Privacy Policy

1. Overview

DataExpandr ("DataExpandr", "we", "our", or "us") provides workflow and data automation tools for businesses and individuals. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and services.

2. Information We Collect

When you create an account, use DataExpandr, or interact with our services, we may collect the following information:

• Account information: name, email address, login credentials, and account preferences.
• Usage data: pipeline configurations, run history, workflow activity, feature usage, and service interactions.
• Payment information: billing details processed securely through our payment provider. We do not store your full payment card details.
• Device and log data: IP address, browser type, device information, access times, diagnostics, and security logs.
• Uploaded content: files, datasets, and source materials you provide for processing through the platform ("Customer Data").
• Forms and inquiries: information you submit through our contact and demo request forms — such as your name, work email, company, team size, country, and how you heard about us — which we process through our CRM provider (HubSpot) to respond to you and schedule demos.

3. How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve the DataExpandr platform.
• Process workflows, uploaded content, and pipeline executions.
• Process transactions and send billing-related communications.
• Send service updates, security alerts, and support messages.
• Respond to contact and demo inquiries, and send related sales or marketing communications, which you can opt out of at any time.
• Improve service reliability, usability, and feature development.
• Monitor for fraud, unauthorized access, security incidents, and misuse of the platform.
• Comply with legal, regulatory, and contractual obligations.

4. Customer Data and AI/ML Processing

You retain ownership of Customer Data you upload to DataExpandr. We act as a processor of Customer Data on your behalf and only use it to provide and support the services you request.

We do not currently use Customer Data to train our own machine learning or AI models.

Where DataExpandr uses third-party AI or machine learning providers to operate features of the platform, we make reasonable efforts to use providers that offer contractual commitments or technical controls limiting the use of Customer Data for model training, and we configure those services accordingly where such options are available.

You are responsible for ensuring you have the necessary rights and permissions to upload Customer Data to the platform, including any personal information about third parties contained within it.

5. Data Processing & Storage

Customer Data is processed during pipeline runs to provide the services you request. Uploaded source files are processed for the duration needed to execute your workflows and are not intentionally retained longer than necessary to operate the service, troubleshoot issues, or comply with legal obligations.

Pipeline configurations, metadata, account settings, and run history are stored to enable scheduled workflows, user dashboards, service reliability, and support.

We use industry-standard administrative, technical, and organizational safeguards designed to protect data in transit and at rest. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a security incident affecting your personal information, we will provide notifications where required by applicable law.

6. Data Sharing

We do not currently sell personal information or share it for cross-context behavioral advertising.

We may share data with:

• Service providers: trusted third parties that help us operate our platform, including hosting, payment processing, analytics, authentication, customer support, and infrastructure services. These providers are bound by contractual confidentiality, privacy, and security obligations and may only process information on our behalf.
• Legal requirements: when required by law, regulation, legal process, or to protect the rights, safety, and security of DataExpandr, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, with appropriate notice where required.

We can provide additional information about key service providers upon reasonable request.

7. Cookies & Tracking

We use essential cookies and similar technologies to maintain sessions, remember preferences, secure accounts, and operate the platform.

We also use third-party analytics and marketing tools, some of which set their own cookies or similar identifiers:

• Umami provides privacy-friendly, cookieless website analytics (aggregate page views, referrers, and device type). It does not use cookies, does not collect personal data, and we never sell it.
• HubSpot powers our contact and demo request forms and may set cookies on those pages to associate your form submissions with your visit so our team can follow up.

You can block or delete cookies through your browser settings; essential platform features may not function without them. We do not currently use third-party advertising trackers to sell or target advertising based on your personal information.

8. Third-Party Services

DataExpandr relies on trusted third-party providers to operate portions of the platform, including infrastructure hosting, analytics, authentication, customer support, email delivery, and payment processing.

These providers process information on our behalf subject to contractual confidentiality, privacy, and security obligations.

9. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States. By using DataExpandr, you acknowledge that your information may be transferred to jurisdictions that may have different data protection laws than your country of residence.

Where required by law, including for transfers of personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.

10. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Export your pipeline configurations and run history (data portability).
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Manage communication and privacy preferences.
• Request information about how your data is processed.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will not discriminate against you for exercising any of these rights.

11. Data Retention

We retain account data for as long as your account is active or as needed to provide the service. If you delete your account, we will remove or anonymize personal data within a reasonable period after closure, except where retention is required for legal, security, billing, backup, or legitimate business purposes.

Anonymized or aggregated usage information may be retained for analytics, security, and service improvement.

12. Children's Privacy

DataExpandr is not directed toward children under the age of 13 (or the applicable minimum age in your jurisdiction, such as 16 in parts of the European Economic Area), and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take appropriate steps to delete it.

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to:

• Know what personal information we collect, use, disclose, and (if applicable) share.
• Request access to, correction of, or deletion of personal information.
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising. DataExpandr does not currently sell or share personal information for these purposes.
• Limit the use and disclosure of sensitive personal information.
• Be free from discrimination for exercising these rights.

To submit a request, contact us using the information below.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

15. Contact

If you have questions about this Privacy Policy or would like to submit a privacy-related request, contact us at [email protected].