Last Updated: July, 02 2025 - Privay Policy

1. Introduction

DaDriX AI ("we," "us," or "our") provides data analysis, engineering, and artificial intelligence solutions to help businesses become data-driven. We specialize in processing and analyzing social network data, financial data, and business intelligence to deliver actionable insights. This Privacy Policy explains how we collect, use, store, and protect data in compliance with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and financial industry standards.

2. Data We Collect and Process

2.1 Social Media Data

• Publicly available data from social media platforms (Facebook, Twitter, LinkedIn, Instagram, etc.)
• Data obtained through official APIs with proper authorization
• Engagement metrics, sentiment analysis data, and trend information
• Only data where clients have demonstrated lawful access rights

2.2 Financial Data

• Aggregated, anonymized, or pseudonymized transaction data
• Market data and financial indicators
• Risk assessment and behavioral analytics data
• All financial data is processed in compliance with PCI DSS, GLBA, and applicable banking regulations

2.3 Client-Provided Data

• Business metrics and performance indicators
• Customer behavior and analytics data
• Operational data submitted for analysis
• Any datasets provided by clients under lawful data sharing agreements

2.4 Website and Service Data

• Contact information (name, email, company details)
• Usage analytics and website interaction data
• Communication records and support requests
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Data

We process data for the following purposes:

• Performing data analytics, predictive modeling, and AI-driven insights
• Developing customized solutions and recommendations
• Improving our services and developing new analytical capabilities
• Communicating with clients about services and support
• Ensuring security and preventing fraud
• Complying with legal obligations and regulatory requirements

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contract Performance: Processing necessary to fulfill our service agreements
• Legitimate Interests: Improving services, security, and business operations
• Consent: Where explicitly provided for specific processing activities
• Legal Obligation: Compliance with applicable laws and regulations

5. Data Security and Protection

5.1 Technical Safeguards

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based permissions
• Network Security: Firewalls, intrusion detection, and secure cloud infrastructure
• Regular Security Audits: Quarterly penetration testing and vulnerability assessments

5.2 Organizational Measures

• Employee background checks and confidentiality agreements
• Regular security training and awareness programs
• Incident response procedures and data breach protocols
• Third-party security certifications (SOC 2, ISO 27001 compliance)

6. Data Retention

• Client Project Data: Retained for the duration of the engagement plus 3 years for legal compliance
• Financial Data: Retained per industry standards (typically 7 years) or as required by law
• Website Data: Contact information retained for 5 years from last interaction
• Analytics Data: Aggregated insights may be retained indefinitely in anonymized form
• Legal Hold: Data subject to litigation or regulatory inquiry retained until resolution

7. Cookies and Tracking Technologies

Our website uses:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Google Analytics to understand website usage (anonymized)
• Marketing Cookies: With consent, for relevant content and communication

You can control cookie preferences through your browser settings or our cookie consent manager.

8. Third-Party Sharing and International Transfers

8.1 Data Sharing

We share data only:

• With explicit client consent for specified purposes
• With vetted subprocessors under strict data processing agreements (AWS, Google Cloud, Microsoft Azure)
• When required by law or to protect legal rights
• With professional advisors under confidentiality obligations

8.2 International Transfers

Data may be transferred to countries outside your jurisdiction. We ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Other legally recognized transfer mechanisms

9. Your Rights and Choices

Under applicable privacy laws, you may have the right to:

• Access: Request information about data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant supervisory authorities within 72 hours
• Inform affected individuals without undue delay
• Provide details about the nature of the breach and mitigation steps
• Implement immediate containment and remediation measures

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. Material changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• Direct notification for significant changes affecting your rights