AI Passport

Privacy Policy

AI Passport is built around user control. This policy explains what information we collect, how we use it, when we share it, and what choices you have.

Effective date: July 8, 2026

Egoist Machines, Inc. ("Egoist," "we," "our," or "us") operates the AI Passport website, waitlist, card editor, developer pages, MCP tools, and related online services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Services or otherwise interact with us online.

1. Information we collect

We may collect the following categories of personal information:

• Contact and account information, such as your name, email address, phone number, waitlist serial number, username, email confirmation status, and marketing consent records.
• Waitlist, referral, and card information, such as referral codes, referral links, referral attribution, saved card designs, design tokens or token hashes, QR image uploads, and other content you submit through the card editor or MCP tools.
• Developer-interest information, such as company or app name, role, app type, use case, requested context categories, call preference, and notes.
• Communications, such as messages, support requests, survey responses, and other information you send to us.
• Device and usage information, such as IP address, browser type, device information, referring pages, pages viewed, events, session identifiers, analytics identifiers, approximate location inferred from IP address, and error or diagnostic information.
• Cookie and similar technology data, including data collected through analytics tools such as PostHog.

We collect information directly from you, automatically when you use the Services, from service providers that help us operate the Services, and from referral links when someone refers you to the waitlist.

2. How we use information

We may use personal information to:

• operate, maintain, secure, and improve the Services;
• manage waitlist reservations, email confirmation, login codes, usernames, referrals, card designs, QR image uploads, and MCP design access;
• send waitlist, launch, product, marketing, transactional, and administrative communications by email, text message, or other channels you provide;
• respond to questions, requests, and support inquiries;
• review developer-interest submissions and contact potential partners;
• screen submitted names, images, card designs, and related content for abuse, safety, rights, and policy issues;
• understand site usage, measure performance, and debug errors;
• protect against spam, fraud, referral abuse, unauthorized access, and security issues;
• comply with legal obligations and enforce our agreements.

3. How we share information

We may share personal information with:

• service providers that help us with hosting, email delivery, authentication, database and storage services, analytics, content moderation, security, communications, and website operations;
• third-party services you choose to use or connect, such as MCP clients, agent tools, social sharing services, or websites reached through outbound links;
• professional advisors such as lawyers, auditors, accountants, and insurers;
• government authorities, regulators, or law enforcement where required by law or to protect rights, safety, and security;
• a buyer, investor, or successor in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

Some features are designed to create shareable or visible content. For example, referral links can be shared with others, and images you upload for QR styling may be stored at a public URL so they can render on your card. Do not upload or share information you do not want others to be able to access.

We do not sell personal information for money, and we do not currently share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide any choices required by law.

4. Cookies and similar technologies

We may use cookies and similar technologies to keep the site working, understand engagement, and improve performance. Some cookies may be essential for the site to function. Others may support analytics or similar tools, including PostHog. We may also use local storage or similar browser storage to remember referral information, reservation state, or design-related preferences.

You can use browser settings to block or delete cookies, though some Services may not work properly. Where required by law, we will provide additional cookie or tracking choices.

5. Your choices

You can make the following choices:

• You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us.
• You can opt out of marketing text messages by replying STOP. For help with text messages, reply HELP. Message and data rates may apply, and message frequency may vary.
• You can contact us to request access, correction, or deletion where applicable law provides those rights.
• To submit a privacy request, email privacy@ego.ist from the address associated with your reservation or developer submission, or include that address in your request. We may need to verify your identity before acting on the request.
• You can adjust browser settings to block or delete cookies, though some site features may not function properly as a result.

6. California privacy rights

If you are a California resident, you may have rights under California law, including the right to know what personal information we collect, use, disclose, sell, or share; request access to or portability of personal information; request deletion; request correction; opt out of sale or sharing; limit certain uses of sensitive personal information; and not be discriminated against for exercising your rights.

We collect the categories described in Section 1 for the purposes described in Section 2, from the sources described in Section 1. We disclose those categories to the recipients described in Section 3.

To submit a privacy request, contact us at privacy@ego.ist.

7. EEA and UK users

If you are in the European Economic Area ("EEA") or the United Kingdom, you may have additional rights under applicable data protection law. Egoist Machines, Inc. is the controller of the personal information described in this Policy.

Our legal bases for processing personal information may include:

• your consent, including when you join the waitlist or opt in to receive email or text updates;
• our legitimate interests, such as operating the website, improving the Services, protecting security, preventing abuse, and understanding product usage;
• performance of a contract or steps taken at your request before entering a contract;
• compliance with legal obligations.

Subject to applicable law, you may have the right to request access to your personal information, request correction or deletion, object to certain processing, request restriction of processing, withdraw consent, and request a copy of certain information in a portable format.

You may also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us at privacy@ego.ist.

We are based in the United States, and personal information may be processed in the United States or other countries where we or our service providers operate. Where required by applicable law, we use appropriate safeguards for international transfers.

8. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to manage the waitlist, referrals, card designs, developer-interest submissions, communications, security, legal obligations, disputes, and agreement enforcement. Retention periods may vary based on the type of information and our operational, legal, or security needs.

9. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version here and revise the effective date above.

12. Contact us

EGOIST MACHINES INC
Unit 841, 1395 22nd St
San Francisco, CA 94107
privacy@ego.ist