Privacy Notice

AuthBinder ("AuthBinder", "we", "us", or "our") respects your privacy and is committed to protecting your information.

This Privacy Notice explains how we collect, use, store, and disclose information when you interact with:

• our website at authbinder.com
• our platform, APIs, and audit services
• the AuthBinder SDK and Power Platform connector
• events, content, or communications we provide

By using our services, you agree to the terms of this Privacy Notice.

We collect the following categories of information:

We use your information to:

• Provision and operate your audit workspace
• Score and analyse AI agent behaviour for risk and compliance reporting
• Generate audit reports and findings for your review
• Respond to support inquiries
• Deliver product updates and relevant communications
• Improve our platform, models, and user experience
• Maintain security and prevent misuse or fraud
• Meet legal and regulatory obligations

You can opt out of marketing communications at any time via unsubscribe links.

Where applicable under data protection law (including GDPR), we process your data on the following bases:

• Contract performance — to provide the services you have purchased
• Legitimate interests — to operate and improve our platform, detect fraud, and ensure security
• Legal obligation — where required by applicable law
• Consent — for marketing communications, which you may withdraw at any time

AuthBinder operates on a defined audit window model:

• Baseline package: 48-hour observation window
• Business package: 14-day observation window

Agent telemetry data collected during your audit window is retained for the duration of your engagement and for a reasonable period thereafter to support report delivery, dispute resolution, and legal compliance.

After the retention period expires, telemetry data is deleted or anonymised. Account and contact information is retained for as long as your account remains active or as required by law.

You may request early deletion of your data by contacting us at support@authbinder.com.

We may share information with:

• Service providers supporting our operations (e.g. cloud hosting on Microsoft Azure, analytics, communications tools)
• Legal or regulatory authorities where required by applicable law
• Successor entities in connection with mergers, acquisitions, or restructuring

When you sign up, we generate a separate, read-only credential for our analysts. This credential is distributed automatically at signup and can view your telemetry and reports to produce your audit report, but cannot create, modify, or delete anything in your account.

We do not sell personal information. We do not share AI agent telemetry data with third parties for advertising or marketing purposes.

If you use the AuthBinder connector for Microsoft Power Platform or Copilot Studio, the following applies:

• Your API key is stored securely within Microsoft Power Platform's credential vault and is not accessible to AuthBinder except when used to authenticate API calls
• Event data submitted through the connector is processed by AuthBinder's API on Microsoft Azure infrastructure
• Microsoft's own privacy terms apply to your use of Power Platform and Copilot Studio
• AuthBinder receives only the telemetry data you configure the connector to send — we do not have access to your broader Power Platform environment

We use cookies and similar technologies to:

• understand how our website is used
• improve functionality and performance
• provide relevant content

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

We implement reasonable technical and organisational measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Access controls limiting who can view telemetry data
• Regular security reviews of our infrastructure

However, no system is completely secure. We cannot guarantee absolute security and are not responsible for unauthorised access that results from factors outside our reasonable control.

Depending on your location, you may have rights to:

• access the personal data we hold about you
• correct inaccuracies in your data
• request deletion of your data
• object to or restrict certain processing
• data portability (where applicable)
• withdraw consent at any time where processing is based on consent

To exercise your rights, contact us at: support@authbinder.com

We will respond within the timeframe required by applicable law (typically 30 days).

Your information may be processed in countries outside your own, including where our infrastructure or service providers operate. Our primary infrastructure is hosted on Microsoft Azure in Australia East.

Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

This Privacy Notice is governed by the laws of New Zealand.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us at support@authbinder.com and we will delete it promptly.

We may update this Privacy Notice from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.

Continued use of our services after changes constitutes acceptance of the updated Notice.

If you have questions, requests, or complaints regarding this Privacy Notice, contact: