Last updated · July 2026
Hegon AI ("Hegon", "we", "us") designs, manufactures, and operates sovereign autonomous defense systems for allied nations and qualified industrial partners. We act as the data controller for personal information collected through hegon.ai, our published email addresses, recruitment workflows, and authorized partner engagements. This policy explains what information we collect, why we collect it, the legal basis on which we process it, and the rights you may exercise. Because of the sensitive nature of our domain, we treat data minimization, purpose limitation, and confidentiality as first-class engineering constraints, not as afterthoughts.
We collect information you submit to us directly — your name, organization, role, professional email, telephone number when provided, and the content of any message, briefing request, response to an open role, or partnership inquiry. When you apply to a position, we additionally process the contents of your CV, portfolio, references, work authorization status, and any supporting documentation you choose to share. We collect a minimal set of technical telemetry — IP address, user agent, referrer, coarse geolocation, and aggregated session data — strictly to ensure the security, availability, and integrity of the site, to detect abuse, and to measure non-identifying traffic patterns. We do not deploy advertising trackers, cross-site identifiers, or behavioral profiling.
We use the information you provide to respond to inquiries, evaluate prospective partnerships and procurements, conduct recruitment and background suitability assessments where applicable, manage contractual relationships, fulfill legal and regulatory obligations, and protect our systems, people, and counterparts. Technical telemetry is used exclusively for security monitoring, incident response, fraud prevention, and capacity planning. We do not sell personal information, we do not rent it, and we do not use it to train third-party commercial models.
Depending on the context, we rely on one or more of the following lawful bases under the EU General Data Protection Regulation (GDPR) and equivalent regimes: your explicit consent, the performance of a contract to which you are party or pre-contractual steps taken at your request, compliance with a legal obligation, the protection of vital interests, and our legitimate interests in operating, securing, and developing our business — balanced against your fundamental rights and freedoms. For recruitment, processing is grounded in pre-contractual steps and, where required, your consent.
We retain personal data only for as long as it is necessary to fulfill the purpose for which it was collected, to comply with legal, accounting, or regulatory requirements, or to defend legal claims. Inquiry correspondence is generally retained for up to 24 months from the last interaction. Recruitment data is retained for up to 24 months after the close of a process unless you ask us to keep it longer for future opportunities, or to delete it sooner. Security logs are rotated on a short, defined schedule. Beyond these periods, data is either securely deleted or fully anonymized.
Personal information is accessed strictly on a need-to-know basis by authorized Hegon personnel. We share data with a limited set of vetted processors — including cloud infrastructure, email, identity, and recruiting providers — each bound by written agreements imposing confidentiality, security, and processing-limitation obligations consistent with applicable law. We may disclose information where strictly required by a competent authority, court order, or legal obligation. We never share personal data with third parties for advertising, profiling, or commercial enrichment.
Where data is transferred outside the European Economic Area, we rely on recognized transfer mechanisms — including the European Commission's Standard Contractual Clauses, adequacy decisions, and supplementary technical and organizational measures such as encryption in transit and at rest — to ensure an essentially equivalent level of protection. Sovereign and mission-relevant data is hosted in jurisdictions selected to align with the regulatory expectations of our partners.
Subject to applicable law, you may request access to the personal data we hold about you, the rectification of inaccurate data, the erasure of data that is no longer required, the restriction of processing, the portability of data you have provided, and you may object to processing carried out on the basis of our legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. To exercise these rights, contact contact@hegon.ai. You also retain the right to lodge a complaint with a competent supervisory authority — in France, the CNIL.
We apply layered technical and organizational safeguards aligned with recognized standards, including encryption in transit and at rest, least-privilege access controls, multi-factor authentication, hardened build pipelines, continuous monitoring, and routine security review of our suppliers. Despite these measures, no system can be guaranteed absolutely secure. Sensitive, classified, or export-controlled material must never be transmitted through this website, the public contact form, or any open email channel — please request a secure channel before disclosure.
Hegon's website and services are intended for professional audiences and are not directed to children. We do not knowingly collect personal information from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us so that we can take appropriate action.
We may update this policy from time to time to reflect changes in our practices, technologies, legal requirements, or operational context. Material changes will be reflected by the revised date above and, where appropriate, communicated through additional notice. Continued use of the site after such updates constitutes acknowledgement of the revised policy.
For questions, complaints, or rights requests relating to your personal data, contact our privacy team at contact@hegon.ai with the subject line "Privacy". We aim to respond within 30 days, or sooner where required by applicable law.