Privacy Policy.

01Scope & data controller

This Privacy Policy applies to all data processed through arguswatch.org and the Argus platform — including its APIs, dashboards, briefings, and associated services (collectively, the "Platform").

We are a UK Ministry of Defence (MoD) JAGGAER One Registered Supplier. Our data-handling practices reflect the standards expected of organisations operating within government and defence supply chains.

ARGUS HOLDINGS — KLL1 LTD acts as the Data Controller for website visitor information and account data, and as a Data Processor for Customer Data uploaded to or generated within the Platform on behalf of subscribing organisations.

Controller details: ARGUS HOLDINGS — KLL1 LTD, a private company limited by shares registered in England & Wales, company no. 17087998. Registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE. Contact: info@arguswatch.org.

02Legal basis & compliance framework

We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our lawful bases for processing are:

• Contract performance — processing necessary to deliver the Platform under your subscription agreement.
• Legitimate interests — Platform security, fraud prevention, service improvement, and maintaining immutable audit trails for forensic accountability.
• Legitimate interests (public website) — keeping arguswatch.org secure and available (CDN and firewall request logs), and understanding in aggregate how the site is used (privacy-minimal analytics, see section 03). We have balanced these interests against your rights: the analytics are cookieless, discard your IP address and honour Do Not Track, and you can object at any time (section 11).
• Legal obligation — compliance with applicable UK law, regulatory requirements, and government contractual obligations.
• Consent — where required for specific activities (for example, marketing communications). You may withdraw consent at any time.

Where we act as a Data Processor for Customer Data, the subscribing organisation remains the Data Controller and is responsible for ensuring a valid lawful basis for the personal data it submits to the Platform.

03Information we collect

Account & organisation data. Business name, business email, user roles, billing information, and authentication credentials for authorised users within your organisation.

Customer Data (Argus). Search queries, monitored jurisdictions, alert configurations, watchlists, and analytical parameters. Argus processes publicly available parliamentary records, committee transcripts, regulatory filings, OJEU notices, and other open-source material. It does not collect or store private communications.

Public-site visitor data. When you browse arguswatch.org, our content-delivery network (Amazon CloudFront) and web application firewall (AWS WAF) process standard request metadata: your IP address, approximate country (derived from the IP address), user-agent, referrer, requested path and time of the request. This metadata is not anonymised — an IP address can identify a network connection. We use it only for security, abuse prevention and operational diagnostics; it is not joined to any account record, and request logs are retained as set out in section 10.

Cookies & local storage. The public site sets no cookies. We use two browser localStorage entries — argus-theme and argus-lang — to remember your light/dark theme and language preference. They are written only when you change the theme or language, stay on your device, and are never sent to us. You can remove them at any time by clearing your browser's site data.

Product analytics. To understand how this website is used we measure aggregate traffic and a small number of interaction events (such as page views and demo-request clicks) with PostHog, configured for maximum privacy. Specifically: analytics requests are proxied through our own domain (arguswatch.org/ingest), so your browser never contacts a third-party analytics server directly; we run it cookieless — entirely in-memory, so nothing analytics-related is written to your device and no cross-session identifier is created; we instruct PostHog to discard your IP address on ingestion; and we honour the Do Not Track browser signal — if it is set, we capture nothing. We do not run session recording, autocapture, heatmaps, or surveys on the public site. This analytics data is hosted in the United States (see section 08 on international transfers) and retained as set out in section 10. Our lawful basis is legitimate interests (section 02). We chose this configuration deliberately: it is the most privacy-preserving way we know of to learn how the site is used.

Usage & telemetry (Platform). Platform usage metrics, error reports, and performance telemetry, used in aggregate to operate and improve the Platform. API call logs and other per-user events are recorded in the audit trail described in section 05.

04Authentication

The Platform supports passwordless authentication via WebAuthn, including biometric methods such as Face ID and Touch ID. Specifically:

• Your biometric data (fingerprint, facial geometry) never leaves your device. It is processed entirely within your device's secure enclave or trusted platform module.
• We receive and store only a cryptographic public key generated by your device during registration. This key cannot be used to reconstruct your biometric data.
• Authentication works by your device signing a challenge with its private key (unlocked locally by your biometric). We verify the signature against the stored public key.

This architecture means that even in the event of a server-side breach, your biometric data remains uncompromised because it was never transmitted to us in the first place.

05Immutable audit logging

For security, regulatory compliance, and forensic accountability, all user actions within the Platform are permanently recorded in an immutable audit trail. This includes:

• IP addresses and device metadata (browser, OS, screen resolution).
• Timestamps of every login, logout, and session refresh.
• All read, write, update, and delete actions performed on Platform data.
• API calls, query parameters, and response metadata.
• Authentication events — successful logins, failed attempts, credential changes.

