Privacy Policy

1. Introduction

This Privacy Policy describes how AIMID ("we," "us," or "our") collects, uses, stores, and protects personal information when you access or use our website and services.

We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws.

2. Information We Collect

a. Account Information

When users create an account, including in the AIMID Sandbox, we collect:

• First and last name
• Email address, and whether it has been confirmed
• How you sign in (for example, Google or email and password)
• Account credentials (stored in encrypted or hashed form by our authentication provider)
• The sector you work in and the country you choose to focus on
• When you accepted our Terms of Service and this Privacy Policy

b. Email Subscriptions

When users subscribe to an AIMID email, such as the Daily Hit or our newsletter, we collect:

• Name
• Email address
• A record of your consent: what you agreed to, when, and where (for example, during sign-up or on your account page)

Email subscriptions are voluntary and based on your consent. Every email includes a link to unsubscribe, and you can change your subscriptions at any time on your account page.

c. Product Usage Data

When you are signed in to the AIMID Sandbox, we record how you use it, linked to your account:

• When you sign in and visit, the type of device and screen size, and the website that referred you
• The pages you open and the buttons, links and tabs you click
• The searches you run, including the words you search for, and the number of results
• The records, countries, documents and questions you open or ask about
• When you reach a limit of your plan or select a feature of a paid plan

We do not record what you type into other fields, your password, your keystrokes, or recordings of your screen.

d. Technical and Operational Data

Our website is hosted on Google Cloud Platform (GCP). As part of standard infrastructure operations, GCP may automatically collect limited technical information such as:

• IP address
• Request timestamps
• System and security logs

This data is used exclusively for security, reliability, and operational integrity.

3. How We Use Information

We use collected information to:

• Create and manage user accounts
• Deliver emails and communications users have opted into
• Understand how the Sandbox is used, which features are useful and where users have difficulty, so we can improve it and plan new features and plans
• Contact you about your account, for example if your email address has not been confirmed
• Maintain website functionality and security
• Comply with legal and regulatory obligations

Product usage data is reviewed by authorized AIMID staff, both in aggregate and for individual accounts. It is not sold, not shared with third parties for their own purposes, and not used for advertising.

We do not use personal data for targeted advertising or automated decision-making.

4. Legal Basis for Processing

Where applicable (including under GDPR), we process personal data based on:

• Consent (email subscriptions)
• Contractual necessity (account creation and access)
• Legitimate interests (site security and administration, and understanding and improving how our services are used)
• Legal obligations

5. Data Storage and Security

• Personal data is stored on secure servers hosted by Google Cloud Platform.
• We implement reasonable technical and organizational safeguards to protect data.
• Access to personal data is restricted to authorized personnel only.
• Personal data is retained only as long as necessary to fulfill the purposes described in this policy or as required by law.
• Detailed product usage data is deleted after 13 months. We may keep summary statistics that do not identify you for longer.

6. Data Sharing and Disclosure

We do not sell, rent, or trade personal information.

We may share data only:

• With infrastructure and hosting providers (e.g., Google Cloud Platform) as required to operate the site
• With Google Analytics, for visits to our public website (see Cookies)
• When required to comply with legal obligations or lawful government requests

7. User Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data, including your product usage data
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent for email subscriptions
• Object to or restrict certain processing activities, including the use of your product usage data

Requests may be submitted by contacting us at: info@aimid.io

8. Cookies

We do not use cookies for advertising or cross-site tracking.

Our public website (the pages outside the AIMID Sandbox) uses Google Analytics to count visits and see which pages are read. Google Analytics sets its own cookies and receives your IP address and browser information, which Google processes under its own terms. The AIMID Sandbox does not use Google Analytics.

Essential cookies or technical mechanisms required for authentication and core site functionality may be used. These cannot be disabled without affecting site operation.

The AIMID Sandbox also keeps a few values in your browser's local storage: whether you are signed in, a random identifier for your browser, and a random identifier for your current visit, which we use to group the product usage described in section 2c. These are set and read only by AIMID.

9. International Data Transfers

If you access the site from outside the country where our servers are located, your information may be processed in jurisdictions with different data protection standards. We take reasonable steps to ensure appropriate safeguards are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.

Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact:

AIMID
Email: info@aimid.io