Northwatch Technology Privacy Policy

Our core commitments

• We do not sell or rent customer information or diagnostic data.
• We do not use customer information or diagnostic data for purposes unrelated to the intended Northwatch service.
• Diagnostic data is anonymized before it is submitted for AI-assisted analysis.
• AI does not independently authorize changes to customer systems. When approval is required, an appropriately authorized person must provide it.

Information we collect

The information we handle depends on the services a customer uses and the diagnostic work that customer authorizes. It may include:

• account and identity information, including business contact details, organization, role, authentication state and account relationships;
• service and billing information, including subscriptions, invoices, transactions and support history;
• device and system information, including machine identifiers, operating-system and software details, configuration, health measurements, event evidence and diagnostic results;
• Portable information, including licensed-device identity, authorized sessions, connection and heartbeat state, and requested work;
• reports and approvals, including findings, supporting evidence, recommendations, Fix-IT scripts, rollback instructions, decisions and execution outcomes;
• communications submitted through support, account or service channels; and
• security and operational records, including sign-in events, request timestamps, network and browser metadata, errors and service logs.

Northwatch diagnostics are intended to collect evidence relevant to authorized technical work. They are not intended to collect passwords, private keys or unrelated personal content. Northwatch applies collection boundaries, redaction and anonymization controls appropriate to the workflow.

How we use information

We use information only as needed to provide and administer requested services; authenticate users; enforce customer, workspace, role and approval boundaries; connect authorized devices; produce reports and controlled Fix-IT materials; process billing; communicate about service activity; protect the service; troubleshoot faults; and meet contractual or legal obligations.

Northwatch does not use customer data for advertising, data brokerage, unrelated profiling or other purposes outside the intended service relationship.

AI-assisted analysis

Some workflows use AI to organize technical evidence, identify patterns, explain findings and draft recommendations. Before diagnostic data is sent to an AI analysis service, Northwatch anonymizes it. The analysis component receives the authorized diagnostic tier, anonymized evidence and the bounded technical context required for the requested analysis.

The browser does not send diagnostic evidence directly to an AI provider. Northwatch-controlled server workflows validate authorization and scope, apply anonymization and dispatch the bounded request. AI output is analysis—not independent authority to change a customer system.

Northwatch does not permit AI providers to use customer diagnostic data for Northwatch-unrelated purposes. Providers processing data for Northwatch are expected to process it only to deliver the contracted service under applicable confidentiality and security obligations.

When information is disclosed

Northwatch may disclose information only as necessary to service providers acting on our behalf; to authorized users within applicable customer and workspace boundaries; when a customer directs the disclosure; to protect people, rights, property or systems; or when required by applicable law or valid legal process. Service providers may include hosting, infrastructure, email, payment, support, security and AI-analysis providers.

Northwatch does not sell or rent personal information or diagnostic data.

Cookies and browser storage

The site may use cookies or local browser storage necessary for authentication, session continuity, security, preferences and customer-portal operation. Northwatch does not use this information for third-party behavioral advertising.

Retention

Northwatch retains information only as long as reasonably necessary to provide and support requested services, maintain security and continuity, satisfy contractual or legal obligations, resolve disputes and maintain required business records. Retention varies by record type, customer agreement, service configuration and any applicable evidence hold.

When information is no longer required, Northwatch takes reasonable steps to delete it, anonymize it or place it beyond ordinary use, subject to backup cycles and legal or contractual requirements.

Security

Northwatch uses administrative, technical and organizational safeguards designed for the nature of the information and services provided. These include authenticated access, customer and workspace boundaries, least-privilege controls, controlled approvals, transport protection, operational logging, data minimization and anonymization controls.

No system can guarantee absolute security. Customers should protect credentials, use available multi-factor authentication, limit access to authorized personnel and promptly report suspected misuse.

Customer and user choices

Authorized users may review and update available account information through the portal. A customer may contact Northwatch to ask about access, correction, deletion, export or restriction of information associated with its account. Northwatch responds according to the requester's verified authority and applicable contractual, security, recordkeeping and legal requirements.

Customers control whether to request diagnostic work and whether to approve a Fix-IT action where approval is required. Declining an optional action does not authorize Northwatch to perform it by another route.

Children

Northwatch services are designed for businesses and authorized business users. They are not directed to children under 13, and Northwatch does not knowingly solicit personal information from children.

Changes to this policy

Northwatch may update this policy when its services, practices or legal obligations change. The current version will be posted here with its effective date. If a change materially affects how existing customer information is used, Northwatch will provide notice appropriate to the circumstances.