Privacy Policy

1. SCOPE; CUSTOMER CONTENT

1.1Business Services. The Platform is provided to business customers. If you use the Platform through an organization (for example, as an employee or contractor of an Aquatic customer), that organization controls its account and workspace, including the ability to add and remove users and to access activity within its account.

1.2Customer Content. Project data, designs, drawings, specifications, site information, and other materials submitted to the Platform by or on behalf of a customer (“Customer Content”) are processed on behalf of, and at the direction of, that customer in accordance with our agreement with the customer, including the Terms. Except as described in Section 4 (AI Features; De-Identified Data), this Privacy Policy does not apply to Customer Content. If you have questions or requests concerning Customer Content, please direct them to the customer whose account holds that content.

2. INFORMATION WE COLLECT

2.1Information You Provide. We collect personal information you provide to us, including: (a) contact and account information, such as name, work e-mail address, phone number, company name, job title, and account credentials; (b) billing information, such as billing contact and address; payment card and bank details are collected and processed by our payment processor, and we do not store full payment card numbers; (c) communications, such as demo requests, support tickets, and other correspondence; and (d) marketing preferences.

2.2Information Collected Automatically. When you use the Services, we and our service providers automatically collect: (a) device and connection information, such as IP address, browser type, operating system, and device identifiers; (b) usage information, such as pages viewed, features used, actions taken within the Platform, referring URLs, and date and time stamps; and (c) log and diagnostic information. We collect some of this information using cookies and similar technologies, as described in Section 6.

2.3Information from Other Sources. We may receive personal information from other sources, including: (a) our customers and their personnel, for example when an account administrator adds you as an Authorized User; (b) our payment processors and other service providers; and (c) publicly available business sources.

3. HOW WE USE PERSONAL INFORMATION

We use personal information to: (a) provide, operate, maintain, and secure the Services, including authenticating users and managing accounts and seats; (b) process payments and administer billing; (c) provide support and respond to inquiries; (d) send administrative and service communications, such as notices about the Services, security, and changes to terms or policies; (e) analyze, improve, and develop the Services, including troubleshooting, research, and analytics; (f) send marketing communications about our products and services, which you may opt out of at any time as described in Section 9.3; (g) enforce our agreements and protect the rights, property, safety, and security of Aquatic, our customers, and others; and (h) comply with applicable law and legal process.

4. AI FEATURES; DE-IDENTIFIED DATA

Portions of the Platform use automated rules engines, machine learning, and other artificial intelligence technologies. Consistent with our agreements with our customers: (a) we may use usage data, and data derived from Customer Content or Platform outputs that has been de-identified and aggregated so that it does not identify, and cannot reasonably be used to identify, any customer, individual, or specific project, to operate, secure, maintain, improve, and develop the Platform and our other products and services, including to train and improve models, algorithms, and rule sets; and (b) we do not use Customer Content in identifiable form to train models or for the benefit of any other customer. We maintain de-identified data in de-identified form and do not attempt to re-identify it, except as permitted by law to test the effectiveness of our de-identification processes.

5. HOW WE SHARE PERSONAL INFORMATION

We share personal information: (a) with service providers that perform services on our behalf, such as cloud hosting, payment processing, analytics, e-mail delivery, and customer support tools, under contracts that restrict their use of personal information to providing services to us; (b) within a customer’s account, for example making a user’s name and activity visible to that customer’s account administrators and other workspace users; (c) with professional advisors, such as lawyers, accountants, and insurers, where reasonably necessary; (d) in connection with a merger, acquisition, financing, reorganization, or sale of all or a portion of our business or assets, in which case personal information may be transferred to the counterparty subject to this Privacy Policy or successor terms; (e) to comply with law, legal process, or enforceable governmental requests, or to protect the rights, property, or safety of Aquatic, our customers, or others; and (f) at your direction or with your consent. We do not sell personal information, and we do not share personal information for cross-context behavioral or targeted advertising.

6. COOKIES AND ANALYTICS

The Services use: (a) strictly necessary cookies, which enable core functions such as sign-in, session management, and security; and (b) analytics cookies and tools, such as Google Analytics, which help us understand how the Services are used so that we can improve them. We do not use advertising pixels, cross-site tracking, or session-replay tools on the Services. You can control cookies through your browser settings, including by blocking or deleting cookies; disabling strictly necessary cookies may impair the Services. Because we do not sell personal information or use it for targeted advertising, there is no sale or sharing to opt out of; our Services do not respond to “Do Not Track” browser signals for other purposes.

7. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including while an account is active, and thereafter as needed to comply with legal obligations, resolve disputes, enforce agreements, and maintain security, after which we delete or de-identify it in the ordinary course, subject to routine backup cycles. Customer Content is retained and deleted in accordance with our agreement with the applicable customer, including the export and deletion provisions of the Terms.

8. SECURITY

We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. YOUR CHOICES AND PRIVACY RIGHTS

9.1State Privacy Rights. Depending on your state of residence, you may have rights under applicable state privacy laws, including the rights to: (a) confirm whether we process your personal information and access it; (b) correct inaccurate personal information; (c) delete personal information; (d) obtain a portable copy of personal information you provided to us; and (e) opt out of the sale of personal information, targeted advertising, and certain profiling (practices in which, as described above, we do not engage). Some state privacy laws do not apply to personal information processed in a business-to-business or employment context or to businesses below statutory thresholds; we will respond to requests as required by applicable law.

9.2Exercising Rights. You may submit a rights request by e-mailing legal@aquatic.app. We may need to verify your identity before acting on a request, and you may use an authorized agent where permitted by law. We will not discriminate against you for exercising your rights. If we decline to act on your request, you may appeal our decision by replying to our response with the subject line “Appeal,” and we will respond as required by applicable law.

9.3Marketing Opt-Out. You may opt out of marketing e-mails at any time by using the unsubscribe link in the message or by e-mailing legal@aquatic.app. We may still send you non-marketing service and administrative communications.

9.4Account Information. Users of the Platform may review and update certain account information through their account settings, or by contacting the administrator of the customer account through which they access the Platform.

10. CHILDREN

The Services are intended for business users and are not directed to children under the age of eighteen (18). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us at legal@aquatic.app and we will delete it as required by law.

11. THIRD-PARTY SITES AND SERVICES

The Services may contain links to third-party websites and resources, such as manufacturer and distributor websites. This Privacy Policy does not apply to third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time by posting the updated version at https://www.aquatic.app/privacy and updating the “Last Updated” date above. If we make material changes, we will provide notice through the Services or by other reasonable means before the changes take effect. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acknowledgment of the update.

13. CONTACT US

If you have questions about this Privacy Policy or our privacy practices, please contact us at: legal@aquatic.app