Privacy Policy
Last updated: November 11, 2025
This
Privacy Notice for Aeiwa Inc
- Visit
our website
at https://costbeacon.com or any website of ours that links to this Privacy Notice
- Download and use
our mobile application ( CostBeacon) , or any other application of ours that links to this Privacy Notice
- Use
CostBeacon .CostBeacon is a software-as-a-service platform that ingests supplier invoice data uploaded by authorized customer personnel to support internal financial governance. The service operates in a multi-tenant cloud environment managed by the CostBeacon operations team.
- Engage with us in other related ways, including any sales,
marketing, or events
Questions or
concerns? Reading this Privacy Notice will help you understand your privacy
rights and choices. We are responsible for making decisions about how your personal
information is processed. If you do not agree with our policies and practices, please do
not use our Services.contact@costbeacon.com
.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy
Notice, but you can find out more details about any of these topics by clicking the link
following each key point or by using our table of
contents below to find the section you are looking
for.
What personal information do we process? When
you visit, use, or navigate our Services, we may process personal information depending on
how you interact with us and the Services, the choices you make, and the products and
features you use. Learn more about personal information you disclose to
us.
Do we process any sensitive personal
information? Some of the information may be considered
Do we collect any information from third
parties?
How do we process your information? We
process your information to provide, improve, and administer our Services, communicate with
you, for security and fraud prevention, and to comply with law. We may also process your
information for other purposes with your consent. We process your information only when we
have a valid legal reason to do so. Learn more about how we
process your information.
In what situations and with which
third parties. Learn more about when and with whom we share your personal
information.
How do we keep your information safe? We have
adequate
What are your rights? Depending on where you
are located geographically, the applicable privacy law may mean you have certain rights
regarding your personal information. Learn more about your
privacy rights.
How do you exercise your rights? The easiest
way to exercise your rights is by https://app.costbeacon.com/profile
Want to learn more about what we do with any information we
collect? Review
the Privacy Notice in full.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.We
collect personal information that you voluntarily provide to us when you
Personal Information Provided by You. The
personal information that we collect depends on the context of your interactions with us
and the Services, the choices you make, and the products and features you use. The
personal information we collect may include the following:
-
names
-
phone numbers
-
email addresses
-
mailing addresses
-
job titles
-
usernames
-
passwords
-
billing addresses
-
debit/credit card numbers
-
contact or authentication data
-
contact preferences
Sensitive Information.
Social Media Login Data. We may provide you
with the option to register with us using your existing social media account details, like
your Facebook, X, or other social media account. If you choose to register in this way, we
will collect certain profile information about you from the social media provider, as
described in the section called
Application Data. If you use our application(s),
we also may collect the following information if you choose to provide us with access or
permission:
- Mobile Device
Access. We may request access or permission to certain features from your mobile
device, including your mobile device's
storage ,camera ,and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data.
We automatically collect device information (such as your mobile device ID, model, and
manufacturer), operating system, version information and system configuration
information, device and application identification numbers, browser type and version,
hardware model Internet service provider and/or mobile carrier, and Internet Protocol
(IP) address (or proxy server). If you are using our application(s), we may also collect
information about the phone network associated with your mobile device, your mobile
device’s operating system or platform, the type of mobile device you use, your mobile
device’s unique device ID, and information about the features of our application(s) you
accessed.
- Push Notifications.
We may request to send you push notifications regarding your account or certain features
of the application(s). If you wish to opt out from receiving these types of
communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the
security and operation of our application(s), for troubleshooting, and for our internal
analytics and reporting purposes.
All
personal information that you provide to us must be true, complete, and accurate, and
you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information; such as your Internet Protocol (IP) address and/or browser and device characteristics; is collected automatically when you visit our Services.We
automatically collect certain information when you visit, use, or navigate the Services.
This information does not reveal your specific identity (like your name or contact
information) but may include device and usage information, such as your IP address,
browser and device characteristics, operating system, language preferences, referring
URLs, device name, country, location, information about how and when you use our
Services, and other technical information. This information is primarily needed to
maintain the security and operation of our Services, and for our internal analytics and
reporting purposes.
Like
many businesses, we also collect information through cookies and similar technologies.
