Privacy
the Global privacy policy for all AWFixer-scoped products, projects, and services
AWFixer and Friends Privacy Statement
This Privacy Statement explains how AWFixer and Friends (that's "us," "we," or "our") collects, uses, and shares information about our potential customers and other individuals who use our services. It covers our privacy practices for our websites (including any customer portals or interactive sites), our software (AWFixer and Friends), services, solutions, tools, and related applications, including our research and marketing activities (we'll call all of these the "Services"). It also describes your choices about how your information is used, accessed, stored, and corrected.
By signing up for our Services and agreeing to our General Terms and Conditions, you agree to how we collect, use, store, and share information as described in this statement.
Keep in mind that our Services might link to other websites or services. Their privacy practices are governed by their own privacy statements, not ours.
We may update this Privacy Statement from time to time. If we do, we'll let you know by changing the date at the top of the statement and by providing additional notifications (like a notice on our homepage, in our AWFixer and Friends Preview app, or by sending you a notification). We encourage you to review the Privacy Statement regularly to stay informed about our practices and how you can protect your privacy.
What Information We Collect
We only use your personal information to provide you with the AWFixer and Friends Application or to communicate with you about our services.
We take the privacy and confidentiality of any documents or information you upload to the AWFixer and Friends Application seriously. We use industry-standard security measures to protect your data, including personal information, from unauthorized access.
We do not share your personal information without your permission, unless:
It's necessary to fulfill your request.
We believe it's needed to enforce our Terms of Service or is legally required.
We believe it's needed to detect, prevent, or address fraud, security, or technical issues.
It's necessary to protect our property, legal rights, or the rights of others.
As part of our normal business operations, your use of our Services, managing you as a customer, and complying with local laws, we collect your personal information. We will only use this information for the purposes described in this Privacy Statement.
Information You Provide to Us
When you use our Services, we may ask for information that can identify or contact you. For example, we collect information when you create an account, ask for customer support, or communicate with us. This might include basic user information (like your name, email address, social media avatar, phone number, and photograph), company information, and any other details you choose to provide.
We do not collect financial information from you (like your payment card number, expiration date, or security code). All payments are handled by a third party, Paddle Ltd (https://paddle.com). Please refer to their Privacy Statement at https://paddle.com/gdpr.
Information We Collect Automatically When You Use Our Services
When you access or use our Services, we automatically collect certain information about you, including:
Log Information: We collect data about how you use the Services, such as your browser type and version, the type of machine and device you use, access times, usage times, launches, pages you view, debug information, your IP address, the page you visited before ours, and other statistics.
Information Collected by Cookies and Other Tracking Technologies: We use various technologies, including cookies, to gather information. Cookies are small data files stored on your hard drive or device that help us improve our Services and your experience, see popular areas and features, and count visits. You can set your browser to refuse all cookies or to alert you when a cookie is being sent. However, if you don't accept cookies, some parts of our Services may not work properly.
Only if you've given us permission, we may also collect information using web beacons (also called "tracking pixels"). These are electronic images used in our Services or notifications to help deliver cookies, count visits, understand usage and campaign effectiveness, and determine if a notification has been opened and acted upon. We may also use third-party services like Google Analytics, Intercom, and Mode to collect, monitor, and analyze these statistics.
Social Sharing Features: Our Services may offer social sharing features, allowing you to share AWFixer and Friends prototypes from our Services with other media, and vice versa. Using these features enables sharing information with your friends or the public, depending on your settings with the social sharing provider. We may collect, store, and use personal information from other media if you use these features, in accordance with this Privacy Statement. For more details about data collection, storage, and processing by other media through social sharing, please refer to the privacy statements of those companies.
Third Parties: We may also get personal information about you from third parties, such as LinkedIn, Facebook, Dribbble, Twitter, and other publicly available sources.
Support and Service: When you contact us for support or other customer service, we may keep records related to those requests, including any information you provide.
