This Privacy Notice explains the categories of personal information AIM processes, how the platform uses that information, who may access it, and how activity is logged as part of normal platform operation.
Section 1
Information AIM Processes
AIM may process account details, identity details, contact details, authentication records, uploaded files, comments, workflow activity, approvals, signatures, communications, and other information submitted into a workspace.
AIM may also process technical information such as IP address, device or browser metadata, session data, audit logs, and integration-related identifiers needed to operate the service securely.
Section 2
How Information Is Used
Information is used to provide workspace access, operate workflow features, store submissions, support document and approval flows, maintain audit trails, administer permissions, secure the platform, and support users.
Information may also be used to investigate misuse, diagnose incidents, maintain service reliability, and comply with legal, regulatory, or contractual obligations.
Section 3
Workspace Visibility
Information submitted in AIM may be visible to authorised workspace participants according to their role, task assignment, or administrative permissions.
Workspace owners and administrators may access account and activity information needed to manage their workspace, review platform use, or respond to operational issues.
Section 4
Authentication, Sessions, And Logging
AIM maintains authentication records, session data, and event logs to protect accounts, support strong authentication, and maintain a reliable history of key platform actions.
This includes records relating to sign-in, invitations, request access, approvals, submissions, signatures, and related system events.
Section 5
Service Providers And Integrations
AIM may rely on infrastructure, storage, email, authentication, AI, and other service providers or integrations that process information on behalf of the platform or the relevant workspace.
Where Microsoft sign-in or other integrations are enabled, AIM may process the identity and token information needed to complete that integration securely.
Section 6
Retention
Information may be retained for as long as needed to operate the platform, preserve engagement records, maintain auditability, support dispute resolution, or satisfy legal, regulatory, security, or contractual requirements.
Retention periods may vary depending on workspace configuration, the type of record, and applicable obligations.
Section 7
Security
AIM uses administrative, technical, and operational safeguards designed to protect personal information and platform records.
No platform can guarantee absolute security, so users should also protect their credentials, devices, and access methods.
Section 8
Questions About This Notice
For questions about this Privacy Notice or personal information handled through AIM, contact the relevant workspace owner, your organisation, or the AIM privacy contact.
Platform privacy contact: privacy@aim.platform
Version 2026-05 · Updated 12 May 2026