Privacy Policy

Aware OS is operated by Christians Thrive Trust, doing business as Aware OS, of 525 Randall Ave, Ste 100, PMB 859, Cheyenne, WY 82001, United States. In this policy “we”, “us” and “our” mean that entity. It explains what personal data we collect when you use Aware OS, why we collect it, and the choices you have.

For the purposes of the UK and EU General Data Protection Regulation (GDPR), Christians Thrive Trust is the data controller for the personal data described below.

We collect the following categories of information:

• Account information — your name, email address, and password hash (or, if you sign in with Google, the identifier that Google returns to us). You may also add a profile picture and display name.
• Team and billing information — the workspaces you belong to, your role in them, and the subscription plan attached to your account. Card details are handled by our payment processor and never reach our servers.
• Content you provide — the documents, prompts, configuration and other material you upload to or create inside Aware OS.
• Usage and device data — pages viewed, features used, approximate location derived from your IP address, browser type, and timestamps. We use this to keep the service reliable and to understand which features earn their keep.
• Diagnostic data — error reports and performance traces generated when something goes wrong.

• To provide, operate and maintain Aware OS.
• To authenticate you and keep your account and workspaces secure.
• To process payments and send you invoices, receipts and renewal notices.
• To send service messages — password resets, workspace invitations, security alerts and material changes to the service.
• To diagnose faults, prevent abuse, and improve performance and reliability.
• To comply with our legal and regulatory obligations.

We do not sell your personal data, and we do not use the content you store in Aware OS to train foundation models.

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to deliver the service you signed up for), legitimate interests (to secure, support and improve the service), legal obligation (to meet tax, accounting and regulatory duties), and consent (for optional analytics cookies and marketing email, which you can withdraw at any time).

If you choose to sign in with Google, we request only your basic profile and email address. We use this data solely to create and authenticate your Aware OS account — to identify you on return visits and to contact you about your account.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to third parties except as necessary to provide the service, we do not use it for advertising, and no humans read it except where required for security, to comply with law, or with your explicit consent.

You can revoke Aware OS’s access to your Google account at any time from your Google account permissions page.

We share personal data with service providers who process it on our behalf, under contract and only on our instructions:

• Supabase — Database, authentication and file storage.
• Vercel — Application hosting and content delivery.
• Stripe — Payment processing and subscription billing.
• Resend — Transactional email delivery.
• Sentry — Error monitoring and performance diagnostics.
• Google — Optional single sign-on via Google accounts.

We may also disclose data where required by law, to enforce our terms, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets — in which case we will give you notice before your data becomes subject to a different privacy policy.

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. These cannot be turned off. We also use a small number of analytics cookies to understand aggregate usage; you can decline these without losing access to any feature. See our cookie policy for the full list.

We keep your account data for as long as your account is active. If you delete your account, we delete or irreversibly anonymise your personal data within 30 days, except where we are required to retain records for longer — typically invoices and tax records, which we keep for seven years. Backups are purged on a rolling 35-day cycle.

Our infrastructure providers may process data in the United States and other countries outside your own. Where we transfer personal data out of the UK or EEA, we rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one is in force.

Data is encrypted in transit with TLS and at rest. Access to production systems is limited to staff who need it, protected by multi-factor authentication, and logged. Tenant data is isolated at the database level through row-level security policies. No system is perfectly secure, but we will notify you and the relevant regulator without undue delay if a breach affects your personal data.

Depending on where you live, you may have the right to access, correct, delete or export your personal data; to object to or restrict certain processing; and to withdraw consent. California residents additionally have the right to know what personal information is collected and to opt out of its sale — we do not sell personal information.

Most of these you can exercise directly from your account settings. For anything else, write to privacy@aware.io and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Aware OS is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. If the changes are material we will notify you by email or through the application before they take effect. The date at the top of this page always reflects the current version.

Questions about this policy or how we handle your data? Email privacy@aware.io.