Privacy Policy

1. Introduction

Welcome to Autheona (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, process, disclose, and safeguard personal information when you access our website, dashboard, APIs, and related services (the “Service”).

Autheona is a real-time intelligent verification platform designed to analyze email addresses during SaaS onboarding flows.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect information in the following categories:

2.1 Account Information

When you create an account, we may collect:

• Name
• Email address
• Company name
• Billing details
• Login credentials

2.2 Payment Information

If you subscribe to a paid plan, payment information is processed by our third-party payment providers. We do not store full credit card details on our servers.

2.3 Usage and Log Data

When you access or use the Service, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Access timestamps
• API usage metrics
• Error logs and performance data

2.4 Customer Data (Submitted Email Addresses)

As part of providing the Service, customers may submit email addresses and related metadata for analysis (“Customer Data”).

We process this data solely for:

• Performing intelligent verification analysis
• Generating risk scores and classifications
• Improving detection accuracy and system reliability
• Preventing abuse and protecting infrastructure

We do not sell Customer Data.

2.5 Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Authentication and session management
• Security monitoring
• Analytics and performance measurement

Please review our Cookie Policy for more details.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and secure accounts
• Process payments and manage subscriptions
• Analyze usage trends and improve system performance
• Prevent fraud, abuse, and security threats
• Communicate service-related notices and updates
• Comply with legal obligations
• Enforce our Terms and policies

We do not use Customer Data for advertising purposes.

4. Legal Basis for Processing (If Applicable)

Where applicable under data protection laws (such as GDPR), we process personal data based on:

• Performance of a contract
• Legitimate business interests (e.g., fraud prevention, service improvement)
• Compliance with legal obligations
• Consent, where required

5. Sharing of Information

We do not sell personal information. We may share information in the following limited circumstances:

5.1 Service Providers

We may share data with trusted third-party providers who assist with:

• Cloud hosting and infrastructure
• Payment processing
• Analytics and monitoring
• Security services

These providers are contractually obligated to safeguard information.

5.2 Legal Compliance

We may disclose information if required by law, court order, or governmental request.

5.3 Business Transfers

In the event of a merger, acquisition, financing, or asset sale, information may be transferred as part of the transaction.

6. Data Retention

We retain personal information only as long as necessary for:

• Providing the Service
• Fulfilling contractual obligations
• Resolving disputes
• Enforcing agreements
• Complying with legal requirements

Customer Data submitted for analysis may be retained for limited periods to improve system accuracy, prevent abuse, and ensure service reliability, unless otherwise agreed in writing.

Aggregated or anonymized data may be retained indefinitely.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, alteration, disclosure, or destruction.

These measures may include:

• Encrypted data transmission (HTTPS/TLS)
• Access controls and authentication mechanisms
• Infrastructure monitoring
• Secure cloud hosting environments

However, no system can guarantee absolute security.

8. International Data Transfers

If you access the Service from outside our primary operating jurisdiction, your information may be transferred to and processed in other countries where our service providers operate.

We take reasonable steps to ensure that such transfers comply with applicable data protection laws.

9. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• The right to access your data
• The right to correct inaccurate information
• The right to request deletion
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent where processing is based on consent

To exercise these rights, contact us at the email below. We may require identity verification before processing requests.

10. Customer Responsibilities

Customers using Autheona are responsible for:

• Obtaining necessary consents from their end users
• Providing required privacy notices
• Complying with applicable data protection laws
• Ensuring lawful submission of email addresses for analysis

Autheona generally acts as a data processor with respect to Customer Data, unless otherwise specified in a separate agreement.

11. Children’s Privacy

The Service is not intended for individuals under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children.

If you believe we have collected such information inadvertently, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes become effective upon posting. Continued use of the Service after updates constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions regarding this Privacy Policy, please contact:

autheona legal@autheona.com