The
information we collect includes:
- Log and Usage Data. Log and usage data is
service-related, diagnostic, usage, and performance information our servers
automatically collect when you access or use our Services and which we record in log
files. Depending on how you interact with us, this log data may include your IP
address, device information, browser type, and settings and information about your
activity in the Services (such as the date/time
stamps associated with your usage, pages and files viewed, searches, and other actions
you take such as which features you use), device event information (such as system
activity, error reports (sometimes called
'crash dumps' ), and hardware settings).
- Device Data. We collect device data such as
information about your computer, phone, tablet, or other device you use to access the
Services. Depending on the device used, this device data may include information such
as your IP address (or proxy server), device and application identification numbers,
location, browser type, hardware model, Internet service provider and/or mobile
carrier, operating system, and system configuration information.
- Location Data. We collect location data such as
information about your device's location, which can be either precise or imprecise.
How much information we collect depends on the type and settings of the device you use
to access the Services. For example, we may use GPS and other technologies to collect
geolocation data that tells us your current location (based on your IP address). You
can opt out of allowing us to collect this information either by refusing access to
the information or by disabling your Location setting on your device. However, if you
choose to opt out, you may not be able to use certain aspects of the Services.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.We process your personal information for a variety
of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and
authentication and otherwise manage user accounts. We may process your
information so you can create and log in to your account, as well as keep your account
in working order.
- To deliver and facilitate delivery of services
to the user. We may process your information to provide you with the
requested service.
- To respond to user inquiries/offer support
to users. We may process your information to respond to your inquiries
and solve any potential issues you might have with the requested service.
- To send administrative information to
you. We may process your information to send you details about our
products and services, changes to our terms and policies, and other similar
information.
- To
fulfil and manage your orders. We may process your information to fulfil and manage your orders, payments, returns, and exchanges made through the Services.
- To
enable user-to-user communications. We may process your
information if you choose to use any of our offerings that allow for
communication with another user.
- To save or protect
an individual's vital interest. We may
process your information when necessary to save or
protect an individual’s vital interest, such as to
prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.If you are
located in the EU or UK, this section applies to
you.
The General Data
Protection Regulation (GDPR) and UK GDPR require us to
explain the valid legal bases we rely on in order to
process your personal information. As such, we may
rely on the following legal bases to process your
personal information:
- Consent. We
may process your information if you have given us
permission (i.e.
consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a
Contract. We may process your personal
information when we believe it is necessary to
fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legal
Obligations. We may process your
information where we believe it is necessary for
compliance with our legal obligations, such as to
cooperate with a law enforcement body or regulatory
agency, exercise or defend our legal rights, or
disclose your information as evidence in litigation
in which we are involved.
- Vital
Interests. We may process your
information where we believe it is necessary to
protect your vital interests or the vital interests
of a third party, such as situations involving
potential threats to the safety of any
person.
If you are
located in Canada, this section applies to
you.
We may process your
information if you have given us specific permission
(i.e.
In some exceptional cases, we
may be legally permitted under applicable law to
process your information without your consent,
including, for example:
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and
fraud detection and prevention
- For business transactions
provided certain conditions are met
- If it is contained in a
witness statement and the collection is necessary to
assess, process, or settle an insurance
claim
- For identifying injured,
ill, or deceased persons and communicating with next
of kin
- If we have reasonable
grounds to believe an individual has been, is, or
may be victim of financial abuse
- If it is reasonable to
expect collection and use with consent would
compromise the availability or the accuracy of the
information and the collection is reasonable for
purposes related to investigating a breach of an
agreement or a contravention of the laws of Canada
or a province
- If disclosure is required
to comply with a subpoena, warrant, court order, or
rules of the court relating to the production of
records
- If it was produced by
an individual in the course of their employment,
business, or profession and the collection is
consistent with the purposes for which the
information was produced
- If the collection is
solely for journalistic, artistic, or literary
purposes
- If the information is
publicly available and is specified by the
regulations
- We may disclose de-identified
information for approved research or statistics
projects, subject to ethics oversight and
confidentiality commitments
We
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use
Google Maps Platform APIs. We may share
your information with certain Google Maps Platform
APIs (e.g.
Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
- Affiliates. We
may share your information with our affiliates, in
which case we will require those affiliates to
honour this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
- Other
Users. When you share personal
information
(for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.
We may use cookies
and similar tracking technologies (like web
beacons and pixels) to gather information when
you interact with our Services. Some online
tracking technologies help us maintain the
security of our Services
, prevent crashes, fix bugs, save your
preferences, and assist with basic site
functions.
We also permit
third parties and service providers to use
online tracking technologies on our Services for
analytics and advertising, including to help
manage and display advertisements, to tailor
advertisements to your interests, or to send
abandoned shopping cart reminders (depending on
your communication preferences). The third
parties and service providers use their
technology to provide advertising about products
and services tailored to your interests which
may appear either on our Services or on other
websites.
To the extent these
online tracking technologies are deemed to be a
Specific
information about how we use such technologies
and how you can refuse certain cookies is set
out in our Cookie Notice
Google Analytics
Demographics and Interests Reporting
Google Analytics
We may share your information with Google Analytics to track and6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.As part of our
Services, we offer products, features, or tools
powered by artificial intelligence, machine
learning, or similar technologies (collectively,
Use of AI
Technologies
We provide the AI
Products through third-party service providers (
Google Cloud AI
Our AI
Products
Our AI Products are
designed for the following functions:
-
Text analysis
How We Process
Your Data Using AI
All personal
information processed using our AI Products is
handled in line with our Privacy Notice and our
agreement with third parties. This ensures high
security and safeguards your personal information
throughout the process, giving you peace of mind
about your data's safety.
Our Services offer
you the ability to register and log in using
your third-party social media account details
(like your Facebook or X logins). Where you
choose to do this, we will receive certain
profile information about you from your social
media provider. The profile information we
receive may vary depending on the social media
provider concerned, but will often include your
name, email address, friends list, and profile
picture, as well as other information you choose
to make public on such a social media
platform.
We will use the
information we receive only for the purposes
that are described in this Privacy Notice or
that are otherwise made clear to you on the
relevant Services. Please note that we do not
control, and are not responsible for, other uses
of your personal information by your third-party
social media provider. We recommend that you
review their privacy notice to understand how
they collect, use, and share your personal
information, and how you can set your privacy
preferences on their sites and apps.
8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries other than your own.Our servers are
located in
the
United
States
the
United States,
If you are a
resident in the European Economic Area (EEA),
United Kingdom (UK), or Switzerland, then these
countries may not necessarily have data
protection laws or other similar laws as
comprehensive as those in your country. However,
we will take all necessary measures to protect
your personal information in accordance with
this Privacy Notice and applicable law.
Binding Corporate
Rules:
9. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary toWe will only keep
your personal information for as long as it is
necessary for the purposes set out in this
Privacy Notice, unless a longer retention period
is required or permitted by law (such as tax,
accounting, or other legal requirements).
When we have no
ongoing legitimate business need to process your
personal information, we will either delete or
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system ofWe have
implemented appropriate and reasonable technical
and
11. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to12. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:In some regions
(like
We will consider
and act upon any request in accordance with
applicable data protection laws.
If you are located
in the EEA or UK and you believe we are
unlawfully processing your personal information,
you also have the right to complain to your
Member
State data protection
authority
or UK data
protection
authority.
If you are located
in Switzerland, you may contact the Federal Data
Protection and Information
Commissioner.
Withdrawing
your consent: If we are relying
on your consent to process your personal
information,
However, please note
that this will not affect the lawfulness of the
processing before its withdrawal nor,
Opting
out of marketing and promotional
communications: You
can unsubscribe from our marketing and promotional
communications at any time by
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:-
Log in to your account settings and update your user account.
Upon your request to
terminate your account, we will deactivate or
delete your account and information from our
active databases. However, we may retain some
information in our files to prevent fraud,
troubleshoot problems, assist with any
investigations, enforce our legal terms and/or
comply with applicable legal
requirements.
If you have questions or
comments about your privacy rights, you may email
us at contact@costbeacon.com
.
13. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (California law
requires us to let you know how we respond to web
browser DNT signals. Because there currently is
not an industry or legal standard for
14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident ofCategories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the sectionA.
