-plate reads, or your energy history.

Locks, gates, cameras, number-plate cameras and drones are deliberately not exposed to voice assistants at all. A spoken command should not be able to unlock a door, open a gate, or launch an aircraft.

Google and Amazon process what we send them under their own privacy policies. You can disconnect at any time from the assistant's own app, or from Settings → Account in Circuvent, and either route immediately revokes the access it was granted.

You have the following rights regarding your personal information:

• Access: You can request a copy of the personal data we hold about you

• Correction: You can request that we correct any inaccurate information

• Deletion: You can request that we delete your personal information

• Objection: You can object to certain processing of your data

• Portability: You can request your data in a machine-readable format

• Withdrawal: You can withdraw consent for data processing at any time

To exercise any of these rights, please contact us at contact@circuvent.com. We will respond to your request within 30 days.

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

We may use the following third-party services:

• GitHub: For hosting our open source repositories and project collaboration

• Vercel: For website hosting and deployment

• Firebase: For backend services in some of our applications (with separate privacy policies for each app)

Each of these services has its own privacy policy governing the use of data on their platforms.