Effective Date: January 1, 2025
This Privacy Policy describes how AffectAtlas collects, uses, processes, and protects your personal information when you use our emotion analytics platform and research services.
Information Collection Practices
We collect information necessary to provide our research-driven insights platform and maintain the highest standards of scientific integrity. This includes account information, research participation data, platform usage analytics, and technical telemetry from integrated systems.
Our collection methods include direct user input, automated platform interactions, API integrations with client systems, and voluntary participation in research studies conducted under ethical review protocols.
Research Data Governance
As a research-focused platform, we maintain strict protocols for handling sensitive emotional and behavioral data. All research activities are conducted under institutional review board oversight and follow established ethical guidelines for human subjects research.
Participant data is anonymized using industry-standard techniques, with personally identifiable information separated from research datasets through secure tokenization processes.
Platform Usage Analytics
We collect technical data about how you interact with our platform to improve service quality and research methodologies. This includes session duration, feature usage patterns, API call frequencies, and system performance metrics.
Analytics data is aggregated and used to enhance platform functionality, optimize research tools, and develop new features that better serve our research community.
Third-Party Integrations
Our platform integrates with various XR systems, game engines, and analytics tools to provide comprehensive emotion tracking capabilities. We carefully vet all integration partners and ensure they meet our data protection standards.
Data shared with integration partners is limited to what is necessary for service functionality and is governed by strict data processing agreements.
Data Retention Policies
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable law. Research data may be retained longer for longitudinal studies, with appropriate anonymization measures in place.
Account data is retained for the duration of your subscription plus a reasonable period for business continuity. Research participation data follows academic retention standards, typically 5-7 years post-study completion.
Security Infrastructure
We implement comprehensive security measures including end-to-end encryption, secure data centers, regular security audits, and employee training on data protection best practices.
Our security framework includes multi-factor authentication, role-based access controls, automated threat detection, and incident response procedures designed to protect against unauthorized access or data breaches.
International Data Transfers
When transferring data internationally, we ensure adequate protection through approved transfer mechanisms such as Standard Contractual Clauses, adequacy decisions, or other legally recognized frameworks.
We maintain data processing records and can provide information about specific transfer mechanisms upon request from authorized parties.
Individual Rights & Controls
You have the right to access, correct, delete, or port your personal data. You may also object to certain processing activities or request restrictions on how we use your information.
To exercise these rights, contact our Data Protection Officer through the designated channels. We will respond to requests within the timeframes required by applicable law.
Cookie & Tracking Technologies
We use cookies and similar technologies to enhance platform functionality, remember your preferences, and analyze usage patterns. Our Cookie Policy provides detailed information about the types of cookies we use and how to manage them.
You can control cookie settings through your browser or our cookie preference center, though some functionality may be limited if you disable certain cookies.
Marketing Communications
We may send you information about platform updates, research findings, and relevant industry insights. You can opt out of marketing communications at any time while continuing to receive essential service notifications.
Our communications are tailored to your interests and platform usage, helping you stay informed about developments relevant to your research needs.
Children's Privacy Protection
Our platform is designed for professional and academic use and is not intended for children under 16. We do not knowingly collect personal information from children without appropriate parental consent and institutional oversight.
Research involving minors is conducted only under strict ethical protocols with proper consent mechanisms and additional safeguards for vulnerable populations.
Regulatory Compliance
We comply with applicable data protection laws including GDPR, CCPA, and other regional privacy regulations. Our compliance program includes regular assessments, staff training, and policy updates to reflect evolving legal requirements.
We maintain documentation of our compliance efforts and can provide evidence of our data protection practices to regulatory authorities upon request.
Data Breach Response
In the unlikely event of a data breach, we have established procedures to contain the incident, assess the impact, and notify affected parties and relevant authorities within required timeframes.
Our incident response team includes technical, legal, and communications specialists who work together to minimize impact and prevent future occurrences.
Policy Updates & Notifications
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or platform functionality. Material changes will be communicated through platform notifications and email updates.
Continued use of our platform after policy updates constitutes acceptance of the revised terms, though we will seek explicit consent for significant changes affecting your rights.
Contact & Data Protection Officer
For privacy-related questions, concerns, or requests, please contact our Data Protection Officer through our secure contact form or designated privacy channels.
We are committed to addressing your privacy concerns promptly and transparently, working with you to resolve any issues related to your personal data.