This notice describes the current FusorX marketing website, synthetic public sample, and inquiry or private-beta form. The public build uses essential browser storage only and does not intentionally install advertising, behavioural-tracking, session-replay, or third-party analytics technology.

1. Controller, operator, and accountable privacy contact

The website is operated under the business name FusorX Energy from Toronto, Ontario, Canada. The accountable privacy contact for this public beta is Privacy Officer, FusorX Energy. Privacy questions, access or correction requests, deletion requests, consent withdrawals, and complaints can be submitted through the website form by selecting “Privacy or data request.” This contact route is monitored for privacy matters and avoids publishing a personal email address on the public website.

2. Information collected through the inquiry form

When a visitor chooses to submit the form, FusorX receives the fields the visitor provides, including name, email address, company or project, role, area of interest, message, inquiry acknowledgement, and a submission identifier and timestamp generated by the site.

Do not use the form to submit credentials, payment information, trade secrets, material non-public information, export-controlled information, critical-infrastructure security details, detailed facility topology or equipment configurations, customer operational data, health information, or other sensitive or regulated records.

3. Purposes and lawful use

Form information is used to review and respond to the visitor's request, administer the private-beta list, evaluate a potential design-partner, pilot, commercial, investment, or strategic relationship, prevent abuse, maintain necessary records, and meet legal obligations. FusorX will not use an ordinary inquiry as blanket permission for unrelated promotional messaging.

Where European Union or United Kingdom data-protection law applies, processing for responding to a requested business inquiry, operating and securing the site, preventing abuse, and evaluating a requested business relationship is based on the applicable legitimate-interest or pre-contractual grounds where appropriate. Promotional electronic messaging that requires consent will rely on a separate valid consent process before it is activated.

4. Public demo and automated decisions

The public sample is read-only and uses synthetic values. It does not accept customer facility uploads, expose customer data, or make legal or similarly significant automated decisions about individual visitors. The demo is not an engineering certification or authorization to deploy equipment.

5. Cookies and similar browser storage

The current public build does not intentionally use analytics cookies, advertising cookies, tracking pixels, session replay, social-media trackers, or behavioural profiling. It uses a necessary browser-storage record named fusorx-privacy-choice-v1 to remember the visitor's essential-only privacy preference.

The inquiry form does not require an advertising or analytics cookie. Submitting it sends the entered fields to the site's Cloudflare-hosted serverless form handler and stores the submission in a Cloudflare D1 database configured for FusorX.

6. Service providers and international processing

Cloudflare provides website hosting, request processing, security, the serverless form handler, and D1 database infrastructure for this build. Cloudflare may process ordinary technical request information such as IP address, browser type, requested page, date and time, abuse or security signals, and service logs. The FusorX waitlist table does not intentionally store a visitor's IP address.

Cloudflare and other infrastructure providers may process information in Canada, the United States, or other jurisdictions. Information may therefore be subject to the laws and lawful-access rules of those places. New vendors, analytics, customer workspaces, payments, file uploads, or other material data-flow changes require a privacy review before release.

7. Retention and deletion

• Ordinary inquiry and waitlist records are scheduled for review and deletion no later than 24 months after the last meaningful interaction unless a continuing business relationship, dispute, legal obligation, security matter, or documented business need requires longer retention.
• Records that are clearly spam, abandoned, or no longer relevant should be deleted earlier.
• Records needed to document consent, withdrawal, suppression, a complaint, or a legal obligation may be retained for the period reasonably needed to demonstrate compliance and prevent renewed contact after an opt-out.
• The essential privacy-choice record remains in the visitor's browser until site storage is cleared or the privacy-choice version changes.
• Cloudflare request and security logs follow the retention controls applicable to the hosting account and Cloudflare service configuration.

When information reaches the end of its retention period, FusorX will delete or de-identify it unless continued retention is legally required or reasonably necessary for a documented dispute, security incident, or legal hold.

8. Sharing and disclosure

FusorX does not sell personal information or disclose it for cross-context behavioural advertising in this public build. Information may be disclosed to service providers that operate the site, when legally required, to investigate abuse or security incidents, to protect legal rights, or as part of a financing, sale, restructuring, or transfer of the business subject to applicable safeguards and notice requirements.

9. Safeguards and breach response

FusorX uses safeguards appropriate to the limited information intentionally collected by the public site, including HTTPS, restrictive browser security headers, same-origin form protections, server-side validation, limited form fields, and access controls provided through the hosting environment. No internet service can be guaranteed completely secure.

The public form is not a secure data room. Before accepting sensitive customer facility data, FusorX requires a separate authenticated environment, per-user access controls, appropriate vendor and contract review, logging, incident-response procedures, retention controls, security testing, and customer-specific written terms.

Suspected privacy or security incidents are to be documented and assessed promptly. Where applicable law requires notice to an individual or privacy regulator, FusorX will make the required notification and maintain the required breach records.

10. Individual rights and choices

Depending on applicable law, a person may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Submit a request through the website form and select “Privacy or data request.” FusorX may request reasonable information to verify identity before releasing or changing personal information.

Where the General Data Protection Regulation or United Kingdom data-protection law applies, a person may also have the right to lodge a complaint with the competent supervisory authority. Privacy requests will be handled within the time required by applicable law.

11. Electronic marketing

The current public form is used primarily to receive and respond to inquiries. FusorX will not begin bulk promotional email from this form unless the outbound process is configured to satisfy applicable consent, sender-identification, contact-information, recordkeeping, and unsubscribe requirements. An accessibility, privacy, or ordinary inquiry does not require consent to promotional communications.

12. Children

The site, public sample, and inquiry form are intended for business users and are not directed to children.

13. Accessibility and alternate formats

Information about website accessibility and how to request an alternative accessible format is available in the Accessibility Statement. Accessibility requests do not require promotional consent.

14. Complaints and challenging compliance

A person may challenge FusorX's privacy practices by contacting Privacy Officer, FusorX Energy through the website form. The complaint will be reviewed, documented, and answered. This internal process does not limit any right to contact a privacy regulator or pursue another remedy available under applicable law.

15. Changes

This notice will be updated when material data practices change. A revised effective date will be posted, and a new consent choice will be requested where the change requires one.