Privacy Protocol

1. Who We Are

This Privacy Protocol governs all data operations conducted by the EclipsiumX Universe:

EclipsiumX SRL
Tax Identification Number (CUI): 53832723
EUID: ROONRC.J2026008520009
Registered Office: Lunca Banului, Jud. Vaslui, Romania
Official Legal Channel: [email protected]

2. Data We Process

EclipsiumX processes data across specific operational categories to maintain ecosystem integrity:

• Identity Layer Data: Participant name, legal contact info, cryptographically hashed credentials, and authentication tokens binding the user across Verses.
• UniversePass Credentials: Metadata representing active Access Keys, tier allocations, and world authorization permits.
• Operational World Data: Application telemetry, settings, configuration states, and participant activity logs within specific Verses (e.g., BusinessVerse workspaces).
• Infrastructure Resource Data: Compute usage, server bandwidth allocation, DNS mapping metadata, and network routes utilized within InfrastructureVerse.
• Transmission Data: Encrypted routing routing targets, transmission logs, and interaction records processed inside TransmissionVerse.
• AurionX Processing Inputs: Hashed queries and context parameters submitted by Participants to the AI coordination core for automated workflows.
• Billing & Compliance Data: Invoicing history, transaction logs, tax details, and compliance-related payment records.

3. How the Ecosystem Uses Data

Data processed within the EclipsiumX Universe serves specific technical and operational purposes:

• Identity Authentication: Authorizing secure access nodes across the ecosystem.
• UniversePass Access Control: Enforcing key capacity limitations and workspace entries.
• Operational World Coordination: Synchronizing database states and user environments across Verses.
• AurionX Processing: Fueling automated reasoning, optimization agents, and cognitive translations.
• Infrastructure Resource Allocation: Balancing compute, server resources, and networks dynamically.
• Communication Routing: Transferring transmissions accurately across the network topology.
• Security Monitoring: Preventing malware, access key hijacking, and ecosystem misuse.
• Compliance: Meeting European Union accounting, tax, and registration mandates.

4. Legal Basis (GDPR)

Under GDPR, EclipsiumX processes Participant data under the following legal bases:

• Contractual Necessity: To deliver the Operational Worlds and Access Key benefits defined in the Participation Agreement.
• Legal Obligations: Compliance with Romanian and EU accounting laws, financial tracking, and legal queries.
• Legitimate Interest: Protecting ecosystem integrity, securing InfrastructureVerse nodes, preventing cyber attacks, and optimizing AurionX workflows.
• Consent: Specific configurations, newsletter alerts, or beta testing requests.

5. Data Security & Storage

Participant data is stored on securely encrypted cloud infrastructure located within the European Union. EclipsiumX employs modern encryption-at-rest (AES-256) and transit (TLS 1.3), role-based identity authentication controls, continuous security monitoring, and strict data boundary isolation policies to safeguard access to active Operational Worlds.

6. Data Sharing & Sub-processors

EclipsiumX does not trade, sell, or rent Participant data. We disclose data only to essential nodes to facilitate ecosystem operations:

• Payment Gateways: Secure processors handling transaction authorizations.
• Infrastructure Providers: Server networks and DNS routing nodes powering InfrastructureVerse.
• Compliance Authorities: Romanian and EU regulatory bodies when required by binding legal process.

All data sharing is governed strictly in accordance with our Data Processing Agreement (DPA) and GDPR-compliant Security Shield standards.

7. Participant Privacy Rights

Under EU data protection frameworks, Participants possess full rights regarding their personal data, including:

• the right to access and copy stored Identity Layer records;
• the right to correct outdated contact or profile metrics;
• the right to request data deletion (which may result in Access Key deactivation);
• the right to data portability for exportable configurations;
• the right to restrict or object to specific processing channels;
• the right to file a regulatory complaint with the National Supervisory Authority (ANSPDCP).

8. Cookies

We use functional, analytical, and security cookies to authenticate identity passes and manage active sessions. Detailed configuration choices are available in our Cookie Protocol.

9. Data Retention Schedule

EclipsiumX retains data only as long as necessary for operational compliance and service provisioning:

• Identity Records: Retained for 3 years following last account inactivity.
• Billing & Invoicing: Retained for 10 years in compliance with Romanian fiscal legislation.
• Operational & Session Logs: Purged or anonymized automatically after 90 days.
• Communication Records: Retained for 1 year from the last transmission event.
• Infrastructure Logs: Securely stored and rotated every 30 days.

10. Ecosystem Data Isolation

EclipsiumX implements advanced multi-tenant architectural separation. Participant environments, databases, and workspace directories are isolated cryptographically and logically at the infrastructure level. Cross-Verse information sharing is restricted to unified Identity Layer verification tokens, ensuring that one participant's operational space remains inaccessible to other organizations.

11. AurionX Governance

Prompt inputs and data queries submitted to the AurionX coordination layer are processed securely. EclipsiumX does not utilize private participant data, workflows, or proprietary prompts to train public or generic model layers. All operational intelligence operations maintain strict confidentiality constraints to protect enterprise logic.

12. Sub-processors & Integrations

EclipsiumX relies on authorized sub-processors for payment gateway routing, secure cloud server infrastructure, and network firewall defenses. A verified directory of active sub-processors, along with their respective privacy commitments, can be requested via our legal transmission channel.

13. Legal Communications

For privacy inquiries, GDPR data requests, DPO communications, or to exercise your rights, transmit a formal legal notice to:

Email: [email protected]
Corporate Entity: EclipsiumX SRL
Registration Details: CUI: 53832723 | EUID: ROONRC.J2026008520009
Registered Address: Lunca Banului, Jud. Vaslui, Romania