Our Access to Your Content: Where allowed by law, we will only access, view, or listen to your Content (defined in section 1.2 of our Terms of Service) in limited ways. For example, to provide you with our Services, we might need to access, view, or listen to your Content to (A) respond to feedback or support requests; (B) detect, prevent, or address fraud, security, legal, or technical issues; and (C) enforce our Terms. Our automated systems may analyze your Content using techniques like machine learning to improve our Services, Software, and user experience. Please note that Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.
Marketing or Promotional Communications: If you've subscribed to our newsletter, we may use your personal information to send you marketing or promotional materials and other communications related to AWFixer and Friends. If you no longer wish to receive these communications, you can unsubscribe at any time using the link in the email or by emailing [email protected] to request that we stop sending them. We will process such requests immediately, and in any event within two business days.
How We Use Your Personal Information
For individuals in the European Economic Area, our use of your personal information is justified on the following legal grounds:
The processing is necessary to fulfill an agreement with you or to take steps to enter into an agreement at your request.
The processing is necessary for us to comply with relevant legal obligations.
The processing is in our legitimate interest, and this interest outweighs your privacy rights.
You have consented to the processing.
We collect your personal information to:
Fulfill our agreement with you and with others.
Process, evaluate, and complete transactions involving the Services.
Operate, evaluate, maintain, improve, customize, and develop the Services (including by monitoring and analyzing trends, access to, and use of the Services for enhancing customer experience, security of our Services, advertising, and marketing).
Provide you with documentation, communications, or any other services you request.
Communicate with you to resolve questions or complaints.
Protect and ensure the safety of our Intellectual Property Rights.
Manage, protect against, and investigate fraud, risk exposure, claims, and other liabilities, including but not limited to violations of our contract terms or international laws or regulations.
Comply with all our worldwide legal obligations.
How We Share Your Personal Information
We operate globally and may share your personal information with our affiliated businesses as part of our business operations, administration of the Services, and to comply with local laws. We may also hire third-party service providers (who will follow our instructions) to help us provide information, products, or services to you, manage our business, or improve our Services. We may share your personal data with these affiliates and third parties to perform services they are contracted to do on our behalf, subject to appropriate contractual restrictions and security measures. We may also share it if we believe it's reasonably necessary to prevent harm or loss, or if we believe the disclosure will help in an investigation of suspected or actual illegal activities.
We reserve the right to share any information that is not considered personal information or is not subject to contractual restrictions.
When personal information is transferred outside the European Economic Area to our affiliated companies or to third-party service providers, we will take steps to ensure your personal information is protected with the same level of protection as if it stayed within the European Economic Area. This includes using data transfer agreements with the European Commission-approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process personal information related to the Services to provide the same level of protection for personal information as required under the European Union General Data Protection Regulation ("GDPR").
We are committed to processing personal data according to our obligations as a data "processor" or "subprocessor" under applicable EU data protection laws. If your organization is based in the EU or is otherwise subject to EU data protection laws, including the GDPR, we have executed (or will execute upon your request) and committed to comply with the applicable Standard Contractual Clauses approved by the European Commission. These clauses relate to our processing or subprocessing of personal data in connection with the services we provide to you as our customer. For our customers to whom such EU data protection laws apply, these requirements include:
Processing personal data only as instructed by our customers, and promptly informing them if we cannot comply.
Promptly notifying our customers if we have any reason to believe that applicable law would prevent us from following their processing instructions.
Implementing and maintaining specific and appropriate technical and organizational security measures to protect personal data.
Promptly notifying our customers about any legally binding request for disclosure of personal data by law enforcement, any accidental or unauthorized access to personal data, or any request we receive from an EU-based individual whose personal data we may be processing according to the customer's instructions.
Allowing our data processing facilities to be audited by our customers.
Providing a copy or summary of the applicable contract between us and our customer to individuals who cannot get such a copy or summary directly from their organization.
Getting consent from our customers for our use of any service providers who will be processing personal data.
