1. Information about researched businesses and owners
When a customer enriches a lead, AdaSignal AI aggregates information from multiple sources to build a business research profile. Categories of information may include business identifiers (legal name, DBA, address, industry, year founded), public-record filings (UCC filings, FMCSA records, secretary-of-state filings, business licenses, court records), owner and officer information (name, role, business email, business cell phone, professional address), and web presence (company website, LinkedIn business page, Google Business listing).
Sources are limited to: public records made available by federal, state, and local governments; government and regulatory filings (for example, licensing boards, FMCSA, and the SEC); and publicly available first-party business information, such as the business's own website.
We never use breach data. We do not use data brokers or people-search providers unless a customer chooses to add a licensed provider to its own workspace as an opt-in add-on. In that case, data from that provider is used only for that customer, under the provider's terms.
2. Information about customers (account holders)
When you sign up for an AdaSignal AI workspace, we collect: name, business email address, business name, billing information (handled by Stripe — we never see full card numbers), authentication credentials, and the data you upload into your workspace (your CSVs, lead lists, notes, custom fields).
We collect server logs (IP address, user-agent, request paths, timestamps) for security, debugging, and abuse prevention. We use cookies and local storage for authentication and to remember your workspace preferences.
3. How we use information
We use the information described above to provide the Service to subscribing customers (research, pipeline, dialer, email, analytics), respond to support requests, process payments and prevent fraud, comply with legal obligations, and improve, secure, and operate the Service.
We do not use customer-uploaded data to train AI models, and we do not share customer-uploaded data with other customers.
4. How we share information
We share information only as follows: with infrastructure providers (Replit for hosting, Stripe for payments, Resend/SMTP providers for email delivery, Twilio for telephony, Apify for data collection, xAI for AI personalization), each operating under its own terms and applicable data-protection commitments; with subscribing customers, who access aggregated business research data through the Service; when required by law, subpoena, court order, or to protect our rights, our customers, or the public; and in connection with a merger, acquisition, or sale of substantially all of our assets, with notice to you.
Customers subscribe to the Service; we do not sell personal information, to advertisers, data brokers, or anyone else. Under CCPA/CPRA's broad definitions of 'sale' and 'sharing', making business research available to subscribing customers through the Service may be treated as 'sharing' — California residents may opt out as described below.
5. Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have the rights to know what we collect, access the specific pieces we hold, delete information about you (subject to exceptions permitted by law), correct inaccurate information, opt out of the sale or sharing of your personal information, limit use of sensitive personal information, and non-discrimination for exercising any of these rights.
To exercise any right, email hello@aidaddy.io with the subject line indicating the request type ('Right to Know', 'Deletion Request', 'Do Not Sell or Share', etc.). Include the business name and an identifier (phone or email) tied to the record. We verify identity using information we already hold and respond within 45 days. You may designate an authorized agent to make a request on your behalf, and you may appeal a denied request by replying with the subject 'Appeal'.
6. Do not sell or share my personal information
California residents may opt out of the "sale" or "sharing" of their personal information by emailing hello@aidaddy.io with the subject line 'Do Not Sell or Share' and providing the business name and identifiers (your name, phone number, or email address) you want excluded.
We honor Global Privacy Control (GPC) signals as opt-out preference signals where they apply. No account is required to make this request.
7. Data retention
We retain customer-account data for as long as your account is active and for a reasonable period after closure for backup, audit, and legal purposes. Researched-business data is retained as long as the underlying source remains publicly available; we remove records on verified opt-out request.
8. Security
We use commercially reasonable technical and organizational measures to protect personal information, including encryption in transit, scoped database access, and authenticated workspace separation. No system is perfectly secure. If we ever experience a security incident affecting your information, we will notify you as required by applicable law.
9. Children
The Service is not directed to anyone under 18 and we do not knowingly collect personal information about minors. If you believe we hold information about a minor, email hello@aidaddy.io and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page and, for active customers, emailed at least 14 days in advance.
11. Contact
Privacy questions, opt-out requests, deletion requests, and access requests: hello@aidaddy.io.
The mailing address used in commercial email footers is set by the operator in environment configuration; California residents may also use the email channel for any written request.