Privacy Policy
Your privacy is critically important to us. This policy outlines how we collect, use, and protect your personal information.
Last Updated: January 7, 2025
Table of Contents
1. Introduction
Adverant ("we," "our," or "us") is committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Adverant Nexus platform and related services (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. We are committed to compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@adverant.ai.
2. Information We Collect
2.1 Account Information
When you create an account with Adverant, we collect:
- Full name and email address
- Company or organization name
- Job title and department
- Billing information (processed securely through our payment processors)
- Authentication credentials (passwords are encrypted and never stored in plain text)
2.2 Usage Data
We automatically collect information about how you interact with our Services:
- API calls, requests, and responses (excluding sensitive payload data)
- Feature usage patterns and frequency
- Performance metrics and error logs
- Session duration and interaction timestamps
- Analytics data for service improvement
2.3 Technical Data
We collect technical information to ensure service security and functionality:
- IP addresses and geographic location (city/country level)
- Browser type, version, and language preferences
- Device information (operating system, device type, screen resolution)
- Referring URLs and navigation paths
- Cookie identifiers and tracking pixels
2.4 Content Data
When you use our AI services, we process and store:
- Documents uploaded for processing (PDFs, Word files, spreadsheets, etc.)
- Video content submitted for analysis
- Knowledge graphs and semantic relationships created
- Chat histories and conversational data
- Custom models and training data (Enterprise customers only)
Important: Content data remains your property. We do not use your content to train our models without explicit consent, and Enterprise customers can opt for complete data isolation.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Provide and Maintain Services
- Operate and deliver the Adverant Nexus platform
- Process API requests and execute AI operations
- Manage user accounts and authentication
- Process billing and payment transactions
- Provide customer support and technical assistance
3.2 Improve Platform Performance
- Analyze usage patterns to optimize service performance
- Identify and fix technical issues and bugs
- Develop new features and enhance existing functionality
- Conduct research and development for AI improvements
3.3 Customer Support
- Respond to customer inquiries and support requests
- Provide technical documentation and guidance
- Send service announcements and updates
- Conduct customer satisfaction surveys
3.4 Security and Fraud Prevention
- Monitor for security threats and unauthorized access
- Detect and prevent fraudulent activities
- Enforce our Terms of Service and acceptable use policies
- Conduct security audits and vulnerability assessments
3.5 Legal Compliance
- Comply with applicable laws, regulations, and legal processes
- Respond to lawful requests from government authorities
- Enforce our legal rights and defend against legal claims
- Maintain records for audit and compliance purposes
4. Data Storage and Security
We implement industry-leading security measures to protect your data:
4.1 Encryption
- At Rest: All data is encrypted using AES-256 encryption
- In Transit: TLS 1.3 encryption for all network communications
- Backups: Encrypted backups with separate encryption keys
- Key Management: AWS KMS and Azure Key Vault for secure key storage
4.2 Compliance and Certifications
- SOC 2 Type II: Annual audits by independent third parties
- GDPR Compliance: Full compliance with European data protection laws
- FedRAMP Ready: For government and military deployments
- HIPAA Compliant: Available for healthcare customers
4.3 Security Audits
- Quarterly penetration testing by certified security firms
- Continuous vulnerability scanning and monitoring
- Annual third-party security audits
- Bug bounty program for responsible disclosure
4.4 Data Retention
We retain your data only as long as necessary:
- Active Accounts: Data retained for duration of account activity
- Inactive Accounts: Data deleted after 2 years of inactivity
- Deleted Accounts: Complete deletion within 30 days of request
- Backups: Backup data purged after 90 days
- Logs: Access logs retained for 1 year for security purposes
4.5 Backup Procedures
- Real-time replication across multiple availability zones
- Daily encrypted backups stored in geographically diverse locations
- Point-in-time recovery capabilities
- Regular backup restoration testing
5. Data Sharing
We Do NOT Sell Your Data
Adverant has never sold user data and will never sell user data. Your information is not a product. We do not share your data with advertisers or marketing companies.
5.1 Third-Party Service Providers
We may share limited data with trusted service providers who help us operate our Services:
- Cloud Infrastructure: AWS, Azure for hosting and storage
- Payment Processing: Stripe for secure payment handling
- Analytics: Aggregated, anonymized usage data for service improvement
- Support Services: Customer support platforms (data encrypted)
All service providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than providing services to us.
5.2 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal process (subpoenas, court orders, warrants)
- Government or regulatory investigations
- Protection of rights, property, or safety of Adverant, our users, or the public
- Enforcement of our Terms of Service
When legally permitted, we will notify you of such requests and challenge overly broad or inappropriate demands.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and inform you of your rights regarding your data.
6. Your Rights
You have the following rights regarding your personal data:
6.1 Access Your Data
You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days.
6.2 Delete Your Data
You can request deletion of your account and associated data at any time. Data will be permanently deleted within 30 days, except where retention is required by law.
6.3 Export Your Data
You can export your data in standard formats (JSON, CSV) at any time through your account settings or by contacting support.
6.4 Correct Inaccurate Data
You can update your account information at any time. If you believe we have inaccurate data about you, please contact us to have it corrected.
6.5 Opt-Out of Marketing
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your communication preferences in your account settings.
6.6 Object to Processing
You have the right to object to certain types of data processing. Contact us at privacy@adverant.ai to exercise this right.
Exercising Your Rights
To exercise any of these rights, please contact us at privacy@adverant.ai. We will respond to your request within 30 days.
7. International Data Transfers
Adverant operates globally, and your data may be transferred to and processed in countries other than your country of residence. We ensure that all international transfers comply with applicable data protection laws.
GDPR Compliance
For transfers from the European Economic Area (EEA), we use:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with all service providers
- Adequacy decisions where available
Data Residency Options
Enterprise customers can choose data residency locations:
- US: AWS us-east-1, us-west-2
- EU: AWS eu-west-1, eu-central-1
- Asia Pacific: AWS ap-southeast-1, ap-northeast-1
- Air-Gapped: On-premises deployment for government/military
9. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@adverant.ai.
If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information as soon as possible.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to your registered email address
- Displaying a prominent notice in your account dashboard
Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
11. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email:
privacy@adverant.aiData Protection Officer:
dpo@adverant.aiMailing Address:
Adverant, Inc.
Privacy Department
[Address to be provided]
United States
We will respond to all legitimate requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