Ensuring that any such service providers agree in writing to comply with these requirements.
We may share personal information with third parties if our company or any of our assets (or those of any affiliated company) are potentially or actually sold. In such cases, personal information we hold about our customers and/or users may be one of the transferred assets.
In accordance with our legal obligations, we may also process personal information, subject to a lawful request, for law enforcement or national security purposes by public authorities. Furthermore, we may disclose personal information where otherwise required by local law or regulations.
Security
The security of your personal information is important to us. We aim to protect your personal information from unauthorized access, improper use or disclosure, unauthorized changes, or unlawful destruction or accidental loss. We use and maintain reasonable processes, systems, and technologies to do so. This also means our personnel can only access or process personal information if it's reasonably required for work-related tasks, to fulfill your request, or to meet a legal obligation on our behalf.
Please remember that no method of transmission over the internet or electronic storage is 100% secure or error-free. While we strive to use commercially acceptable methods to protect your personal information, we cannot guarantee its absolute security. Therefore, we cannot be held responsible for unauthorized or unintended access that is beyond our control.
Transferring Personal Information: As mentioned earlier, when personal information is transferred outside the European Economic Area to our affiliated companies or to third-party service providers, we will take steps to ensure your personal information is protected with the same level of protection as if it remained within the European Economic Area. This includes using data transfer agreements with the European Commission-approved Standard Contractual Clauses. We contractually require agents, service providers, and affiliates who may process personal information related to the Services to provide the same level of protection for personal information as required under the GDPR.
Personal Information Breach: In the event of a security breach leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal information transmitted, stored, or otherwise processed by us about our customers and/or users, we will notify the local supervisory authority without undue delay, and where feasible, no later than 72 hours after becoming aware of it, unless the breach is unlikely to pose a risk to the rights and freedoms of individuals. If the breach is likely to result in a high risk to the rights and freedoms of individuals, we will communicate the breach without undue delay on our security page, unless we have already (i) implemented appropriate technical and organizational protection measures that render the personal information unintelligible to any unauthorized person (like encryption), or (ii) taken subsequent measures that ensure the high risk is no longer likely to materialize.
How Long We Keep Your Information (Retention of Personal Information)
Generally, we do not store the collected personal information for longer than three years, unless you request an earlier deletion. However, in some cases, we may keep certain personal information for other periods, for instance, when required by legal, tax, and accounting requirements, or if required by a legal process, legal authority, or other governmental entity with authority to make the request, for as long as needed. In specific circumstances, we may also retain certain personal information for longer periods corresponding to a statute of limitation, so we have an accurate record of your dealings with us in case of any complaints or challenges.
Children's Privacy
The Services are not for use by children under 16 years old. We do not knowingly collect, store, share, or use personal information of children under 16. If you are under 16, please do not provide any personal information, even if the Services prompt you to. If you are under 16 and have provided personal information, please ask your parent(s) or guardian(s) to notify us, and we will delete all such personal information.
Your EU Rights
Based on the GDPR, you may have the following rights regarding your personal information:
To get a copy of your personal information along with details about how and on what basis it's processed.
To correct inaccurate personal information (including the right to have incomplete personal information completed).
To delete your personal information (when it's no longer needed for the purposes for which it was collected or processed). We aim to anonymize your personal information within 30 days after your deletion request.
To restrict the processing of your personal information under certain circumstances.
To port your personal information in a machine-readable format to a third party (or to you) when we base our processing on your consent or the performance of an agreement with you.
To withdraw your consent to our processing of your personal information (when that processing is based on your consent).
To obtain, or see a copy of, the appropriate safeguards under which your personal information is transferred to a third country or international organization outside the European Economic Area.
To lodge a complaint with your local supervisory authority for data protection.
In addition to the above rights, you have the right to object, for reasons related to your specific situation, at any time to any processing of your personal information that we have justified based on a legitimate interest, including profiling (as opposed to your consent) or to perform a contract with you. You also have the right to object at any time to any processing of your personal information for marketing or promotional purposes, including profiling for such purposes.
