Aware AI Privacy Policy

Last Updated: May 2026

Aware AI ("Aware," "we," "our," or "us"), a company registered in the State of California, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, process, store, and disclose information when you use the Aware platform, website, applications, AI systems, integrations, automations, connectors, and related services (collectively, the "Services").

We may collect the following categories of information: - Account information (name, email address, authentication identifiers, account preferences) - Billing and payment information (processed through third-party payment providers) - Usage telemetry and session activity - Support communications - Uploaded content, AI prompts and responses - Automation and connector metadata - Operational diagnostics, authentication logs, and device and browser information - Cookies, pixel tags, and similar tracking technologies (see Cookies section below) - Financial account metadata where you connect financial services integrations

Aware uses cookies and similar tracking technologies to operate and improve the Services. These may include: - Essential cookies required for authentication and platform functionality - Analytics cookies to understand how users interact with the platform - Performance cookies to monitor platform reliability You may control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. We do not use cookies to serve third-party advertising.

Aware uses AI orchestration systems, embeddings, vectorization, memory indexing, retrieval systems, operational replay systems, and automated workflows to provide platform functionality. By using the Services, you acknowledge and consent to this processing. Aware's memory system learns from your connected sources — including email, calendar, banking, drive, and chat conversations — to build a persistent understanding of your preferences, routines, relationships, and patterns. This learned data is stored in your personal memory profile and is used to personalize Aware's responses and autonomous actions across sessions. Sensitive information — including financial credentials, authentication tokens, passwords, and government identification numbers — is automatically excluded from long-term memory storage. Aware may use this information in the moment to assist you but never persists it to your memory profile. Photos and images shared in chat are automatically deleted after 30 days unless you explicitly save them to your library. Saved images are retained until you delete them manually. You have full control over your memory data at any time through Settings — Memory — Connected Sources. Specifically you may: pause learning from any individual source without deleting existing data; forget all data learned from a specific source; delete your entire memory profile; or download a complete export of everything Aware has learned about you. Chat history is retained to enable memory continuity and may be cleared by the user at any time from Memory settings.

Aware integrates with Plaid Technologies, Inc. ("Plaid") to enable financial account connectivity features within the platform. When you connect a financial account, Aware accesses your financial data through Plaid's API solely to provide the requested platform functionality. By connecting a financial account, you agree to Plaid's End User Privacy Policy, available at https://plaid.com/legal/. Aware does not sell your financial data. Financial account credentials are transmitted directly to Plaid and are not stored by Aware. We collect and process financial metadata including account balances, transaction history, and related information only as authorized by you and as necessary to provide the Services.

If you connect external services such as Google, Microsoft, Slack, Stripe, Discord, Notion, Dropbox, iCloud, Plaid, or other providers, Aware may access authorized metadata and content necessary to provide platform functionality. We do not sell your private data.

