v1 DRAFT Privacy Policy for Attorney Review

Last updated: July 2, 2026

1. What We Collect

TradeDemand operates a software platform for businesses. We collect information in a few different ways.

• Account data. When you create an account, we may collect your name, business name, work email, phone number, login details, billing details, and account settings.
• Usage telemetry. We collect technical and usage data about how you use the service. This may include IP address, device type, browser type, pages viewed, timestamps, feature usage, error logs, and session activity.
• Tenant business content by reference. Our platform may store references to content that belongs to your tenant, such as links, file names, IDs, metadata, message threads, campaign records, or other records needed to run the service. In many cases, the underlying files or source content remain in your tenant-owned storage or your connected systems.
• Call recordings and transcripts. If call recording or transcription is lawfully enabled and disclosed, we may collect recordings, transcripts, summaries, and related call metadata. This may include information shared by callers during the call.
• Support communications. If you contact us for support, we may collect the information you send to us, including messages and attachments.

2. What We Do Not Do

• No cross-tenant data sharing. We do not share one tenant’s content with another tenant except as needed to provide the service and only within the correct account or authorization scope.
• No selling of data. We do not sell personal information.
• No visitor deanonymization. We do not use the service to identify anonymous website visitors unless you separately and lawfully provide a basis to do so in your own use of the service.

3. Storage

TradeDemand is designed so that tenant files stay in tenant-owned storage or in storage you control through connected systems, where applicable. The platform may keep references to those files, along with small derivatives needed to operate the service. These derivatives may include previews, indexes, embeddings, hashes, summaries, routing data, logs, or similar operational records.

We use these derivatives to provide search, automation, analytics, workflow, security, and support functions. We do not store more content than we need to operate the service.

4. Retention

We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law.

• Account data. Kept while the account is active and for a reasonable period afterward for backup, audit, legal, and business purposes.
• Usage telemetry. Kept for a limited period needed for service operations, security, diagnostics, and analytics.
• Tenant content references and derivatives. Kept while needed to provide the service and for a reasonable period after termination, unless deleted earlier by you or required to be kept longer by law.
• Call recordings and transcripts. Kept based on your configuration, our contractual obligations, and applicable law.

When retention ends, we will delete, anonymize, or de-identify information where appropriate, unless we must keep it for legal, tax, accounting, dispute, or security reasons.

5. Sub-processors

We use service providers to help run the platform. These sub-processors may process information on our behalf, subject to contractual safeguards.

• Cloud infrastructure providers. Used to host and operate the platform, storage, and backup systems.
• LLM API providers. Used to power AI features, such as summarization, classification, drafting, search assistance, or workflow automation, when those features are enabled.
• Telephony providers. Used to place, route, record, and transcribe calls, when those features are enabled.

We may also use providers for email delivery, monitoring, security, customer support, and payment processing. We require service providers to handle data in line with our instructions and applicable law.

6. Your Rights

Depending on where you live and how the service is used, you may have rights to access or delete certain personal information.

• Access. You may ask for a copy of the personal information we hold about you, subject to legal limits and verification.
• Deletion. You may ask us to delete certain personal information, subject to legal limits, retention obligations, and the needs of the service.

If you are a tenant administrator, you may be able to access, correct, export, or delete content through the platform controls. If you are an end user or another data subject, we may direct your request to the tenant that controls the account, because the tenant may be the controller or business for that data.

7. Cookies

We use minimal first-party cookies and similar technologies. These help us keep you signed in, remember preferences, protect the service, and understand basic site performance.

• Strictly necessary cookies. Used for login, session management, and security.
• Preference cookies. Used to remember settings or choices.
• Analytics cookies. Used in limited form to understand site usage and improve performance.

You can usually control cookies through your browser settings. If you block certain cookies, some features may not work properly.

8. GDPR Basics

If the EU or UK General Data Protection Regulation applies, TradeDemand may act as a controller for account, billing, security, and site-usage data, and as a processor for tenant content processed on behalf of customers. The tenant may be the controller or business for customer, prospect, employee, or visitor data that it loads into the platform.

Our lawful bases may include contract performance, legitimate interests, legal obligations, consent, and, where needed, your instructions through the tenant.

If GDPR applies to you, you may have rights to access, correct, delete, restrict, object, or portability, subject to legal limits. You may also have the right to lodge a complaint with your local data protection authority.

9. CCPA Basics

If the California Consumer Privacy Act, as amended, applies, California residents may have rights to know, delete, correct, and limit certain uses of personal information, and the right not to be discriminated against for exercising those rights.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising as a standard practice of the service. Where we act as a service provider or contractor, we process personal information only for the business purposes described in our agreements and this policy.

California residents can submit requests using the contact information below. We may need to verify your identity before responding.

10. Children

The service is not directed at children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will post the updated policy on this page and change the “Last updated” date. We may also provide additional notice if required by law or if the change is significant.

Your continued use of the service after a change takes effect means you accept the updated policy, to the extent permitted by law.

12. Contact

If you have questions about this policy or want to make a privacy request, contact us at:

Email: privacy@tradedemand.ai