Privacy Policy

1. Who we are

Awiden is run by Signal Intelligence Inc. ("Awiden", "we", "us"), which decides how your personal data is used. This policy explains what we collect, why, who receives it, how long we keep it and the rights you have. Questions go to privacy@awiden.com.

2. What we collect

• Your account: your name, email address and company. Payments are handled by Stripe.
• If you ask to see what we're building: your email address, when you opened the link and last visited, a hashed form of your IP address to stop the form being used to send spam, and, only if you tick the box, that you asked for updates, with the exact wording and the time. We use it to send you the link and, if you asked, updates.
• If you apply as a founding team: your name, work email, company, the size of your team, what your team is working towards and, if you add it, your most important goal. We use it to reply to you and to set your team up.
• Email and calendar you connect (Gmail, Google Calendar, Outlook and Microsoft Calendar): sender, recipients, date, subject line and the body of your messages, and event titles, attendees and times. Email content is retained for the life of your account and deleted when you disconnect the account or delete your Awiden account.
• WhatsApp and Telegram, if you connect them: message text (up to 2,000 characters per message), timestamps and who took part. For WhatsApp, only conversations active in the last 12 months. Media is labelled ("photo", "voice note") and never stored.
• Slack, if you connect it: who you message and mention, and when.
• Meeting transcripts you send from Krisp, Fireflies, Pocket, Granola or Read.ai, stored in full under your account.
• What you upload or save: your LinkedIn data export, notes and documents, and emails you save to memory.
• What Awiden works out from these: relationship history, commitments, your writing style, briefings, meeting preparation, drafts and mandate matches, stored under your account.
• People in your network: the names, roles and companies of people you email, meet or message, and public professional information about them and their companies, kept under your account.
• Usage and device data: pages viewed, IP address, browser and device.

3. Why we use it

• To provide Awiden under our agreement with you: your relationships, briefings, meeting preparation, drafts and mandate matching.
• To keep Awiden secure and working, and to improve it, which is our legitimate interest.
• To show you who is in your network, which is our legitimate interest and yours.
• To tell you about your account, and about Awiden unless you opt out.
• To meet legal obligations.

We do not sell personal information and do not use it for advertising.

4. How Awiden uses AI

• Some features work from metadata alone. Others read the text of your messages as well, among them meeting preparation, answers from Awiden's assistant, drafting and learning your writing style.
• The text of your email, meetings and messages is processed in the EU. Most of it is read on Awiden's own servers in the EU. The rest goes to AI model providers that process it in EU regions, described in section 6. That text is not sent to an AI provider outside the EU.
• Whether a person fits one of your mandates is judged by an AI model, from the mandate and that person's professional profile. It is not sent the text of your messages. To explain why a person fits, Awiden reads the relevant parts of your correspondence on its own servers in the EU. That text is not sent to a third-party AI provider.
• Awiden does not train models on your data. All processing is for your account only. Some of it runs in the background, and what it produces is stored under your account.

5. Google and Microsoft data

Awiden's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of Microsoft Graph data follows the Microsoft API Terms of Use. We use this data only for the features described here, we do not sell it or use it for advertising, and we share it only as needed to provide Awiden.

We do NOT sign in to your account except when you have asked us for help or agreed to it, to investigate a bug, a security problem or abuse, or when the law requires it. Each time, we record who signed in, when, and why.

6. Who we work with

• Google (Gmail, Calendar) and Microsoft (Outlook Mail, Calendar): the mail and calendars you connect.
• LinkedIn: the data export you upload.
• WhatsApp: the account you link as a device.
• Telegram: the account you link through its official API.
• Hosting and infrastructure providers: To store your data and to run Awiden's servers, including the servers in the EU on which Awiden runs some AI models itself.
• AI model providers: They receive the text a feature needs, which can include excerpts of your email and messages, either directly or through AI gateway providers. They process it in EU regions.
• Research and enrichment providers: To find public professional information. They receive details such as a name, a company, a company website, a public profile address and, in some cases, an email address or a hashed email address.
• Stripe: payments.
• Analytics providers: to understand how Awiden is used.
• People you choose: anyone with a briefing link you share sees what you selected for it. In a team, colleagues see counts and which member knows which person, never the content.
• Authorities, when the law requires it.

A current list of the providers we use is available on request.

7. Where it is stored and processed

Your email, meetings and messages are stored and processed in Europe, in EU data centres. Some providers described in section 6 operate outside the EU and receive other, more limited data: research and enrichment providers receive the professional details listed there, and Stripe receives what payments need. They may be in countries that have different data protection laws.

Where personal data is transferred outside the EEA or the UK, we rely on an adequacy decision (including the EU-US Data Privacy Framework where a provider is certified) or on the European Commission's Standard Contractual Clauses, with the UK Addendum where it applies. You can ask us for a copy of the safeguards that apply by contacting us at privacy@awiden.com.

8. How we protect it

Your data is encrypted in transit with TLS and encrypted at rest with AES-256. Access tokens for connected accounts and messaging session credentials are encrypted again before they are stored. Your data is kept separate from every other customer's, in the app and on our servers. Our Data Security Overview describes this in full, including what is still in progress.

9. How long we keep it

• For as long as your account exists, unless you remove it sooner.
• Disconnecting a mail account also deletes the email content synced from it, unless you choose to keep it when you disconnect.
• If your subscription lapses, syncing stops and your data is kept so you can come back. Delete your account to remove it.
• When you ask us to delete your account, Awiden revokes its access to your connected accounts, signs you out everywhere, and deletes all of your data within 30 days: your messages, contacts, calendar, files you uploaded, and everything Awiden produced from them. Records the law requires us to keep, such as invoices, are kept only for as long as it requires.
• Usage logs are kept for up to 12 months.

10. Your rights

You can ask for a copy of your data, a portable export, a correction or deletion, and you can object to or restrict how we use it. You can disconnect any connected account at any time in Settings, and unsubscribe from marketing email. Write to privacy@awiden.com.

If you are in the EEA or the UK, the General Data Protection Regulation (GDPR) also gives you the right to complain to your data protection authority. If you are in California, you have the right to know what we collect and to have it deleted. We do not sell your personal information.

11. Children

Awiden is not for anyone under 18, and we do not knowingly collect their data.