Privacy Policy

Last updated 29 August 2026

Standard boilerplate, not yet reviewed by counsel. It describes how AWAIRE behaves today. Highlighted items need to be filled in before this is relied on.

Who this covers

This policy applies to AWAIRE, operated by [legal entity] (“we”), and to the people who sign in to it.

What AWAIRE reads

AWAIRE reads only the systems an administrator explicitly connects to a workspace. Today those are a mailbox (Microsoft 365 or IMAP) and a dealer management system. It reads them to answer questions asked by signed-in users of that workspace, and for no other purpose.

What we store

  • Account details: name, email address, and a hashed password.
  • Workspace membership and the role held in each.
  • Conversations, and the lookups performed to answer each question.
  • An audit record of sign-ins and administrative actions.
  • Credentials for connected systems, encrypted at rest and never displayed back.

We do not copy the contents of connected systems into a separate store. Answers are assembled from live queries at the moment a question is asked.

What AWAIRE never does

  • It does not write to connected systems — it cannot send, move, alter or delete anything.
  • It does not sell or rent personal data.
  • It does not use one workspace’s data to answer another workspace’s question.

Sub-processors

Answers are generated using third-party language model providers, and the service runs on cloud infrastructure. Question text and the retrieved records necessary to answer it are sent to the model provider. A current list is available on request. [list providers and regions]

Retention

Account, conversation and audit records are kept while the account is active. Removing a connection ends AWAIRE’s access to that system immediately. [state retention periods]

Security

Access requires an authenticated session. Passwords are stored using a slow key derivation function, never in plain text. Connector credentials are encrypted. Sessions can be revoked by an administrator and take effect on the next request.

Your rights

Depending on where you live you may have rights to access, correct, export or delete personal data we hold. Contact your workspace administrator, or us at [contact email]. [name the applicable regimes, e.g. GDPR / PIPEDA / CCPA]

Changes

If this policy changes materially we will make the updated version available here and update the date above.

Contact

[legal entity, postal address, contact email]