This is an original draft, published while counsel reviews it. The vendor and subprocessor inventory, cookie disclosure, exact retention periods, and a dedicated privacy-request address are still being confirmed, and several sections below say so in their own words. Customer agreements control where they apply.
Last updated
Information we collect
Depending on how you interact with Aware, we may collect contact and account information you provide, business and organization information, communications with us, trial or purchase information, product usage and device information, and other information you choose to submit.
How information is collected
Information may be collected directly from you, automatically when you use our websites or services, from your organization, or from service providers and business partners that support the relationship.
How we use information
We may use information to provide and support the services, administer accounts and trials, process commercial requests, communicate with users, improve product performance and usability, protect the services, comply with law, and operate our business.
Customer content and private company data
Where Aware processes private company information on behalf of a customer, the customer's agreement and instructions govern that processing. Signals API does not require customer-specific company data. Platform and Enterprise customers control which private company context is introduced for company-specific analysis.
Service providers and disclosures
We may disclose information to service providers that help us operate the service, to professional advisers, as required by law, in connection with a business transaction, or as otherwise directed or authorized by the customer or user. We do not use this draft to make claims about selling or sharing personal information until actual practices have been verified.
Payments
If Aware uses a third-party payment provider, payment information may be collected and processed by that provider under its own privacy terms. Aware should limit its own storage of sensitive payment credentials to what is operationally necessary.
Retention
We retain information for as long as reasonably necessary for the purposes described in the final notice, contractual obligations, security, dispute resolution, and legal requirements. Specific retention periods should be documented before launch.
Security
Aware uses administrative, technical, and organizational measures appropriate to the nature of the service and information processed. No method of transmission or storage can be guaranteed to be completely secure.
Privacy choices and rights
Depending on applicable law and your location, you may have rights to request access, correction, deletion, or other controls over personal information. The final notice should provide the verified method for submitting and authenticating those requests.
International use
If information is processed across borders, the final notice and customer agreements should describe the applicable transfer mechanisms and locations actually used by Aware and its service providers.
Children
Aware's enterprise services are not directed to children. The final notice should state the minimum age appropriate to the actual services offered.
Changes and contact
We may update this Privacy Notice as our services and practices evolve. Questions and privacy requests may be submitted through Aware's website contact channel until a dedicated privacy address is confirmed.