Privacy Notice

Imperium Group Holdings LLC is the controller of personal information collected through this website. We are a Wyoming limited liability company with our registered address at 30 N Gould St Ste N, Sheridan, WY 82801, United States. Imperium builds and runs the AI Operating System for established businesses in the United Kingdom, Southeast Asia and elsewhere.

You can reach us about anything in this notice at alex@imperium-growth.com.

We collect information in four ways.

• Information you give us. When you email us, book a walkthrough, request an AI audit at audit.imperiumos.ai, or sign in to ARX at app.imperiumos.ai, you provide details such as your name, work email, company, role and what you tell us about your business. The walkthrough page on this website itself stores nothing. It hands you to the audit. The newsletter field sends the address you type to beehiiv, which sends the newsletter, and nothing else on the site stores what you type.
• Information collected automatically. Our hosting provider records standard server logs for every request: IP address, browser and device type, the page requested, the referring page and the time. We use these to keep the site running and secure. We never copy the IP address out of those logs into anything else.
• How the site is used. Three tools measure how pages, films and buttons are used: Plausible, Microsoft Clarity and our own event log. What each records, and where each runs, is set out in the next two sections.
• Video playback. Films on this site are streamed through Mux. When you press play, Mux receives playback events (start, pause, seek, buffering, completion), your browser and device type, an approximate location derived from your IP address on Mux’s side, and the random viewer identifier described below, so that we can tell one viewer from another when we look at how films perform. Mux keeps that viewing data for 100 days. In the countries in the third group below the viewer identifier is left out and nothing about playback is sent to Mux’s analytics. Where a film is not yet on Mux, it plays from YouTube’s privacy-enhanced embed (youtube-nocookie.com), and Google’s own privacy policy applies to that playback.

ARX by Imperium is the phone app for ARX. It connects your phone to the computer your company runs ARX on: your own ARX desktop, or an ARX Cloud host that Imperium runs for your company. Your company creates your seat, so the app has no public sign-up, and your company’s agreement with us governs the work you do in ARX. This section explains what the app sends and where it goes.

• Pairing. To connect, you type or scan a one-time code from your computer. The app sends us that code, a key it creates on your phone and the device name (“ARX ios” or “ARX android”). We store the key and the name with your company and seat, so that only your phone can reach your computer. The app does not ask for your name, email address or phone number.
• Messages, files, photos and voice. What you type, the files and photos you attach and what you say in Live voice travel from your phone to your company’s ARX computer through our relay, encrypted end to end so the relay cannot read them. To answer you, that computer sends them to Anthropic (Claude) in every chat, and to OpenAI in Codex chats and Live voice. ARX keeps the conversation on your company’s ARX computer and may keep a copy in the workspace Imperium hosts for your company, the same way it handles work typed on the computer itself.
• Camera, microphone and photos. The app uses the camera to scan pairing codes and to take photos you choose to attach, the microphone for Live voice and dictation, and your photo library only when you pick a photo. Dictation uses speech recognition on your phone and puts the text into your draft.
• Notifications. If you allow notifications, the app gives your company’s ARX computer a push token, which it uses to tell you when a chat has finished or needs your approval. Notifications travel through Expo’s push service and Apple or Google, and can show a short preview of the reply.
• AI consent. Before your first message, the app shows which AI providers will read your messages and asks you to agree. Your answer is stored on your phone.
• Reports. If you report a reply, the app sends us the reason, any note you add and, only if you choose to include it, the text of the reply, together with your company and seat, so that we can look into it.
• On your phone. The app keeps its key and connection details in the phone’s secure storage, along with your AI consent answer and your company’s name and colours.

The app contains no advertising, analytics or crash-reporting software. We do not sell what it collects or use it to track you across other companies’ apps and websites. The providers involved are Anthropic and OpenAI (AI answers), Cloudflare (the encrypted relay), Vercel and Supabase (pairing and our database), and Expo, Apple and Google (notifications).

How long we keep it. A pairing code expires after five minutes. Pairing records stay while your seat is active. When a phone is disconnected, its key stops working at once and we keep a record of the removed phone for security until the seat is deleted. Reports are kept while your company uses ARX. Conversations are kept for as long as your company’s agreement with us sets out. When your company removes your seat or its agreement ends, we delete the seat’s pairing records and reports within 30 days, unless the law requires us to keep them.

