Privacy Policy

1. Introduction

Dialed is a product owned and operated by AI Plexus, LLC, a Texas limited liability company ("AI Plexus," "Dialed," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information in connection with the Dialed sales activity tracking platform available at dialed.cloud and app.dialed.cloud (the "Service").

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Who this Policy applies to

Dialed is a business-to-business product. Most people who use Dialed do so as a member of an organization that has subscribed to the Service (your "Organization"). Your Organization controls its account, decides who may access it, and determines how activity data is used within it. This Policy describes our practices; your Organization's own policies may also apply to your use of the Service.

3. Information we collect

Account information. When you create an account or accept an invitation, we collect your name, email address, and password (stored in hashed form) or, if you sign in with Google, the information described in Section 4. We also collect your role, your position in your Organization's hierarchy, and the Organization, region, branch, or team you belong to.

Activity and performance data. The core function of the Service is recording sales activity. This includes the activity entries you or your Organization submit — such as calls, conversations, appointments, applications, referral partner meetings, and similar metrics — along with the points, scores, streaks, rankings, and reports the Service generates from them.

Organization information. Organization name, billing contact, subscription tier, seat count, and settings configured by your Organization's administrators.

Payment information. Subscription payments are processed by Stripe. We receive limited billing details such as your subscription status, plan, billing contact, and the last four digits and brand of the payment method. We do not collect or store full payment card numbers.

Usage and device information. We automatically collect information about how the Service is accessed and used, including IP address, browser type, device type, operating system, pages viewed, timestamps, referring pages, and error and performance logs.

Cookies and similar technologies. We use cookies and similar technologies that are necessary to operate the Service — for example, to keep you signed in and to maintain session security. We may also use limited analytics cookies to understand how the Service is used. See Section 10.

Communications. If you contact us for support or otherwise correspond with us, we retain those communications and their contents.

4. Google sign-in and Google user data

If you choose to sign in with Google, we use Google OAuth to authenticate you. We request only the following scopes:

• openid — to identify your Google account
• email — to obtain your email address
• profile — to obtain your basic profile information, such as your name and profile picture

We use this information solely to create and authenticate your Dialed account, to identify you within your Organization, to display your name and picture to other members of your Organization, and to communicate with you about the Service.

We do not use Google user data for advertising. We do not sell Google user data. We do not transfer Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition as described in Section 6. We do not allow humans to read your Google user data except with your explicit consent, where necessary for security purposes or to comply with applicable law, or where the data has been aggregated and de-identified.

Dialed's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You may revoke Dialed's access to your Google account at any time at https://myaccount.google.com/permissions. Revoking access will prevent you from signing in with Google, but will not by itself delete your Dialed account or your Organization's data.

5. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and authenticate accounts and manage access permissions
• Calculate points, scores, streaks, leaderboards, and reports
• Display activity and performance information to authorized users within your Organization
• Process subscriptions, payments, and renewals
• Send transactional messages such as invitations, account notices, and billing notices
• Provide customer support and respond to inquiries
• Monitor, secure, troubleshoot, and improve the Service
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

Where required by law, we rely on the following legal bases: performance of a contract, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations.

6. How information is shared

Within your Organization. This is important to understand: Dialed is designed so that managers and administrators can see the activity and performance data of the people they oversee. Depending on your role and your Organization's configuration, your name, activity entries, scores, rankings, and streaks may be visible to your team lead, branch manager, regional manager, organization administrators, and — through leaderboards — to other members of your Organization.

Service providers. We share information with vendors who process data on our behalf under contractual confidentiality and security obligations. These currently include:

• Supabase — database hosting and authentication
• Lovable — application hosting and deployment
• Stripe — payment and subscription processing
• Google — authentication for users who sign in with Google
• Mailgun (Sinch) — transactional email delivery for invitations, account notices, and other service messages sent from noreply@notify.dialed.cloud. Mailgun is engaged through our hosting provider and currently routes messages through its European infrastructure.

Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is reasonably necessary to protect the rights, property, or safety of Dialed, our users, or the public.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. Data retention

We retain account and activity data for as long as your Organization maintains an active account, and thereafter as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When an Organization's account is closed, we delete or de-identify its data within 30 days, except where retention is required by law. Backup copies may persist for a limited additional period.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, encryption at rest, role-based access controls, and row-level security policies restricting data access to authorized users within each Organization. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a breach affecting your personal information, we will notify you and applicable authorities as required by law.

9. Your choices and rights

You may:

• Access and update your profile information from within the Service
• Request a copy of the personal information we hold about you
• Request correction or deletion of your personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Revoke Google access as described in Section 4

To exercise these rights, contact us at contact@aiplexus.io. We will respond within the timeframe required by applicable law. Note that if you are a member of an Organization, we may need to refer your request to your Organization's administrators, who control the account. We will not discriminate against you for exercising your rights.

Depending on where you live, you may have additional rights under laws such as the Texas Data Privacy and Security Act (TDPSA), the California Consumer Privacy Act (CCPA/CPRA), the EU and UK General Data Protection Regulation (GDPR), or other applicable privacy laws, including the right to lodge a complaint with a supervisory authority.

10. Cookies

We use the following categories of cookies and similar technologies:

• Strictly necessary — authentication, session management, and security. These cannot be disabled without breaking the Service.
• Functional — remembering preferences and settings.
• Analytics — understanding aggregate usage patterns so we can improve the Service.

Most browsers let you refuse or delete cookies through their settings. Disabling strictly necessary cookies will prevent you from signing in.

11. Children's privacy

The Service is intended for use by businesses and their personnel. It is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

12. International users

We operate in the United States, and information we collect is processed and stored in the United States and other countries where our service providers operate. Some processing occurs outside the United States — in particular, transactional email delivery is currently routed through infrastructure located in the European Union. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your country. Where required, we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

13. Third-party links

The Service may contain links to third-party websites and services. We are not responsible for their privacy practices, and this Policy does not apply to them. We encourage you to review their policies.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect, and we will update the "Last updated" date above. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

15. Contact us

Questions, concerns, or requests regarding this Policy or your personal information:

AI Plexus, LLC
3571 Far West Blvd
Austin, TX 78731
Email: contact@aiplexus.io