Privacy Policy

1. Introduction

AIlium Scanner ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our risk notification platform and related services.

Our privacy-by-design approach ensures that privacy protection is built into every aspect of our platform, not added as an afterthought.

2. Information We Collect

2.1 Information You Provide

• Contact information (name, email, phone number)
• Company information and organizational details
• Account credentials and authentication data
• Configuration settings and preferences

2.2 Information Collected Automatically

• Log data and access events from your systems
• Workspace activity signals (anonymized and aggregated)
• System performance and usage metrics
• Security event data and audit trails

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing risk detection and notification services
• Identifying potential insider threats and policy violations
• Generating compliance-ready reports and audit trails
• Improving our AI algorithms and detection capabilities
• Providing customer support and technical assistance
• Ensuring platform security and preventing unauthorized access

4. Data Processing and Storage

4.1 Privacy-by-Design Processing

Our platform processes data using privacy-preserving techniques including:

• Local data processing where technically feasible
• Data minimization and purpose limitation
• Anonymization and pseudonymization techniques
• Encrypted data transmission and storage

4.2 Data Retention

We retain your data only as long as necessary to provide our services and comply with legal obligations. Specific retention periods vary based on data type and regulatory requirements.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following limited circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• With trusted service providers under strict confidentiality agreements

6. Security Measures

We implement comprehensive security measures including:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Employee training on data protection practices
• Incident response and breach notification procedures

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your personal information
• Restriction of processing activities
• Data portability
• Objection to certain processing activities

8. International Data Transfers

If we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.

9. Third-Party Services

Our platform may integrate with third-party services for enhanced functionality. We carefully vet all third-party providers to ensure they meet our privacy and security standards.

10. Data Breach Notification

In the unlikely event of a data breach, we will notify affected users and relevant authorities within the timeframes required by applicable law, typically within 72 hours of discovery.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through our platform or via email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: