Privacy Policy

1. Data We Collect

• Account information: name, email address, company name, and billing details provided during registration.
• Usage data: API request logs, IP addresses, browser type, device identifiers, and interaction events.
• Payment data: transaction metadata processed through our infrastructure (we do not store raw card numbers).
• Communications: messages, support tickets, and feedback you send to us.

2. How We Use Your Data

• To provision, operate, and improve the airwellax platform and API services.
• To authenticate users, prevent fraud, and ensure platform security and compliance.
• To send transactional emails, product updates, and — with your consent — marketing communications.
• To fulfill legal obligations, respond to lawful requests, and enforce our Terms of Service.

3. Cookies & Tracking

We use essential cookies required for authentication and session management, and optional analytics cookies (e.g., aggregated usage statistics). You may manage or withdraw cookie consent at any time via our Cookie Settings or by visiting our Cookie Policy at the link in the footer.

4. Third-Party Sharing

• We share data with trusted sub-processors (cloud infrastructure, payment processors, analytics providers) under strict data processing agreements.
• We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
• We may disclose data when required by law, court order, or to protect the rights and safety of airwellax or its users.

5. Your Rights (GDPR & CCPA)

• Access & Portability: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Restriction & Objection: Restrict processing or object to certain uses, including direct marketing.
• Do Not Sell (CCPA): California residents may opt out of any sale of personal information — we do not sell personal data.
• To exercise any right, email [email protected]. We respond within 30 days.

6. Data Retention

We retain account and transaction data for as long as your account is active and for up to 7 years thereafter to satisfy financial regulatory requirements. Log data is retained for 90 days unless legally required to keep it longer.

7. Security

airwellax employs AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, regular penetration testing, and SOC 2 Type II audited controls. No transmission over the internet is 100{dc756b460e2a41da9d99c8afd73b34c499d5773f6ae7bc82fbe7500785542e0b} secure; please use strong credentials and enable MFA on your account.

8. Children's Privacy

Our services are directed exclusively to businesses and individuals aged 18 or older. We do not knowingly collect personal data from children under 13. If we learn such data has been collected, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or a prominent notice on our platform at least 14 days before they take effect. Continued use of airwellax after the effective date constitutes acceptance of the revised policy.

10. Contact & Data Controller

• Data Controller: airwellax, Inc.
• Email: [email protected]
• Postal: 340 Pine Street, Suite 800, San Francisco, CA 94104, United States
• For EU/EEA residents, our EU Representative can be reached at [email protected].