Privacy Policy

This Privacy Policy describes how [COMPANY LEGAL NAME] ("DeltaX," "we," "us") collects, uses, and shares information in connection with the DeltaX platform (the "Service"). It applies to Customer Organization accounts and the individual users within them.

1. Information We Collect

• Account information: name, work email, role, and authentication credentials when a user is invited to or joins an Organization.
• Customer Data: CRM and deal-workflow information users create or upload (for example contacts, companies, properties, deals, notes, tasks, and documents).
• Connected services: if a user authorizes a third-party mailbox, calendar, phone, or similar integration, we access only the data needed for the features they enable, within the scope of that authorization.
• Usage & technical data: logs and metadata used for security, reliability, support, and (where applicable) usage-based billing.
• Billing information: payment details are handled by our payment processor; we do not store full payment card numbers.

2. How We Use Information

• To provide, operate, secure, and support the Service for each Organization;
• To run automated analysis and assistance features on Customer Content that users submit or connect (see Section 3);
• To meter and bill subscription and usage fees where applicable;
• To communicate about the Service (product, billing, and support);
• To maintain and improve reliability and product quality.

We do not sell personal information. We do not use Customer Data to train general-purpose third-party models beyond what is necessary to fulfill the specific processing request, subject to our vendors' applicable terms.

3. Automated / AI Processing

Certain features send Customer Content to specialized processing vendors solely to produce the extraction, summary, draft, or similar result the user requested. Results are stored in the Customer's Organization and are not shared with other Organizations.

4. Service Providers

We use carefully selected service providers only as needed to operate the Service. These fall into categories such as:

• Cloud hosting and database infrastructure;
• File and object storage;
• Automated document / content analysis;
• Maps and location services;
• Email, calendar, and telephony providers the Customer chooses to connect;
• Payment and subscription billing processors;
• Error monitoring and operational tooling.

A current list of named subprocessors is available to Customers under a Data Processing Addendum or upon written request to [PRIVACY EMAIL]. We will provide notice of material changes as required by that agreement.

5. Data Retention & Export

We retain Customer Data for as long as the Organization has an active subscription. Organization admins may export Customer Data from the product where that feature is available. After termination, we retain Customer Data for a limited period to allow export, then delete it absent a legal retention obligation.

6. Data Security

• Customer Data is logically isolated per Organization;
• Secrets such as API keys are stored using industry-standard protections;
• Access to production systems is limited to authorized personnel;
• [PLACEHOLDER — encryption, backups, and certifications to be finalized with counsel.]

7. Your Rights & Choices

Depending on applicable law, individuals may have rights to access, correct, or delete personal information, or to object to certain processing. Requests should go first to the Organization admin who controls the account, or to us at [PRIVACY EMAIL].

8. International Data Transfers

[PLACEHOLDER — hosting regions and transfer mechanisms to be confirmed with counsel.]

9. Children's Privacy

The Service is intended for business use by adults and is not directed to children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice with reasonable advance notice where required.

11. Contact

Questions about this Privacy Policy: [PRIVACY EMAIL].