Privacy Policy
Last updated: June 6, 2026
1. Introduction
DemandAI ("we", "our", "us") provides an AI-powered customer relationship and lead-management platform for small businesses ("Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data. By using DemandAI, you agree to the practices described here.
2. Information we collect
- Account data: name, email, password hash, workspace settings.
- Customer data you import: lead names, phone numbers, emails, notes, follow-ups.
- Usage data: logs, device/browser info, IP address, feature interactions.
- Billing data: processed by our payment provider; we do not store card numbers.
3. How we use information
We use your information to provide and improve the Service, authenticate users, generate AI reply suggestions, send transactional notifications, prevent abuse, comply with legal obligations, and (with consent) send product updates. We do not sell personal data.
4. AI processing
Lead content you submit may be sent to trusted AI providers to generate replies and summaries. Providers process data under data-processing agreements and do not use it to train their public models.
5. Sharing
We share data only with sub-processors required to operate the Service (hosting, database, analytics, payments, email, AI providers), when required by law, or to protect rights and safety. A current sub-processor list is available on request.
6. Data retention
We retain account and customer data while your account is active. After account closure, data is deleted within 30 days, except where retention is required by law or for legitimate business records (e.g., invoices).
7. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted via role-based controls and audit logging. Row-level security ensures workspace data isolation.
8. Your rights
Depending on your jurisdiction (GDPR, CCPA, UK-DPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict processing. Submit requests via privacy@demandai.com.
9. International transfers
We may transfer data outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
10. Children
DemandAI is not directed to children under 16 and we do not knowingly collect their data.
11. Changes
We may update this policy from time to time. Material changes will be announced in-product or via email at least 14 days before they take effect.
12. Contact
Questions? Reach our Data Protection team at privacy@demandai.com.