Privacy Commitment
Last Updated: April 10, 2025
At aimproved.com ("Website", "we", "us", or "our"), we take your privacy seriously. This Privacy Policy describes in detail the types of information we collect, how we use and disclose that information, and the steps we take to protect it. By accessing or using our Website, you agree to the collection and use of information in accordance with this policy. If you do not agree with this Privacy Policy, please do not use our Website.
1. Information We Collect
Personal Information
When you interact with our Website, we may collect personal information that you provide to us voluntarily, including but not limited to:
-
Name
-
Email address
-
Phone number
-
Postal address
-
Account credentials (if applicable)
-
Billing information (if applicable)
-
Any other personal data necessary to provide our services or respond to your inquiries.
This personal information is provided to us when you create an account, fill out forms, subscribe to newsletters, or communicate with our support team.
Automatically Collected Information
In addition to personal information, we may automatically collect non-personally identifiable information when you visit our Website, including but not limited to:
-
IP address
-
Device type and model
-
Browser type and version
-
Operating system
-
Geolocation data
-
Referral URLs and browsing history
-
Time spent on our Website and pages visited
This information is collected through cookies, web beacons, and other similar technologies to improve the functionality of our Website and user experience.
2. Use of Information
We use the collected information for the following purposes:
-
Service Delivery: To provide, maintain, and improve our Website and services, including content personalization and recommendations.
-
Communication: To respond to your inquiries, requests, and provide customer support, including email notifications about updates, promotions, or administrative notices.
-
Customization: To personalize your experience by tailoring the content, advertisements, and services based on your preferences and behavior.
-
Analytics and Research: To analyze trends, monitor the usage of our Website, and conduct research to improve our services, products, and customer satisfaction.
-
Security and Fraud Prevention: To protect the integrity of our Website, secure your data, detect fraud, and prevent unauthorized access or activities.
-
Legal Compliance: To comply with applicable laws, regulations, and legal processes, including responding to lawful requests from public authorities or as required by law.
3. Cookies and Similar Technologies
We use cookies, web beacons, and similar technologies to enhance your experience while navigating our Website. These technologies allow us to:
-
Remember your preferences and settings.
-
Monitor user activity to improve the functionality of our Website.
-
Analyze traffic patterns and performance metrics.
By using our Website, you consent to the use of cookies as described in this policy. You can manage or disable cookies through your browser settings at any time. However, disabling cookies may limit your ability to access certain features of our Website.
4. Data Sharing and Disclosure
We may share your personal information in the following circumstances:
-
Service Providers: We may disclose your information to trusted third-party vendors, contractors, or service providers who assist us in operating our Website, conducting business, or providing services to you. These third parties are bound by confidentiality agreements and are prohibited from using your personal information for any other purposes.
-
Legal Requirements: We may disclose your personal information if required by law, such as to comply with a subpoena, legal process, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of aimproved, its users, or others.
-
Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change through a notice on our Website.
-
Affiliates: We may share your information with our affiliated companies for purposes such as marketing and business operations, provided that such affiliates will adhere to this Privacy Policy.
5. Data Security
We implement a variety of technical, administrative, and physical security measures to safeguard your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure servers.
Despite these efforts, please note that no method of data transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of any passwords and account information associated with your use of the Website.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. This includes retaining data for the duration of your account with us or as needed for the resolution of disputes, enforcement of agreements, or compliance with legal obligations.
After the retention period has ended, we will securely delete or anonymize your personal data, unless retention is required for legal or regulatory reasons.
7. Children’s Privacy
Our Website is not intended for individuals under the age of 13, and we do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately to ensure the data is removed.
8. Your Rights and Choices
You have the following rights with respect to your personal information:
-
Access: You have the right to request access to the personal information we hold about you.
-
Correction: You may request that we correct any inaccuracies in your personal information.
-
Deletion: You may request the deletion of your personal information, subject to certain exceptions such as legal retention requirements.
-
Opt-Out of Marketing: You may opt out of receiving promotional communications from us by following the unsubscribe instructions in such communications or by contacting us directly.
To exercise these rights or for any other questions related to your personal information, please contact us using the details provided in the “Contact Us” section below.
9. Updates to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Website following the posting of any changes will constitute your acceptance of those changes.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: privacy@aimproved.com
Security Compliance
Last Updated: April 10, 2025
At aimproved.com ("Company"), we are committed to safeguarding the personal and sensitive data entrusted to us. Our Data Security Policy outlines the measures we take to protect data, ensuring its confidentiality, integrity, and availability. This policy applies to all employees, contractors, suppliers, and partners involved in processing or accessing data on behalf of the Company.
