Privacy Policy

Scope

This policy explains how AugmentWorks collects, uses, discloses, and retains personal information through augmentworks.ai, the client portal, and contracted engagements. A signed client agreement may include additional data-handling terms for a specific engagement.

Information we collect

• Contact details: name, company, work email, workflow description, reliability concern, and optional fields you submit.
• Technical data: page paths, named website events, browser and device information, request metadata, and a daily rotating one-way hash of a contact form submitter's IP address. The raw IP address is not stored in the lead record.
• Portal accounts: email, authentication metadata, organization membership, and essential session information.
• Engagement materials: files, policies, traces, test results, system descriptions, and other materials provided for contracted work.

We receive this information directly from you, from an organization that authorizes your portal access, and automatically from your browser and our infrastructure providers.

How we use information

We use information to respond to inquiries, scope and deliver assessments, operate and secure the client portal, prevent abuse, understand public-site performance, maintain business records, and meet contractual and legal obligations.

Analytics, cookies, and cross-site tracking

Public-site analytics use PostHog to record named page, call-to-action, form-state, and sample-download events, plus session replays on marketing pages. Autocapture is disabled, form inputs are masked in replays, analytics persistence is held in browser memory, and portal content is excluded. The public marketing site does not intentionally set analytics or advertising cookies.

The client portal uses essential authentication and session cookies. Disabling them may prevent sign-in. Hosting and security providers may also process technical request data needed to deliver and protect the site.

We do not use advertising pixels or collect activity across unaffiliated websites for targeted advertising. We do not sell personal information or share it for cross-context behavioral advertising.

Do Not Track and browser signals

Some browsers transmit a Do Not Track signal. Because there is no uniform standard for responding to that signal, the site does not currently respond to it. The practices described above apply regardless of the signal. Because we do not sell personal information or share it for cross-context behavioral advertising, Global Privacy Control signals do not change those practices.

Contact-form handling

Full form submissions are stored in Supabase. Resend receives only a minimal notification containing the lead ID, company, and work email; workflow descriptions and reliability concerns are not copied into notification emails. Do not submit credentials, regulated personal data, or confidential client materials through the public form.

How we disclose information

We disclose information to service providers that host, secure, and support the site and contracted work; when directed by a client for an engagement; when reasonably necessary to comply with law or protect rights and safety; and in connection with a business transaction. Providers may use information only for the services they perform for us, subject to their terms and applicable agreements.

See the current service provider and subprocessor list for more detail.

Retention

We keep information only as long as reasonably needed for the purposes described here. Retention depends on the status of a sales discussion or engagement, contractual commitments, security and dispute needs, backup cycles, and legal or accounting obligations. Contact-form abuse-prevention hashes rotate daily. Portal and assessment materials are retained according to the applicable engagement terms.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. To make a request, email hello@augmentworks.ai with the subject "Privacy request" and describe the request. We may ask for information reasonably needed to verify your identity and authority. Do not send passwords, government identifiers, or other sensitive credentials.

We may limit a request where permitted by law, including to protect another person's rights or comply with contractual and recordkeeping obligations. You may also unsubscribe from non-transactional email using the instructions in that message.

Security

We use administrative, technical, and organizational safeguards appropriate to the information we handle. No method is completely secure. See our Security page for current practices and reporting instructions.

Children

Our services are for organizations and are not directed to children under 16. We do not knowingly collect their personal information.

Policy changes

We may update this policy as our practices or legal obligations change. We will post the revised policy and update the effective date above. For material changes, we will provide additional notice when appropriate, such as by email or through the client portal.

Contact

Privacy questions may be sent to hello@augmentworks.ai.