Privacy Policy
Last updated: April 2, 2026
1. Introduction
AegionIQ ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Salesforce governance platform, including our website, application, and related services (collectively, the "Service").
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, company name, and role. If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe). We do not store credit card numbers on our servers.
Salesforce Metadata
When you connect your Salesforce org, we access metadata about your org's configuration — including Apex classes, Flows, Objects, Fields, Permission Sets, and Profiles. We access this data via read-only OAuth 2.0 and never modify your Salesforce org. We do not access or store your business data (e.g., customer records, opportunities, contacts).
Usage Data
We collect information about how you interact with the Service, including pages visited, features used, scan frequency, AI Copilot queries, and simulation runs. This data helps us improve the product and provide personalized recommendations.
Device & Log Data
We automatically collect your IP address, browser type, operating system, referring URLs, and access timestamps for security monitoring and analytics.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To run governance scans, dependency analysis, and impact simulations on your Salesforce org metadata
- To power AI Copilot responses and remediation recommendations
- To process subscriptions, token purchases, and billing
- To send transactional emails (scan results, account updates, billing receipts)
- To improve our scanning algorithms and AI models
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
4. Data Sharing & Disclosure
We do not sell your personal information. We may share data with:
- Service providers: Stripe (payments), Supabase (infrastructure), OpenAI (AI processing — metadata only, no business data), and analytics providers
- Legal compliance: When required by law, subpoena, or court order
- Business transfers: In connection with a merger, acquisition, or sale of assets
- With your consent: When you explicitly authorize sharing
5. Data Retention
We retain your account data for as long as your account is active. Scan results and metadata snapshots are retained based on your plan tier: 30 days (Free), 365 days (Pro), or unlimited (Enterprise). When you delete your account, we remove all associated data within 30 days, except where retention is required by law.
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), role-based access controls, and regular security audits. All Salesforce connections use OAuth 2.0 with read-only scopes. See our Security page for details.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to automated decision-making
- Lodge a complaint with a data protection authority
To exercise any of these rights, contact us at privacy@aegioniq.com.
8. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (which you can opt out of) to understand usage patterns. We do not use advertising or tracking cookies.
9. International Data Transfers
Our infrastructure is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We implement appropriate safeguards (including Standard Contractual Clauses where applicable) to protect your data during transfer.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 30 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
privacy@aegioniq.com
AegionIQ, Inc.