1. Data Protection Principles
We are dedicated to the following principles to protect all data:
-
Confidentiality: Ensuring that data is only accessible to authorized individuals.
-
Integrity: Ensuring that data is accurate, complete, and trustworthy.
-
Availability: Ensuring that data is accessible when required by authorized users.
-
Accountability: Ensuring that there are clear responsibilities for data protection.
2. Data Classification
Data must be classified based on its sensitivity and importance to the Company. The classification determines how the data will be handled, protected, and disposed of. All data should be classified as:
-
Public: Information intended for public disclosure.
-
Internal: Information that is not confidential but is intended for internal use only.
-
Confidential: Sensitive information that must be protected due to legal, contractual, or privacy obligations.
-
Highly Confidential: Information requiring the highest level of protection due to its critical nature.
3. Data Access Control
We implement strict controls on who can access data. Access is granted based on:
-
Need-to-know basis: Only authorized individuals are allowed access to specific data necessary for their job roles.
-
Role-based access control (RBAC): Access levels are assigned based on job roles and responsibilities.
-
Authentication and authorization: Secure login methods (e.g., passwords, multi-factor authentication) are required to access data.
4. Data Encryption
We ensure that sensitive data is protected using encryption during transmission and at rest. This includes:
-
Encryption in Transit: Data transmitted over networks is encrypted to prevent unauthorized access during transmission.
-
Encryption at Rest: Sensitive data stored on systems or devices is encrypted to ensure its protection in case of unauthorized access.
5. Data Minimization
We follow the principle of data minimization, which means collecting only the minimum amount of personal or sensitive data necessary for legitimate business purposes. We avoid excessive or unnecessary data collection.
6. Data Retention and Disposal
Data will be retained only for as long as necessary to fulfill its purpose. When data is no longer needed, we ensure that it is securely disposed of or anonymized, including:
-
Secure Deletion: All data must be deleted using secure methods to ensure that it cannot be reconstructed or retrieved.
-
Data Anonymization: When appropriate, data may be anonymized to ensure privacy while still enabling useful analysis.
7. Security Incident Response
We have a comprehensive security incident response plan in place to detect, respond to, and recover from data breaches or security incidents. The plan includes:
-
Incident Detection: Continuous monitoring for potential security breaches.
-
Incident Notification: Prompt notification to affected individuals and regulatory bodies in accordance with legal requirements.
-
Incident Resolution: Swift corrective actions to contain and resolve the breach.
8. Third-Party Data Security
We require that third-party vendors, contractors, and partners who handle or access our data comply with our data security standards. This includes:
-
Due Diligence: Vetting third parties for their ability to meet our data protection requirements.
-
Contractual Obligations: Ensuring third parties have appropriate data protection clauses in their contracts.
-
Audits and Assessments: Regular monitoring and auditing of third-party practices to ensure compliance with our data security standards.
9. Employee Training and Awareness
We ensure that all employees receive regular training on data security best practices, including:
-
Security Awareness: Educating employees on potential data security threats such as phishing, malware, and social engineering.
-
Data Handling Procedures: Training employees on how to handle, store, and dispose of data securely.
10. Compliance with Legal and Regulatory Requirements
We adhere to all applicable data protection laws and regulations, including:
-
General Data Protection Regulation (GDPR) for individuals in the EU.
-
California Consumer Privacy Act (CCPA) for individuals in California.
-
Any other relevant local, regional, or international data protection laws.
11. Monitoring and Auditing
We regularly monitor and audit our data security practices to identify and address potential vulnerabilities. This includes:
-
Vulnerability Scanning: Routine scans to detect security weaknesses.
-
Audit Trails: Maintaining logs of data access and usage for accountability and transparency.
12. Data Security Violations
We take violations of our data security policies seriously and will take appropriate actions, including:
-
Disciplinary Measures: Employees found violating data security policies may face disciplinary actions.
-
Corrective Actions: Any identified security gaps will be addressed promptly to mitigate risks and prevent future incidents.
13. Contact Information
For questions, concerns, or reports related to data security, please contact the Company’s Data Security Department at dpo@aimproved.com.