These logs are append-only and tamper-proof. They cannot be modified or deleted by any user, including Company administrators. This is a deliberate design decision to ensure a forensically sound chain of evidence.

Audit logs are retained for the duration of your subscription plus twenty-four (24) months, or longer where required by law or government contract obligations.

06How we use Customer Data

Customer Data is processed exclusively to deliver the Platform services contracted under your subscription. Specifically, Argus processes search queries against public parliamentary, regulatory, and open-source databases to generate briefings, research reports, risk assessments, forecasts, and alerts.

We do not use Customer Data to train general-purpose AI models, sell to third parties, serve advertising, or for any purpose outside the scope of delivering your contracted services. Full stop.

07Third-party sub-processors

We use enterprise-grade AI APIs and cloud infrastructure as sub-processors. Customer Data sent to these services is not used to train their public models.

Anthropic — Claude API (United States). Advanced reasoning, report synthesis, and multi-source analysis. Processed via Anthropic's commercial API under their enterprise usage policy.

Google Cloud — Gemini API (United States). Natural language processing, document analysis, and structured data extraction. Processed via Google Cloud's enterprise API tier under our Data Processing Agreement.

Perplexity API (United States). Real-time information retrieval and source verification. Processed via Perplexity's enterprise API under commercial terms.

Amazon Web Services. Hosting, content delivery (CloudFront), object storage (S3), certificate management (ACM), and DNS (Route 53), all operated under the AWS Customer Agreement and Data Processing Addendum. The public site (arguswatch.org) is hosted in the AWS us-east-1 region (United States) with edge caching across CloudFront's global network; it holds no Customer Data. Customer production data is stored in AWS or Google Cloud regions in the United Kingdom or European Economic Area by default, unless contractually agreed otherwise.

PostHog (United States). Privacy-minimal product analytics for the public website only — aggregate traffic and a few interaction events, proxied through our own domain, run cookieless with your IP address discarded and the Do Not Track signal honoured (see section 03). PostHog does not process Customer Data.

We maintain Data Processing Agreements (DPAs) with all sub-processors and conduct periodic compliance reviews. We will not engage additional sub-processors that materially change how Customer Data is processed without providing advance notice to active subscribers.

08International transfers

Some of the providers listed in section 07 are based in, or process data in, the United States or other countries outside the United Kingdom:

• Amazon Web Services — public-site hosting in us-east-1 (United States), and CloudFront edge locations worldwide that serve and log requests to arguswatch.org.
• PostHog — website analytics, hosted on PostHog's US cloud.
• Anthropic, Google Cloud and Perplexity — the AI sub-processors listed in section 07, where Customer Data is sent to them for processing.

Where personal data is transferred outside the UK, we rely on one of the following safeguards, as applicable to each provider: UK adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the recipient is certified under it; or the International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the EU Standard Contractual Clauses (the "UK Addendum") issued by the Information Commissioner, as incorporated into the provider's data processing terms, supported by a transfer risk assessment.

You can ask us for more information about the safeguard used for a particular transfer at info@arguswatch.org.

09Data security

We apply security controls appropriate for government and defence data, including encryption in transit and at rest, least-privilege access with multi-factor authentication, strict tenant isolation, and continuous monitoring with immutable audit trails. Specific implementation details are not published here; controls are reviewed under accredited assurance frameworks and disclosed to customers under non-disclosure as part of due diligence.

No system is infallible. In the event of a data breach that may compromise Customer Data, we will notify affected customers promptly and no later than seventy-two (72) hours after becoming aware of the breach, in accordance with UK GDPR requirements.

10Data retention & deletion

Customer Data is retained for the duration of your active subscription plus a thirty (30) day grace period following termination. After this period:

• Customer Data is permanently deleted from primary systems within sixty (60) days.
• Encrypted backups are purged within ninety (90) days.
• Immutable audit logs are retained for twenty-four (24) months post-termination, or longer where required by law.

You may request a complete data export in standard formats (JSON, CSV) at any time during your active subscription. We will fulfil export requests within ten (10) business days.

Public-website visitor data is kept for shorter periods:

• CDN and firewall request logs (IP address, user-agent, referrer, path, time) are retained for no longer than ninety (90) days, then deleted.
• PostHog analytics events (page views and a few interaction events, stored without your IP address) are retained for no longer than twelve (12) months, then deleted.
• The argus-theme and argus-lang localStorage entries stay on your device until you clear them; we never receive them.

11Your rights under UK GDPR

Under the UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data (subject to legal retention obligations).
• Restriction — request that we limit processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@arguswatch.org. We will respond to verified requests within thirty (30) days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

12Changes to this policy

We may update this Privacy Policy to reflect changes in our data practices or applicable law. For material changes, we will provide at least thirty (30) days' written notice to active subscribers via email or in-platform notification. The "Last updated" date at the top of this page will always reflect the most recent revision.