Privacy Policy
This policy describes how Add9 (“Add9,” “we,” “us”) handles information when you visit add9.ai and when you or your organization use the Add9 platform at app.add9.ai, including SALES CRM at crm.add9.ai. If a written agreement with your organization says something different about customer data, that agreement controls for that data.
Information we collect
Website visitors. When you open add9.ai we receive standard connection data from our host, Amazon Web Services: IP address, browser type, the page requested, and the time of the request. We use Google Analytics to understand aggregate traffic (pages viewed, approximate location, device, and referring site). Analytics uses a cookie. If you email us, we keep the message and your address so we can reply.
Platform accounts. If your organization gives you access to Add9, we store the account details needed to run it: name, email address, organization, role, and credentials. We also keep operational logs (sign-in, feature use, and errors) so we can secure the service and fix problems.
Customer content. The platform analyzes records your organization connects or uploads — documents, business-system data, messages, and similar material — and the questions you ask about them. That content is processed only to provide the service your organization requested.
How we use information
- To operate, secure, and improve the website and the platform.
- To produce the analysis, briefings, and answers your organization asks for.
- To respond to inquiries and send service messages about an account.
- To understand aggregate website traffic.
- To meet legal obligations.
We do not sell personal information. We do not use your organization’s content to train foundation models.
Who we share it with
We share information with service providers that help us run Add9, and only for that purpose:
- Amazon Web Services, which hosts the website and the platform.
- Google, for Analytics on the marketing site.
- The AI provider configured for a workspace (such as OpenAI, Anthropic, Google, or AWS Bedrock), which receives the prompt and relevant source material needed to produce that analysis.
- Email delivery used for account and product messages.
People in your organization who administer the workspace can see its users and content. We may also disclose information if the law requires it, or to protect the rights, safety, and security of Add9, our customers, and others.
Google user data in SALES CRM
SALES CRM lets a workspace connect a Google account. It asks only for the access each feature needs, and only when a user chooses to connect:
- Gmail (send only). Sends emails that a person in the workspace has approved, from that person’s own Gmail address. SALES CRM does not use this access to read, search, or delete mail.
- Google Calendar (events and free/busy). Checks when the connected calendar is free, and creates, updates, or cancels the meetings the workspace schedules.
- Basic profile (email address). Shows which Google account is connected.
Google access and refresh tokens are encrypted at rest and used only to provide these features. We do not sell Google user data, use it for advertising, or use it to train AI models, and people do not read it except with the user’s permission, for security, or where the law requires it. SALES CRM’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A workspace admin can disconnect a Google account in SALES CRM at any time, which deletes the stored tokens. You can also remove access from your Google Account permissions page.
Retention
We keep account and customer content for as long as the workspace is active, and for a limited period afterward so we can complete the engagement, resolve disputes, and meet legal duties. Connection logs are kept for security and operations. Google Analytics retention follows Google’s settings for our property. You can ask us to delete personal information we hold about you; we will do so unless we need to keep it for a legal or security reason, or your organization’s administrator still requires the account.
Security
The site and the platform are served over HTTPS. Access to production systems is limited to people who need it to operate the service. No method of transmission or storage is perfectly secure; we work to protect information and will tell affected customers if we confirm a breach that the law requires us to report.
Your choices
You can block or delete the Analytics cookie in your browser. That does not affect the platform. To access, correct, or delete personal information we hold about you, or to opt out of any sale or sharing of personal information for cross-context advertising (we do not do either), email wdonovan@add9.ai. We will not discriminate against you for exercising these rights. If we deny a request, you may appeal by replying to that decision.
Add9 is not directed at children under 16, and we do not knowingly collect their information.
International visitors
We operate in the United States. If you visit from elsewhere, your information is processed in the United States, where privacy laws may differ from those in your country.
Changes
If we change this policy, we will post the new version on this page and update the effective date. Continued use of the site after that date means you accept the update. Material changes that affect customer content in the platform are handled under the customer agreement.
Contact
Privacy questions: wdonovan@add9.ai.