Northwatch Technology Privacy Policy

Our core commitments

• We do not sell or rent personal information or diagnostic data.
• We use customer information only for the Northwatch services the customer requested or as described here.
• Diagnostic evidence is minimized and anonymized before AI-assisted diagnostic analysis.
• We do not permit AI providers to use diagnostic evidence or Cindy interactions to train generally available models unless the customer expressly authorizes it.
• AI output is guidance, not authority. It does not independently authorize purchases, diagnostics, Fix-IT actions or system changes.

Information we handle

Depending on the services and work authorized, we may handle account and business contact details; organization, role and authentication state; subscriptions, invoices and support history; device identity, operating-system, software, configuration, health, event and diagnostic evidence; Portable license, session, connection and heartbeat information; reports, recommendations, scripts, rollback instructions, approvals and outcomes; support, account, service and Cindy communications; and security and operational records such as request times, network and browser metadata, errors and service logs.

Diagnostics are intended to collect evidence relevant to authorized technical work. Do not submit passwords, private keys, payment-card numbers, medical information or unrelated personal content in diagnostic requests, support messages or Cindy conversations.

How we use information

We use information to provide and administer requested services; authenticate users; enforce customer, workspace, role and approval boundaries; connect authorized devices; produce reports and controlled Fix-IT materials; process billing; respond to communications; protect the service; prevent misuse; troubleshoot faults; maintain reliability; and meet contractual or legal obligations.

We do not use customer information for third-party behavioral advertising, data brokerage or unrelated profiling.

Cindy and other AI-assisted interactions

Cindy is Northwatch's AI-assisted guide. Depending on the feature and the user's authority, a request may include the user's message, selected account or workspace context, product and service information, and bounded report or diagnostic context the user is authorized to view. Northwatch-controlled services validate the request and send only the content reasonably necessary for the response. The browser does not receive an AI provider credential.

Cindy can be wrong or incomplete. Review her output before relying on it. Cindy does not independently approve a purchase, start diagnostic work, authorize a Fix-IT action or change a customer system.

Messages, relevant context, provider inputs and outputs, and related operational records may be processed and retained as needed to provide the interaction, protect and troubleshoot the service, support the customer, preserve an authorized audit record, and meet contractual or legal obligations. Retention varies by workflow and record type.

AI-assisted diagnostic analysis

Northwatch-controlled services validate authorization and scope, apply collection boundaries and anonymization, and submit only the bounded evidence and technical context required for requested analysis. The browser does not send diagnostic evidence directly to an AI provider. AI output is analysis, not independent authority to change a customer system.

Disclosures

Northwatch may disclose information only to service providers acting on our behalf; authorized users within applicable customer and workspace boundaries; when a customer directs it; to protect people, rights, property or systems; as part of a protected business transaction; or when required by law or valid legal process. Providers may include hosting, infrastructure, email, payment, support, security and AI providers and are expected to process information only to deliver the contracted service.

Cookies and browser storage

The site may use cookies or local browser storage needed for authentication, session continuity, security, preferences and customer-portal operation. We do not use it for third-party behavioral advertising.

Retention and security

Northwatch retains information only as long as reasonably necessary for requested services, security, continuity, contractual or legal obligations, disputes and required business records. Timing varies by record type, agreement, workflow and any evidence hold. When information is no longer required, we take reasonable steps to delete it, anonymize it or place it beyond ordinary use, subject to backup cycles and obligations.

We use administrative, technical and organizational safeguards designed for the information and services, including authenticated access, customer and workspace boundaries, least privilege, controlled approvals, transport protection, logging, minimization and anonymization. No system can guarantee absolute security.

Your choices

Authorized users may review and update available account information. A customer may ask about access, correction, deletion, export or restriction. We respond according to verified authority and applicable contractual, security, recordkeeping and legal requirements. Customers control optional diagnostic requests and required Fix-IT approvals.

Children

Northwatch services are designed for businesses and authorized business users. They are not directed to children under 13.

Changes to this policy

The current version will be posted here with its effective date. If a change materially expands how existing information is used or disclosed, Northwatch will provide notice and seek consent when appropriate. We will not rely on a quiet policy change to retroactively authorize a materially different use.