1. Acceptance of Terms
xAQUA, Inc. (“xAQUA,” “we,” “us,” or “our”) is a California corporation headquartered at 11344 Coloma Road, Suite 348, Gold River, CA 95670. We develop and operate the xAQUA Aegis Predictive GRC Intelligence Platform and the xAQUA Unified Data Platform (UDP). Our contact for privacy matters is
[email protected] or (916) 990-6484.
2. Information We Collect
2.1 Information You Provide
- Contact information (name, email address, phone number, job title, organization)
- Account credentials and authentication information
- Communications you send us, including support requests and sales inquiries
- Contract and procurement documentation
2.2 Information Collected Automatically
- Usage data and platform interaction logs (page views, feature usage, session duration)
- Device and browser information (IP address, browser type, operating system)
- Cookies and similar tracking technologies (see Section 6)
2.3 Customer Security Data (Platform Deployments)
When xAQUA Aegis is deployed within a customer’s Azure tenant, all security telemetry, compliance data, and risk intelligence data remains within the customer’s environment.
xAQUA does not have access to, store, or process customer security data on xAQUA infrastructure. This is a fundamental architectural guarantee, not a policy choice. See our
Security & Trust page for technical details.
3. How We Use Your Information
- To provide, operate, and improve our products and services
- To communicate with you about your account, support requests, and product updates
- To process sales inquiries and procurement requests
- To comply with legal obligations, including California state contractor requirements
- To protect the security and integrity of our platform
- To send marketing communications where you have consented or where permitted by law
4. California Privacy Rights (CCPA / CPRA)
California residents have the following rights under CCPA and CPRA:
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: xAQUA does not sell or share personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information: xAQUA does not use sensitive personal information beyond what is necessary to provide our services.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your rights, contact us at [email protected] or (916) 990-6484. We will respond within 45 days as required by CCPA.
5. SIMM 5310-C Compliance
xAQUA operates as a state agency contractor subject to the California Department of Technology’s SIMM 5310-C Privacy Threshold Assessment requirements. We maintain a current Privacy Impact Assessment (PIA) for systems that collect or process personal information on behalf of California state agencies. Documentation is available to authorized procurement officials upon request at [email protected].
6. Cookies and Tracking Technologies
We use the following types of cookies on our website:
- Essential Cookies: Required for website functionality (session management, authentication). Cannot be disabled.
- Analytics Cookies: Used to understand how visitors interact with our website. You may opt out by contacting us or using your browser settings.
- Preference Cookies: Store your preferences such as theme selection. These persist locally in your browser using
localStorage.
We do not use advertising or third-party behavioral tracking cookies. We do not participate in cross-site tracking programs.
7. Data Sharing and Disclosure
We do not sell personal information. We may share information with:
- Service Providers: Vendors who assist in operating our business (cloud hosting, email services) under data processing agreements
- Legal Requirements: When required by law, court order, or to protect the rights, property, or safety of xAQUA, our customers, or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate protections
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact information is retained for the duration of a business relationship plus 3 years. You may request deletion at any time.
9. Security
We implement administrative, technical, and physical security measures appropriate to the sensitivity of the information we hold. For our platform deployments, see our Security & Trust documentation. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.
11. Changes to This Policy
We may update this policy periodically. We will notify you of material changes by posting the new policy with a revised effective date. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy inquiries, CCPA requests, or SIMM 5310-C documentation:
- Email: [email protected]
- Phone: (916) 990-6484
- Mail: xAQUA, Inc., 11344 Coloma Road, Suite 348, Gold River, CA 95670
