Privacy Policy

Last Updated: January 4, 2026

Orcrist, Inc. ("Orcrist," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orcrist.com (the "Site") or engage with our services.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Submit inquiries through our contact forms
• Request product demonstrations
• Register for events or webinars
• Communicate with us via email or phone

This may include: name, email address, phone number, job title, organization/government entity, citizenship status, and other information you choose to provide.

1.2 Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and usage, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Date and time of visit

2. How We Use Your Information

We use collected information for the following purposes:

• To respond to your inquiries and requests
• To process demo requests and event registrations
• To communicate with you about our products and services
• To improve our website and user experience
• To comply with legal obligations, including export control regulations
• To protect our rights and prevent fraud or security threats
• To conduct business operations and analytics

3. Export Control and ITAR Compliance

Orcrist, Inc. is registered as a manufacturer of Category IV Significant Military Equipment with the U.S. Department of State Directorate of Defense Trade Controls (DDTC). Access to technical data and certain information is subject to the International Traffic in Arms Regulations (ITAR) and other export control laws.

We collect citizenship and residency information to ensure compliance with these regulations. Access to controlled technical data is restricted to U.S. citizens and authorized foreign persons only.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who assist in operating our website and conducting our business (e.g., email services, analytics providers), under strict confidentiality obligations
• Legal Requirements: When required by law, regulation, legal process, or government request
• Export Control Compliance: With U.S. government agencies as required for export control and ITAR compliance
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, safety, or that of others

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations (including export control recordkeeping requirements), resolve disputes, and enforce our agreements. Export control records are maintained for a minimum of five years as required by law.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the sale or sharing of personal information (we do not sell personal information)
• Correct inaccurate personal information
• Not be discriminated against for exercising your rights

7.2 European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights including:

• Access to your personal data
• Rectification of inaccurate data
• Erasure of your data ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing

7.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information below. We will respond to verified requests within the timeframes required by applicable law.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance user experience and analyze site usage. You can control cookie preferences through your browser settings. Note that disabling cookies may affect site functionality.

9. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and maintained on servers located in the United States. By using our Site, you consent to the transfer of information to the United States, which may have different data protection laws than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of our Site after changes constitutes acceptance of the updated policy.

13. Do Not Track Signals

Our Site responds to Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we will process it as an opt-out request for the sale or sharing of personal information under applicable privacy laws.