Privacy Policy

1. Information We Collect

1.1 Account Information

• Name and email address
• Company name and job title
• Authentication credentials (OAuth tokens, not passwords)
• Billing and payment information (processed by Paddle)

1.2 Usage Information

• Pipeline configurations and metadata
• Feature usage and interaction patterns
• Error logs and performance metrics
• Number of records processed (for billing)

1.3 Technical Information

• IP address and browser type
• Device information
• Cookies and similar tracking technologies

1.4 Pipeline Data

Important: For cloud-hosted deployments, your pipeline data (the actual OT/industrial data being processed) flows through our infrastructure but is not stored, accessed, or analyzed by us except as necessary to provide the Service. For self-hosted deployments, this data never leaves your infrastructure.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send billing notifications
• Send technical notices, updates, and security alerts
• Respond to support requests and inquiries
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address technical issues
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information with:

3.1 Service Providers

• Paddle: Payment processing
• Cloud Providers: Infrastructure hosting (Azure, AWS, GCP)
• Analytics: Usage analytics and error tracking

3.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of Aditum Data SLU, our users, or others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (TLS 1.2+) and at rest
• Access controls and authentication
• Regular security assessments
• Secure development practices
• Employee security training

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained while your account is active
• Usage logs: 90 days
• Billing records: 7 years (legal requirement)
• Pipeline data: Transient only, not retained

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

To exercise these rights, contact us at privacy@aditumdata.com.

7. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for transfers from the EEA.

8. Cookies

We use cookies and similar technologies for:

• Essential cookies: Required for the Service to function
• Analytics cookies: Help us understand how you use the Service
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

9. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Effective Date" at the top indicates when the policy was last updated.

11. GDPR Compliance (EEA Users)

For users in the European Economic Area:

• Data Controller: Aditum Data SLU, Principality of Andorra
• Legal Basis: Contract performance, legitimate interests, and consent
• DPO Contact: privacy@aditumdata.com
• Supervisory Authority: You may lodge a complaint with your local data protection authority. For Andorra, this is the Agència Andorrana de Protecció de Dades (APDA).

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at: