We collect the following categories of Personal Information.
Information you provide. Name, email address, organization name, role or job title, and any information you provide when you contact us, sign up for the Services, request a demo, or correspond with our team.
Information collected automatically. When you visit the Site or use the Services, we collect IP address, device and browser information, operating system, language preferences, referring URLs, pages viewed, time spent, and similar usage data.
Customer Data. When authorized users upload documents and other materials to the Services, those uploads may contain Personal Information. We process Customer Data on behalf of the customer organization and only as necessary to deliver the Services.
For purposes of the California Consumer Privacy Act ("CCPA") and analogous US state privacy laws, in the past twelve months we have collected the following categories of Personal Information: Identifiers, Professional or Employment-Related Information, Internet or Other Electronic Network Activity Information, and Customer Records Information. We do not collect sensitive personal information as defined in the CCPA.
We use Personal Information to:
Customer Data is used solely to deliver the Services to the customer. We do not use Customer Data or outputs generated by the Services to train or improve any artificial intelligence or machine learning models operated by Dryft or any of our subprocessors.
We share Personal Information only as described below.
Service Providers. We engage third parties to perform services on our behalf, including cloud hosting and infrastructure, payment processing, email delivery, analytics, error monitoring, customer support tools, and AI inference services. These providers may access Personal Information only as necessary to perform their functions and are bound by contractual confidentiality and data protection obligations.
Customer organizations. If you are an authorized user of a customer organization's account, your activity within the Services may be visible to your organization's account administrator and other authorized users from your organization.
Legal compliance. We may disclose Personal Information when required by law, in response to valid legal process, or to protect the rights, property, or safety of Dryft, our customers, our users, or others.
Business transfers. If Dryft is involved in a merger, acquisition, financing, or sale of assets, Personal Information may be transferred as part of that transaction.
We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising.
The Site uses cookies and similar tracking technologies to authenticate users, remember preferences, analyze traffic, and improve the Services. You can control cookies through your browser settings. Disabling cookies may affect some features of the Site.
We retain Personal Information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data uploaded to the Services is retained for thirty (30) days following termination or expiration of the customer's subscription, after which it is deleted from active production systems. Residual copies may persist briefly in backup media in accordance with our backup rotation schedule.
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, use, alteration, and disclosure. No system is perfectly secure, and we do not guarantee the absolute security of any Personal Information.
We may send service-related communications regarding your account, security, billing, and changes to the Services. These cannot be opted out of while you maintain an account. We may also send marketing communications. You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us at privacy@dryftanalytics.com.
Under US state privacy laws including the CCPA, you may have the right to:
To exercise any of these rights, contact us at privacy@dryftanalytics.com. We may need to verify your identity before processing your request and may retain documentation of your request as required by law.
The Services are not directed to individuals under 16 years of age. We do not knowingly collect Personal Information from children. If we learn that we have collected Personal Information from a child under 16, we will delete that information. If you believe we may have collected such information, please contact us at privacy@dryftanalytics.com.
We may update this Privacy Policy from time to time. The updated version will be effective on the date posted. For material changes, we will provide notice through the Services or by email. Your continued use of the Services after the effective date constitutes acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Dryft Analytics Corp. Boston, Massachusetts privacy@dryftanalytics.com