Aware's use of data obtained through Google APIs (including Gmail, Google Calendar, and Google Drive) is governed by the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Aware does not use Google user data to develop, improve, or train generalized AI or machine learning models. Data Accessed - Gmail: message metadata and message bodies of the authenticated user's inbox (read, send, modify, compose) when you connect Gmail. Includes headers, From/To/Cc/Bcc, subject, body, labels, thread IDs, and attachments referenced by your requests. - Google Calendar: events on calendars you own or have write access to (list, read, create, update, delete), including title, description, attendees, time, location, and conferencing data. - Google Drive: file metadata and file contents you explicitly select or that Aware searches on your behalf (drive.file scope where possible), plus your basic Drive profile (name, email, avatar) returned by Google during sign-in. - Identity: your Google account email, name, profile picture, and unique account identifier returned by OpenID Connect to authenticate your session. Data Usage - Gmail data is used only to: (a) display your inbox inside Aware, (b) draft replies in your voice when you request them, (c) send or modify emails that you explicitly approve, and (d) trigger user-configured rules (pin, archive, notify, label) on incoming messages. - Google Calendar data is used only to read, create, edit, and delete events at your explicit direction, and to surface upcoming events in Aware's contextual UI. - Google Drive data is used only to (a) search and read files when you request context for an AI response, and (b) save artifacts you explicitly create through Aware. - Identity data is used only to authenticate your session and personalize your account. - Google user data is never used for advertising, ad targeting, profiling, resale, or to train, fine-tune, or evaluate generalized AI/ML models. Data Sharing - We do not sell, rent, or trade Google user data. - We share Google user data only with sub-processors strictly necessary to deliver the feature you invoked: our cloud hosting and database provider (Supabase) for transient storage of message/event/file metadata you act on, and the AI model providers we route your requests to (currently Google Gemini via the Lovable AI Gateway, OpenAI, and Anthropic) solely to generate the response you asked for. Each sub-processor is bound by contract and may not use the data for any other purpose. - We disclose Google user data to law enforcement or government authorities only when required by valid legal process, and only the minimum data necessary to comply. Data Storage & Protection - Google user data is processed and stored on encrypted infrastructure (TLS 1.2+ in transit, AES-256 at rest) operated by Supabase (US region) and accessed only by authenticated edge functions running under your user identity. - Access is enforced at the database layer by Row-Level Security policies that restrict every row to the user that owns it. OAuth refresh tokens are stored encrypted and isolated per user. - Aware staff do not access individual Google user data except where strictly necessary to investigate a security incident or to comply with law, and never for product analytics. Data Retention & Deletion - Cached Google data (recent emails, upcoming events, file metadata you have already opened) is retained only as long as needed to power Aware's contextual features and is automatically purged when no longer relevant. - You can disconnect your Google account at any time from Settings, Connections. Disconnecting immediately revokes Aware's OAuth tokens and deletes all cached Google user data within 30 days. - You can request full deletion of your Aware account and all associated Google-derived data by emailing privacy@stayaware.ai. We will action verified deletion requests within 30 days. - You can additionally revoke Aware's access directly at https://myaccount.google.com/permissions at any time.

The Aware platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, you may not use the Services. If we become aware that we have inadvertently collected personal information from a user under 18, we will take steps to delete that information promptly. If you believe we have collected information from a minor, please contact us at support@awareai.com.

Aware may monitor platform activity, logs, telemetry, moderation signals, replay events, runtime diagnostics, abuse prevention systems, and security events to maintain platform integrity and support functionality.

Membership fees, AI usage credits, connector usage, and operational consumption metrics may be tracked and billed through third-party payment providers. Credits may be consumed in real time as AI services are utilized.

We implement commercially reasonable safeguards designed to protect user data and platform infrastructure. In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law. However, no system can guarantee absolute security.

Aware may share information with trusted infrastructure, AI, analytics, payment, cloud hosting, moderation, and operational vendors solely to provide and maintain the Services. We do not sell personal data. Financial institutions. Aware uses Plaid Inc. ("Plaid") to gather your data from financial institutions. By using the Service, you grant Aware the right, power, and authority to act on your behalf to access and transmit your personal and financial information from your relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid.

Aware does not sell personal data. Aware does not use personal data — including data obtained through Google Workspace APIs — to develop, improve, or train generalized AI or machine learning models, public or private.

Depending on your jurisdiction, you may have rights with respect to your personal information, including: - The right to access personal information we hold about you - The right to request correction of inaccurate information - The right to request deletion of your personal information - The right to request restriction of processing - The right to data portability where technically feasible Certain operational logs or compliance records may be retained as required by law or operational necessity.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including: - The right to know what personal information we collect, use, disclose, and sell - The right to delete personal information we have collected from you, subject to certain exceptions - The right to correct inaccurate personal information - The right to opt-out of the sale or sharing of your personal information (Aware does not sell personal data) - The right to limit the use and disclosure of sensitive personal information - The right to non-discrimination for exercising your privacy rights To exercise your California privacy rights, please contact us at support@awareai.com. We will respond to verified requests within 45 days as required by law. You may designate an authorized agent to submit requests on your behalf. Many rights — including the right to delete personal information and the right to access what Aware has learned about you — can be exercised directly within the platform via Settings — Memory — Connected Sources without contacting us. You may also download a complete export of your memory data at any time from that same location. For the 12-month period prior to this policy's effective date, Aware has not sold or shared personal information for cross-context behavioral advertising.

Aware AI California support@awareai.com Last Updated: May 2026