We collect information you provide directly to us, information we
collect automatically when you use the Service, and information from
third-party sources. The table below summarizes the categories of data
we collect:
Category
Examples
Purpose
Account Information
Name, email address, company name, account credentials (hashed
password)
Account creation, authentication, and service communications
Billing Information
Payment method token, billing address, invoice history, VAT/GST
ID
Payment processing (handled by Stripe) and subscription
management
Search Index Data
Documents, records, metadata, and content you upload for
indexing and search
Providing search functionality and delivering search results
Usage Data
API request logs, search query counts, index sizes, feature
usage patterns, timestamps
Service optimization, usage-based billing, and abuse prevention
Technical Data
IP address, browser type and version, device type, referring
pages, operating system
Analytics, security monitoring, and service improvement
We collect this data through direct user input, automated logging, and
analytics tools such as PostHog (self-hosted). We do not collect
sensitive personal data (such as health information, political opinions,
or biometric data) unless voluntarily provided by you in your Content.
2. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: To provide,
maintain, troubleshoot, and improve the Service and all its features.
Billing & Account Management:
To process transactions, send invoices and receipts, manage
subscriptions, and handle account-related communications.
Security & Abuse Prevention:
To monitor usage patterns for security threats, detect fraudulent or
abusive behavior, and enforce compliance with our Terms of Service.
Communications: To send you
service-related announcements, security alerts, support responses, and,
with your consent, marketing communications.
Product Development: To
analyze usage trends, measure feature adoption, and develop new
capabilities and improvements.
Legal Compliance: To comply
with applicable laws, regulations, legal processes, or enforceable
governmental requests.
Your Data Is Yours
We do not use your search index data to train AI models,
improve third-party services, or for any purpose other than
providing the search functionality you request. Your Content
remains yours. Period.
3. Data Storage & Security
Your data is stored on Cloudflare's global edge network and in
Cloudflare's US-based data centers. We implement the following security
measures to protect your information:
Encryption: Data is encrypted
at rest using AES-256 and in transit using TLS 1.3.
Isolation: Multi-tenant data
is strictly isolated using per-organization namespacing and access
controls.
Audits: We conduct regular
security audits, vulnerability scans, and penetration testing.
Access Controls: Administrative
access requires multi-factor authentication and is logged and audited.
Backups: Automated daily
backups with point-in-time recovery and geo-redundant storage.
We retain your data for as long as your account is active. Upon account
deletion, we delete all data within 30 days, with the exception of
anonymized usage metrics and financial records required for tax and
accounting purposes (retained per applicable legal requirements).
4. Third-Party Services
We use trusted third-party service providers to operate, secure, and
improve the Service. Each provider has been vetted for compliance with
applicable data protection laws and contractual obligations regarding
data handling.
We do not sell your personal data to any third party. Each provider is
contractually bound to process data only for the purposes we specify and
to maintain appropriate security measures.
5. Your Rights
Depending on your jurisdiction (including under the GDPR, CCPA, and
other applicable privacy laws), you may have the following rights
regarding your personal data:
1
Right to Access
Request a copy of the personal data we hold about you.
2
Right to Rectification
Request correction of inaccurate or incomplete data.
3
Right to Deletion
Request deletion of your data, subject to legal retention.
4
Right to Portability
Request a machine-readable export of your data.
5
Right to Object
Object to processing of your data for specific purposes.
6
Withdrawal of Consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at
privacy@aacsearch.com
. We will respond to your request within 30 days. You also have the right
to lodge a complaint with your local data protection authority if you
believe we have not handled your data appropriately.
California Residents (CCPA)
If you are a California resident, you have the right to request
disclosure of the categories and specific pieces of personal data
we have collected, the right to request deletion, and the right
to opt out of the sale of personal data. AACSearch does not sell
your personal data. To exercise your CCPA rights, email
privacy@aacsearch.com.
6. Cookies & Tracking
We use cookies and similar tracking technologies to operate, secure, and
analyze the Service. The table below describes the cookies we use:
Fraud prevention and session continuity for Stripe payments
1 year
You can control cookies through your browser settings. Disabling certain
cookies may affect the functionality of the Service. For more details
on managing cookies, visit
allaboutcookies.org
.
7. Contact Us
If you have any questions, concerns, or requests regarding this Privacy
Policy or our data practices, please contact us using the information
below.