For any questions about these rights or this Privacy Statement, please email [email protected].
Please note that we may ask for proof of identity and reserve the right to charge a fee where permitted by law, especially if your request is clearly unfounded or excessive. We will do our best to respond to your request within all applicable timeframes.
Your California Privacy Rights
This section provides additional details about the personal information we collect about California consumers and their rights under the California Consumer Privacy Act ("CCPA").
We do not sell the personal information we collect to third parties for money or any other consideration, as that term is generally understood. However, the CCPA's definition of "sale" is very broad and might include the following:
Situations where Browse data is sent to referral advertisers: When you click on an ad that sends you to our website, we send a hashed identifier to the referring site so they can get credit for the referral. We, along with millions of other sites, use these services. While we limit the information sent to what is needed to properly record the referral, the fact that you clicked on the link and visited AWFixer and Friends may be added to your profile by the ad publisher. You have the right to opt out of this by sending us a request as described below.
Subject to certain limitations, the CCPA grants California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights. California consumers can make a request regarding their CCPA rights by contacting our Compliance team at [email protected].
Privacy Shield
As of July 16, 2020, we no longer rely on the Privacy Shield as a transfer mechanism for data transfers because the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield are no longer valid due to the CJEU ruling in Schrems II. However, to the extent AWFixer and Friends has ongoing obligations under our existing Privacy Shield Certification, we will continue to honor them. Our Privacy Shield certification is available here.
Where personal information is transferred outside the European Economic Area to our affiliated companies or to third-party service providers, we will take steps to ensure your personal information is protected with the same level of protection as if it remained within the European Economic Area, including by entering into data transfer agreements using the European Commission-approved Standard Contractual Clauses, or by relying on certification schemes such as the Privacy Shield. We contractually require agents, service providers, and affiliates who may process personal information related to the Services to provide the same level of protection for personal information as required under the European Union General Data Protection Regulation ("GDPR").
AWFixer and Friends complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. AWFixer and Friends has certified to the Department of Commerce that it adheres to the Privacy Shield Principles of (1) Notice; (2) Choice; (3) Accountability for Onward Transfer; (4) Security; (5) Data Integrity and Purpose Limitation; (6) Access; and (7) Recourse, Enforcement and Liability (collectively, the “Privacy Shield Principles”).
To learn more about the Privacy Shield program and to view our certification, please visit https://www.privacyshield.gov/. As further set forth in the Privacy Shield Principles, we remain potentially liable if a third party processing Personal Data received from the EU or Switzerland on our behalf processes that Personal Data in a manner that is inconsistent with the Privacy Shield Principles (unless we can prove that we are not responsible for the event giving rise to the damage). AWFixer and Friends is subject to the investigatory and enforcement powers of the Federal Trade Commission with respect to any failure to comply with the Privacy Shield Principles. EU and Swiss individuals with inquiries or complaints regarding U.S. privacy practices should contact us at [email protected].
In compliance with the Privacy Shield Principles, AWFixer and Friends commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact AWFixer and Friends at: [email protected].
AWFixer and Friends has further committed to refer unresolved Privacy Shield complaints to Jams ADR, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of Jams ADR are provided at no cost to you. If your complaint still remains unresolved, then you have the right to invoke binding arbitration by the Privacy Shield Panel upon written notice to AWFixer and Friends at: [email protected].
We may share personal information with third parties if our company or any of our assets (or those of any affiliated company) are potentially or actually sold. In such cases, personal information we hold about our customers and/or users may be one of the transferred assets.
In accordance with our legal obligations and our privacy statement, we may also process personal information, subject to a lawful request, for law enforcement or national security purposes by public authorities. Furthermore, we may disclose personal information where otherwise required by local law or regulations.
I hope this "polished" version is exactly what you were looking for! Let me know if you have any other changes or questions.
Last updated