Security Compliance
Last Updated: April 10, 2025
At aimproved.com ("Company"), we are committed to safeguarding the personal and sensitive data entrusted to us. Our Data Security Policy outlines the measures we take to protect data, ensuring its confidentiality, integrity, and availability. This policy applies to all employees, contractors, suppliers, and partners involved in processing or accessing data on behalf of the Company.
1. Data Protection Principles
We are dedicated to the following principles to protect all data:
-
Confidentiality: Ensuring that data is only accessible to authorized individuals.
-
Integrity: Ensuring that data is accurate, complete, and trustworthy.
-
Availability: Ensuring that data is accessible when required by authorized users.
-
Accountability: Ensuring that there are clear responsibilities for data protection.
2. Data Classification
Data must be classified based on its sensitivity and importance to the Company. The classification determines how the data will be handled, protected, and disposed of. All data should be classified as:
-
Public: Information intended for public disclosure.
-
Internal: Information that is not confidential but is intended for internal use only.
-
Confidential: Sensitive information that must be protected due to legal, contractual, or privacy obligations.
-
Highly Confidential: Information requiring the highest level of protection due to its critical nature.
3. Data Access Control
We implement strict controls on who can access data. Access is granted based on:
-
Need-to-know basis: Only authorized individuals are allowed access to specific data necessary for their job roles.
-
Role-based access control (RBAC): Access levels are assigned based on job roles and responsibilities.
-
Authentication and authorization: Secure login methods (e.g., passwords, multi-factor authentication) are required to access data.
4. Data Encryption
We ensure that sensitive data is protected using encryption during transmission and at rest. This includes:
-
Encryption in Transit: Data transmitted over networks is encrypted to prevent unauthorized access during transmission.
-
Encryption at Rest: Sensitive data stored on systems or devices is encrypted to ensure its protection in case of unauthorized access.
5. Data Minimization
We follow the principle of data minimization, which means collecting only the minimum amount of personal or sensitive data necessary for legitimate business purposes. We avoid excessive or unnecessary data collection.
6. Data Retention and Disposal
Data will be retained only for as long as necessary to fulfill its purpose. When data is no longer needed, we ensure that it is securely disposed of or anonymized, including:
-
Secure Deletion: All data must be deleted using secure methods to ensure that it cannot be reconstructed or retrieved.
-
Data Anonymization: When appropriate, data may be anonymized to ensure privacy while still enabling useful analysis.
7. Security Incident Response
We have a comprehensive security incident response plan in place to detect, respond to, and recover from data breaches or security incidents. The plan includes:
-
Incident Detection: Continuous monitoring for potential security breaches.
-
Incident Notification: Prompt notification to affected individuals and regulatory bodies in accordance with legal requirements.
-
Incident Resolution: Swift corrective actions to contain and resolve the breach.
8. Third-Party Data Security
We require that third-party vendors, contractors, and partners who handle or access our data comply with our data security standards. This includes:
-
Due Diligence: Vetting third parties for their ability to meet our data protection requirements.
-
Contractual Obligations: Ensuring third parties have appropriate data protection clauses in their contracts.
-
Audits and Assessments: Regular monitoring and auditing of third-party practices to ensure compliance with our data security standards.
9. Employee Training and Awareness
We ensure that all employees receive regular training on data security best practices, including:
-
Security Awareness: Educating employees on potential data security threats such as phishing, malware, and social engineering.
-
Data Handling Procedures: Training employees on how to handle, store, and dispose of data securely.
10. Compliance with Legal and Regulatory Requirements
We adhere to all applicable data protection laws and regulations, including:
-
General Data Protection Regulation (GDPR) for individuals in the EU.
-
California Consumer Privacy Act (CCPA) for individuals in California.
-
Any other relevant local, regional, or international data protection laws.
11. Monitoring and Auditing
We regularly monitor and audit our data security practices to identify and address potential vulnerabilities. This includes:
-
Vulnerability Scanning: Routine scans to detect security weaknesses.
-
Audit Trails: Maintaining logs of data access and usage for accountability and transparency.
12. Data Security Violations
We take violations of our data security policies seriously and will take appropriate actions, including:
-
Disciplinary Measures: Employees found violating data security policies may face disciplinary actions.
-
Corrective Actions: Any identified security gaps will be addressed promptly to mitigate risks and prevent future incidents.
13. Contact Information
For questions, concerns, or reports related to data security, please contact the Company’s Data Security Department at dpo@aimproved.com.
© 2025 Aimproved Limited all rights reserved.
