Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name, job title, phone number
• Profile Data: Professional information, preferences, and settings
• Communication Data: Messages, support requests, feedback, and inquiries
• Payment Information: Billing details (processed securely through third-party payment processors)
• Enterprise Data: Business data uploaded to our AI platform for processing

1.2 Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, time spent
• Technical Data: IP address, browser type, device information, operating system
• Performance Data: System performance metrics, error logs, API usage
• Analytics Data: User behavior patterns, feature adoption, platform optimization metrics

1.3 Information from Third Parties

• Integration Data: Information from connected enterprise systems (CRM, ERP, etc.)
• Authentication Data: Single Sign-On (SSO) provider information
• Partner Data: Information from authorized business partners and resellers

2. How We Use Your Information

2.1 Service Provision

• Providing and maintaining our AI platform services
• Processing and analyzing your enterprise data through our AI models
• Generating insights, reports, and recommendations
• Facilitating system integrations and data workflows

2.2 Platform Improvement

• Improving AI model accuracy and performance
• Developing new features and capabilities
• Troubleshooting and system optimization
• Security monitoring and threat detection

2.3 Customer Support

• Responding to inquiries and support requests
• Providing technical assistance and training
• Account management and billing support
• Onboarding and implementation assistance

2.4 Legal and Compliance

• Complying with applicable laws and regulations
• Protecting against fraud and security threats
• Enforcing our terms of service
• Responding to legal requests and court orders

3. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following limited circumstances:

3.1 Service Providers

• Cloud infrastructure providers (AWS, Azure, GCP)
• Payment processors and billing services
• Customer support and communication tools
• Analytics and monitoring services

3.2 Business Transfers

In connection with mergers, acquisitions, or asset sales, your information may be transferred as part of the business assets, subject to equivalent privacy protections.

3.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

3.4 With Your Consent

We may share information with third parties when you have given explicit consent for such sharing.

4. Data Security

4.1 Security Measures

• Encryption: End-to-end encryption for data in transit and at rest
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure: SOC 2 Type II compliant data centers and cloud providers
• Monitoring: 24/7 security monitoring and intrusion detection
• Compliance: GDPR, CCPA, HIPAA, and SOX compliance frameworks

4.2 Data Location

Your data is primarily stored in secure data centers located in the United States and European Union. We ensure adequate protection levels for international data transfers through appropriate safeguards.

4.3 Incident Response

We maintain comprehensive incident response procedures and will notify affected users of any security breaches within 72 hours of discovery, as required by applicable law.

5. Your Privacy Rights

5.1 General Rights

• Access: Request information about what personal data we have about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain types of data processing

5.2 GDPR Rights (EU Residents)

• Right to restrict processing
• Right to data portability
• Right to object to automated decision-making
• Right to lodge a complaint with supervisory authorities

5.3 CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

5.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@adaapt.ai or use our data subject request portal. We will respond to verified requests within 30 days.

6. Data Retention

6.1 Retention Periods

• Account Data: Retained while your account is active and for 7 years after termination
• Enterprise Data: Retained per your data processing agreement (typically 30 days after termination)
• Usage Data: Retained for 3 years for analytics and improvement purposes
• Support Data: Retained for 5 years for customer service and legal purposes

6.2 Secure Deletion

When data is deleted, we use secure deletion methods to ensure it cannot be recovered. This includes deletion from backups and disaster recovery systems.

7. International Data Transfers

Adaapt.AI operates globally and may transfer your personal data to countries outside your residence jurisdiction. We ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate protection levels
• Standard Contractual Clauses: EU-approved contractual protections
• Certification Programs: Privacy Shield successor frameworks
• Binding Corporate Rules: Internal privacy standards for global operations

8. Children's Privacy

Adaapt.AI is an enterprise platform not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Cookies and Tracking Technologies

9.1 Types of Cookies

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand platform usage patterns
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted communications (with consent)

9.2 Managing Cookies

You can control cookies through your browser settings or our cookie preference center. Note that disabling essential cookies may affect platform functionality.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Notify you of material changes via email or platform notification
• Post the updated policy on our website with the revision date
• Provide a 30-day notice period for material changes
• Maintain an archive of previous policy versions