Identifiers
Contact
details, such as real name, alias,
postal address, telephone or mobile
contact number, unique personal
identifier, online identifier, Internet
Protocol address, email address, and
account name
B.
Personal information as defined in the
California Customer Records
statute
Name,
contact information, education,
employment, employment history, and
financial
information
Gender,
age, date of birth, race and ethnicity,
national origin, marital status, and
other demographic
data
Transaction
information, purchase history, financial
details, and payment
information
Fingerprints
and voiceprints
Browsing
history, search history, online
Device
location
Images and
audio, video or call recordings created
in connection with our business
activities
Business
contact details in order to provide you
our Services at a business level or job
title, work history, and professional
qualifications if you apply for a job
with us
Student
records and directory
information
Inferences
drawn from any of the collected personal
information listed above to create a
profile or summary about, for example,
an individual’s preferences and
characteristics
We may also collect
other personal information outside of these
categories through instances where you interact
with us in person, online, or by phone or mail in
the context of:
- Receiving help through
our customer support channels;
- Participation in customer
surveys or contests; and
- Facilitation in the
delivery of our Services and to respond to your
inquiries.
- Category A -
As long as the user has an account with us
- Category B -
As long as the user has an account with us
- Category
D - As long as the user has an account with us
- Category
E - As long as the user has an account with us
- Category
G - As long as the user has an account with us
- Category
K - As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect inHow We Use and Share Personal Information
Will
your information be shared with
anyone
else?
We may
disclose your personal information
with our service providers pursuant
to a written contract between us and
each service provider. Learn more
about how we disclose personal
information to in the section,
We may
use your personal information for
our own business purposes, such as
for undertaking internal research
for technological development and
demonstration. This is not
considered to be
of your personal
information.
We
have not disclosed, sold, or shared
any personal information to third
parties for a business or commercial
purpose in the preceding twelve (12)
months. We will
not sell or share personal
information in the future belonging
to website visitors, users, and
other consumers.
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:- Right
to know whether or not we
are processing your personal data
- Right
to access your personal
data
- Right
to correct inaccuracies in
your personal data
- Right
to request the deletion of
your personal data
- Right
to obtain a copy of the
personal data you previously shared
with us
- Right
to non-discrimination for
exercising your rights
- Right
to opt out of the
processing of your personal data if it
is used for targeted advertising
(or sharing as defined under California’s privacy law) 'profiling'
Depending
upon the state where you live, you may
also have the following rights:
- Right to
access the categories of personal data
being processed (as permitted by
applicable law, including the privacy
law in Minnesota)
- Right to
obtain a list of the categories of
third parties to which we have
disclosed personal data (as permitted
by applicable law, including the
privacy law in
California, Delaware, and Maryland )
- Right to
obtain a list of specific third
parties to which we have disclosed
personal data (as permitted by
applicable law, including the privacy
law in
)
-
Right to obtain a list of third parties
to which we have sold personal data (as
permitted by applicable law, including
the privacy law in Connecticut)
- Right to
review, understand, question, and
depending on where you live, correct
how personal data has been profiled
(as permitted by applicable law,
including the privacy law in
Connecticut and Minnesota )
- Right to
limit use and disclosure of sensitive
personal data (as permitted by
applicable law, including the privacy
law in California)
- Right to opt
out of the collection of sensitive
data and personal data collected
through the operation of a voice or
facial recognition feature (as
permitted by applicable law, including
the privacy law in Florida)
How to Exercise Your Rights
To exercise these rights, you can contact usUnder
certain US state data protection laws,
you can designate an
agent to make a request on your
behalf. We may deny a request from an
agent that does not submit
proof that they have been validly
to act on your behalf in
accordance with applicable
laws.
Request Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us atCalifornia
California
Civil Code Section 1798.83, also known
as the 15. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.We may
update this Privacy Notice from time
to time. The updated version will be
indicated by an updated
date at the top of this
Privacy Notice. If we make material
changes to this Privacy Notice, we
may notify you either by prominently
posting a notice of such changes or
by directly sending you a
notification. We encourage you to
review this Privacy Notice
frequently to be informed of how we
are protecting your
information.
7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.