Privacy Policy

Last updated: March 2026

What We Collect

Account data: Email address, name (optional), and hashed password when you create an account.

API usage: Lookup queries, assessment requests, and batch operations are logged with timestamps for billing and service improvement.

Audit logs: Authentication events and API access are recorded for security monitoring.

Payment data: Billing is processed through Stripe. We store your Stripe customer ID but never your card details.

Why We Collect It

We collect data to provide the AWI service: authenticating your requests, tracking usage for billing, monitoring for abuse, and improving our scoring methodology.

We do not sell your data. We do not use tracking cookies. We do not serve ads.

How Long We Keep It

Audit logs: Retained for 90 days, then automatically deleted.

Query logs: Retained for 90 days, then automatically deleted.

Usage data: Retained for the duration of your account for billing records.

Account data: Retained until you delete your account.

Your Rights

Export: Download all your data at any time from Settings > Export Data.

Delete: Permanently delete your account and all associated data from Settings > Delete Account.

Rectify: Update your name and email from Settings > Edit Profile.

Access: View your usage, API keys, and submissions in the Dashboard.

Cookies

AWI uses essential cookies only for session authentication (NextAuth.js). We do not use analytics cookies, advertising cookies, or third-party tracking.

Third Parties

Stripe: Payment processing. Subject to Stripe's Privacy Policy.

We do not share your data with any other third parties.

Contact

For privacy inquiries, contact [email protected].