Privacy Policy

Last updated: 24 June 2026

1. Introduction

This is the privacy policy for AwareDB. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use and protect your personal data when you use the AwareDB website, API and related services (the "Platform"), and your rights under data protection law.

AwareDB is a computational model graph: a hosted service where you model a system as nodes, relations and formulas, and the engine computes it. Unlike a pure authorisation layer, AwareDB stores and processes the models and data you create in order to provide the service.

2. Who we are

AwareDB is a product of Djina, operated by Leopard Labs Limited ("we", "us", "our"), a private limited company incorporated in England and Wales (company number 16413875), registered office London Fora, 1 Lyric Square, London W6 0NB. We are the data controller for personal data processed through the Platform.

Questions about this policy: support@awaredb.io.

3. The data we collect

• Identity and contact data — your name, email address and organization name.
• Account data — your login credentials (passwords are stored hashed, never in plain text) and your roles and permissions.
• Your content — the databases, nodes, relations, formulas, computed values and the changes you make. This is the data you choose to model; we store and process it to run the service for you.
• Usage data — how you use the Platform, including the API requests you make.
• Technical data — IP address, browser and device, timestamps and similar information used to operate and secure the service.
• Billing data — if you subscribe to a paid plan, billing details are handled by our payment processor; we do not store full card numbers.

We do not intentionally collect special categories of data (such as health, ethnicity or biometric data). Please don't put such data into your models unless you have a lawful basis to do so.

4. How we use it, and our lawful bases

• Provide the service — create and administer your account, store and compute your models, and authenticate you. Lawful basis: performance of our contract with you.
• Secure and improve the Platform — diagnose issues, prevent abuse, and improve the product. Lawful basis: our legitimate interests in a safe, reliable service.
• Support and service messages — respond to your requests and notify you of changes. Lawful basis: contract and legitimate interests.
• Legal and regulatory — meet our legal obligations and respond to lawful requests. Lawful basis: compliance with a legal obligation.

We do not sell your personal data or your models. We do not currently send marketing emails.

5. Self-hosted deployments

If you run AwareDB in your own environment, your models and data stay in that environment and are not sent to us. This policy covers the service we host.

6. Sharing

We share data only with: service providers that host and operate the Platform on our behalf (under confidentiality obligations); our payment processor for paid plans; professional advisers; and authorities where required by law. We may also transfer data as part of a business reorganisation or sale. Within the service, each database is access-controlled to its organization and members.

7. International transfers

We store and process personal data within the UK and the European Economic Area. If we ever need to transfer it outside the UK/EEA, we will use an approved safeguard such as adequacy regulations, the UK International Data Transfer Agreement or Standard Contractual Clauses.

8. Data retention

We keep your account and content while your account is active. After closure we keep account records for up to 6 years (the UK limitation period for contractual claims), and technical and usage data for up to 24 months, unless the law requires longer. AwareDB's history keeps a reversible log of changes inside your databases, under your control. When data is no longer needed, we securely delete or anonymise it.

9. Security

We use appropriate measures to protect your data: encryption in transit, restricted access on a need-to-know basis, and per-organization and per-member isolation of databases. If a breach is likely to risk your rights and freedoms, we will notify you without undue delay and, where required, the UK Information Commissioner's Office (ICO) within 72 hours.

10. Cookies

Our website uses strictly necessary cookies to operate (for example, to keep you signed in) and, with your consent, analytics cookies to understand usage. You can manage non-essential cookies through the consent banner or your browser settings.

11. Your rights

Under data protection law you can request access to, correction of, or erasure of your personal data; object to or request restriction of processing; request portability; and withdraw consent where we rely on it. To exercise these rights, contact support@awaredb.io. You also have the right to complain to the ICO (ico.org.uk), though we'd appreciate the chance to help first.

12. Children

AwareDB is a tool for organizations and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

13. Changes

We may update this policy. When we make material changes we will post the new version here and update the date above.

14. Contact

Djina / Leopard Labs Limited — support@awaredb.io.