Privacy Policy
Last updated: March 2026
What We Collect
Account data: Email address, name (optional), and hashed password when you create an account.
API usage: Lookup queries, assessment requests, and batch operations are logged with timestamps for billing and service improvement.
Audit logs: Authentication events and API access are recorded for security monitoring.
Payment data: Billing is processed through Stripe. We store your Stripe customer ID but never your card details.
Why We Collect It
We collect data to provide the AWI service: authenticating your requests, tracking usage for billing, monitoring for abuse, and improving our scoring methodology.
We do not sell your data. We do not use tracking cookies. We do not serve ads.
How Long We Keep It
Audit logs: Retained for 90 days, then automatically deleted.
Query logs: Retained for 90 days, then automatically deleted.
Usage data: Retained for the duration of your account for billing records.
Account data: Retained until you delete your account.
Your Rights
Export: Download all your data at any time from Settings > Export Data.
Delete: Permanently delete your account and all associated data from Settings > Delete Account.
Rectify: Update your name and email from Settings > Edit Profile.
Access: View your usage, API keys, and submissions in the Dashboard.
Cookies
AWI uses essential cookies only for session authentication (NextAuth.js). We do not use analytics cookies, advertising cookies, or third-party tracking.
Third Parties
Stripe: Payment processing. Subject to Stripe's Privacy Policy.
We do not share your data with any other third parties.
Contact
For privacy inquiries, contact [email protected].