Registration privacy notice
OWNER APPROVAL REQUIRED BEFORE ACCEPTING REGISTRATIONS
This is the proposed Drive-delivery privacy notice. Confirm the final wording, senders and retention details before enabling the registration service.
1. Scope and accountability
Security-Aware is responsible for personal information collected through its website registration, trial-download and software activation-request service. This notice covers those services, customer support and related communications. It does not describe how an installed Security-Aware desktop application handles recordings from a customer's own cameras; that functionality requires its own applicable customer-facing information. Questions about this notice and our privacy practices may be sent to [email protected] or [email protected].
2. Information we collect
When you request a trial or activation, we ask for your name, email address, selected Standard or Enterprise edition, and confirmation that you agree to necessary registration processing. Your company name is optional. Consent to marketing messages is a separate, optional choice that is off by default. We record registration and consent timestamps, the applicable notice revision, email-verification and session state, and security information needed to detect misuse, such as short-lived, keyed or hashed network identifiers and request-attempt times. We do not require your camera password, camera footage, publisher signing key, or payment-card number to register through this service.
If you request a purchased licence activation, we also collect the desktop installation request identifier, requested licence or entitlement type, and any purchase reference you choose to supply. We may record the outcome, date and necessary supporting information for a manual entitlement or activation decision, as well as the status of related customer-support communications. Payment processing on an external checkout service is governed by that provider's own privacy practices.
3. Purposes and consent
We use this information to verify control of your email address; protect against automated or abusive requests; establish a time-limited, edition-specific trial download session; provide requested support; review entitlement and activation requests; keep required consent and transaction records; and meet applicable legal obligations. A website registration or payment does not automatically issue or activate a publisher-signed desktop licence. We request your express consent for necessary registration processing before you submit a registration. Optional product-news emails require separate consent, which you may withdraw without affecting access to necessary transactional communications. You may withdraw other consent by contacting us, subject to applicable legal and contractual requirements; withdrawal may prevent us from providing a requested service.
4. Service providers and disclosures
We use Cloudflare infrastructure, including Workers, Turnstile and D1 databases, for website registration, abuse-prevention and verification sessions. We provide Standard and Enterprise software installers through shared-link Google Drive files. Once a Google Drive download link is disclosed, recipients can share or reuse the link outside Security-Aware registration, and Google may process related download information under its own terms and privacy practices. We use Resend for transactional email delivery. Where you choose an external checkout, that checkout provider handles payment under its own terms and notices; a purchase reference may be shared with us or supplied by you for manual validation. These providers may process information outside British Columbia or Canada, where applicable foreign laws may apply. We share only information reasonably necessary to deliver the requested service, support it, or meet legal requirements. We do not disclose registration information for unrelated marketing without the necessary authorization.
5. Security and access
We use access restrictions, server-side email verification, anti-bot and rate-limit checks, and temporary authenticated sessions to control when software-download links are displayed on our website. Because Google Drive files are shared by link, possession of a disclosed link may allow download without an active Security-Aware website session. Registration links are intended to be single-use and expire after 30 minutes; authenticated trial sessions expire within two hours. No security system guarantees absolute protection. We limit operational access to customer information according to its purpose and maintain protective practices appropriate to its sensitivity.
6. Retention and disposal
Unverified registration records are scheduled for deletion after 24 hours. Verification links expire after 30 minutes, authenticated download sessions expire after no more than two hours, and security-attempt records are scheduled for deletion after approximately 24 hours, subject to legitimate security or legal holds. Expiry and deletion are separate operations, and the service must operate its cleanup process to remove expired records.
Verified customer registration records are normally retained for up to 540 days from successful email verification, while needed for registration administration, trial access, licensing, support or other identified lawful purposes. Information is securely deleted or anonymized earlier when those purposes have ended and there is no further lawful reason to retain it. The 540-day period is not an absolute deletion deadline for information that must be kept longer under an applicable legal or business obligation.
In particular, when we use personal information to make a decision that directly affects a person, we retain the information actually used for that decision for at least one year after the decision date, in accordance with British Columbia's Personal Information Protection Act where applicable. This may extend beyond the ordinary 540-day registration period when a decision is made later in the relationship. We preserve only the records reasonably necessary for the decision, legal obligations and any applicable dispute or preservation hold. After the required period and any other legitimate retention need ends, those records are securely deleted or anonymized. Open activation requests are retained as reasonably necessary for review and resolution, with the applicable decision retention measured from the decision when one is made. Payment, tax and bookkeeping records follow their separate applicable legal retention requirements and are not governed solely by the 540-day registration setting.
7. Access, correction, deletion and preferences
You may request access to your personal information, ask for inaccuracies to be corrected, request deletion when permitted, withdraw marketing consent, or raise a privacy concern by emailing [email protected] or [email protected]. We may ask you to verify your identity before acting. If information must remain because it was used for a qualifying decision, is subject to a legal hold, or is otherwise required by law, we will restrict its use as appropriate and explain the applicable limitation when responding. A request to remove a registration must not erase decision evidence before its required retention period has elapsed.
8. Updates and questions
This notice may be revised when our services, providers or legal obligations change. We will identify the current notice revision at the point of registration and record the version accepted. Questions and privacy requests may be directed to [email protected] or [email protected].Google Drive installer links may be copied and reused once disclosed; website email verification is not a file access restriction after redirect.