Removing a phone, a seat or your data. Tap “Disconnect this phone” in the app’s settings, or remove the phone under Connected devices in ARX on your computer. Deleting the app removes everything it stored on the phone. Your company’s ARX admin can remove your seat, which disconnects every phone on it. To have your seat or your data deleted, ask your admin or email alex@imperium-growth.com, and we will confirm within one month.

Everything the site or its providers place in your browser, and what each tool records.

• Plausible (plausible.io) counts page views, referrers, country, device type and the buttons people press, in aggregate. It sets no cookies and stores nothing in your browser, and it cannot single you out. It runs for every visitor.
• Microsoft Clarity records how pages are used: scrolling, clicks, taps and cursor movement, which it turns into heatmaps and into recordings of individual visits that we can replay. It sets two cookies on this site, _clck (a random Clarity user id, kept for a year) and _clsk (links the pages of one visit, kept for a day). Microsoft also sets cookies on its own domains (CLID, MUID, ANONCHK, MR and SM) that are listed in its cookie list. Anything you type into a field is masked before it leaves your browser, as are numbers and email addresses on the page. Recordings are kept on Microsoft’s side for 30 days. Clarity runs only in the countries in the first two groups in the next section, and in the second group only after you have seen a one-line notice.
• Our own event log records which pages you open, how far and how fast you scroll, which sections stay on screen, which links, buttons and panels you press, when you switch tabs and whether you come back, whether the page you asked for exists, whether a script failed, how quickly the page loaded, and for films which one you play and where you pause, seek and stop. Each event carries the page, the time, a random session id (imp_sid, session storage, gone when the tab closes), the random viewer id (imp_vid, local storage), your country as a two-letter code, and whether you are on a phone, a tablet or a desktop. It never records what you type, your IP address, your name, or anything from any account you are signed in to. Events are kept for 13 months and then deleted. The log runs only in the countries in the first two groups. The same log, under the same rules, runs on the audit pages (audit.imperiumos.ai, go.imperiumos.ai and links.imperiumos.ai), where the ids are imp_vsl_session (session storage) and imp_vsl_visitor (local storage). A link from this site to those pages carries this site’s viewer id in its address, so the two visits can be read together.
• Two more values in local storage: imp_seen, the date of your last visit, which tells a returning visitor from a new one, and imp_notice, that you have seen the notice. Both stay until you clear site data.
• The tier cookie holds one word: which of the three groups below the site put you in, so the page knows what it may run. It is set on every visit, lasts a day, and contains nothing about you. It is the only cookie this site sets itself.
• Mux, and YouTube where used, may set their own storage in the course of streaming video. They are governed by those providers’ policies.

Our host passes us the country your connection comes from as a two-letter code. Apart from the contact page described in the next section, we never see or keep the address itself. The code puts you in one of three groups.

• First group. Singapore, the Philippines, New Zealand, India and the United States outside California. Everything described above runs.
• Second group. Australia, Hong Kong, Thailand, Indonesia, Malaysia, the United Arab Emirates and California. The event log runs. Clarity starts only after a one-line notice has been shown at the foot of the page.
• Third group. Everywhere else, including the United Kingdom, the European Economic Area, Switzerland, China, Vietnam, Saudi Arabia, Qatar, South Africa, Nigeria and Kenya. No Clarity, no event log, no Mux viewing data. Plausible’s page count still runs because it stores nothing on your device and cannot identify you. Films still play.

If your browser sends the Global Privacy Control signal, we treat you as the third group wherever you are.

The QR codes on the business cards of Alex Kaymakanov and Archie Nash, and in their phones, open imperiumos.ai/alex and imperiumos.ai/archie. Those pages keep their own log, so we can see who scanned a code and follow up. Opening a page does not give us your name or phone number, and Microsoft Clarity does not run on them.

