Legal
Data Sharing Policy
We never sell your data. Here is exactly who we share it with, and why.
The short version
We don’t sell your data
We have never sold personal data and we never will. Your data is not a product, and we don’t share it for anyone else’s advertising.
Who we work with
We use a small, vetted set of service providers to run the service — for example, the tool that records waitlist and contact submissions. They act on our instructions under contract and may only use your data to provide their service to us.
What we never do
- We never sell or rent your personal data.
- We never share it for third-party advertising or profiling.
- We never use your agreements or documents to train AI models.
When we must disclose
We disclose data to authorities only where the law genuinely requires it, or to protect someone from serious harm — and we aim to tell you when we’re allowed to.
Full data sharing policy
This policy explains every category of recipient that may receive your personal data, and the limits on what they can do with it. It is a companion to our Privacy Policy.
1. Our principles
- We do not sell or rent personal data, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under CCPA/CPRA).
- We do not allow third parties to use your data for their own advertising or profiling.
- We do not use your agreements, documents, or biometric data to train AI models.
- Every provider that processes data on our behalf is bound by contract to use it only to serve us, and to protect it.
2. Service providers (processors) we use
These providers process personal data on our behalf, under a data processing agreement, solely to deliver the service.
For the website (today)
- Google — the waitlist and contact forms submit to a Google Apps Script web app that records entries in a Google Sheet. Google processes this data as our provider.
- Web hosting — the site is served from infrastructure we operate ourselves; standard security and server logs are generated there.
- Email — when you contact us, we use our email provider to receive and reply to your message.
For the app (when it launches)
- Identity and biometric verification — performed by the app itself, not a third-party verification vendor: your government ID is checked on your own device, and the verification selfie is processed by our own systems.
- Google Cloud (with Firebase for notifications) — cloud hosting and storage, to run the service and store encrypted records.
- Twilio — phone/SMS verification, to verify your phone number.
3. Sharing between the parties to an agreement
The AffirmPax app exists so that two adults can record a mutual agreement. When you create one, the other party to that agreement sees what the agreement records, and each party receives the same record. We do not reveal more about you than the agreement itself contains, and we never publish your records or make them searchable.
4. Legal and safety disclosures
We may disclose personal data when we reasonably believe it is required to comply with a valid legal process, to enforce our Terms, or to protect the rights, safety, or property of our users or the public — for example, to prevent serious harm. Where we are legally permitted to, we will notify the affected person.
5. International transfers
Some of our providers operate outside your country, including in the United States. Where required, those transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. See section 5 of our Privacy Policy for more.
6. Changes to our providers
We keep this list current. Where our contracts or applicable law require it, we will give notice before adding or changing a sub-processor that handles your personal data, so you can object if you need to.
7. Your controls
You can ask us who holds your data, request a copy or deletion, and withdraw any consent you have given. Email privacy@affirmpax.com or use our contact form, and we will respond within the timeframes the law requires.
Contact
Questions about how we share data? Email us or use our contact form.