• Everyone: the time, the button pressed, your country and whether you are on a phone, tablet or computer.
• First and second group: also your IP address, the city, region, postcode, time zone and rough map position our host estimates from it, your browser details, language and referring page, a random visitor id in a cookie on the page you opened that lasts a year, what the page reports about your device (screen size, device model where your browser gives one, connection type, light or dark mode), and how long the page stayed open and how far you scrolled.
• Third group, or Global Privacy Control on: nothing beyond the line above, with no cookie and no address.
• If you use the form on either page: the name, contact details and company you type. We use them to reply to you, and they may go into our sales records in Close. If you have no signal when you send it, your phone holds it until you are back online and then deletes its copy.

We rely on our legitimate interest in following up with people who chose to open a business contact, and on your request when you use the form. To have your rows removed, email alex@imperium-growth.com.

We use the information described above to:

• respond to your enquiries and arrange walkthroughs and audits
• deliver, operate and secure the website and our services
• see which pages, films and sections hold attention and which do not, so we can improve them
• find broken pages, failed scripts and slow loads
• meet legal and regulatory obligations and enforce our terms

We do not sell personal information, we do not use it for advertising, and we do not use it for automated decisions that have a legal or similarly significant effect on you.

Where the UK GDPR or the EU GDPR applies to you, we rely on the following legal bases:

• Legitimate interests in running, securing and improving the website and in understanding how our pages and films are used
• Contract, or steps taken at your request before a contract, when you ask us for a walkthrough, an audit or a proposal
• Consent, where the law requires it, which you can withdraw at any time. Visitors from the United Kingdom and the European Economic Area are in the third group above, where nothing that needs consent runs.
• Legal obligation, where we must keep or disclose information by law

We share information only with the providers that make the website and our services work, and only to the extent needed for them to do so. At the date of this notice these are Vercel (hosting and server logs), Plausible Insights OÜ (aggregate visit counts, servers in the European Union), Microsoft (Clarity), Mux (video streaming and playback analytics), Supabase (the database that holds our event log and the contact page log, in the United States), Close (sales records, for people who send their details through /alex or /archie), beehiiv (the newsletter), Google (YouTube playback where used), GitHub (code hosting) and the providers named in the ARX app section for the phone app. Each processes information under its own terms and a data processing agreement with us.

We may also disclose information where the law requires it, to protect our rights or the safety of others, or as part of a merger, financing or sale of the business. In that case we will require the recipient to honour this notice.

Imperium is based in the United States and our providers operate globally, so information collected from visitors in the United Kingdom, the European Economic Area or elsewhere is transferred to and processed in the United States. Where such transfers are subject to data protection law, we rely on recognised safeguards, including standard contractual clauses and the UK International Data Transfer Addendum, in our agreements with providers.

• Our event log: 13 months from the event, then deleted by a nightly job.
• The /alex and /archie log: 13 months from the visit, then deleted by a nightly job. Details you send through its form are kept like correspondence.
• Clarity recordings and heatmaps: 30 days on Microsoft’s side.
• Mux viewing data: 100 days on Mux’s side.
• Plausible: aggregate counts, never per person, kept for as long as we run the site.
• Server logs: a short rolling period at our hosting provider, for security and diagnostics.
• Correspondence: for as long as we have a business need for it, then deleted. Information gathered during a client engagement is kept for the term set out in that agreement.

You can ask us to delete correspondence at any time and we will, unless we are required to keep it.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it. To exercise any of these, email alex@imperium-growth.com. We will respond within one month.

You can delete the event log’s copy of your data yourself. The button below sends this browser’s viewer id to us, removes every event recorded under it, and clears the id from your browser. Events recorded on the audit pages sit under their own id, which this button cannot see; email us to remove those. Clarity and Mux hold their copies for the periods above. To have those removed sooner, email us.

If you are in the United Kingdom you may also complain to the Information Commissioner’s Office. If you are in the European Economic Area you may complain to your local supervisory authority. We would ask that you contact us first so that we can try to resolve the matter.

The website is served over HTTPS. Client systems we build are installed inside the client’s own environment, and access to them is governed by the client agreement. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take measures appropriate to the sensitivity of the information we hold. Our security practices are described on the Security page of this website.

This website is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update this notice when our practices change, and the date at the top will show when. Material changes will be flagged on this page. Continued use of the website after a change means you accept the updated notice.