Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you use Dialyx, you may provide us with:

• Account Information: Name, email address, password, company name, and phone number
• Profile Information: Job title, industry, sales role, and professional preferences
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• Practice Call Data: Voice recordings, transcripts, performance metrics, and practice scenarios
• Communications: Messages you send to our support team or through in-app chat
• Feedback: Survey responses, ratings, and other feedback you provide

1.2 Information We Collect Automatically

When you use our Service, we automatically collect:

• Usage Data: Features used, time spent, actions taken, and performance metrics
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Access times, pages viewed, and system activity
• Location Data: General location based on IP address (not precise GPS location)
• Cookies and Similar Technologies: See our Cookies Policy section below

1.3 Information from Third Parties

We may receive information about you from:

• CRM Integrations: Data from your connected CRM systems (Salesforce, HubSpot, etc.)
• Authentication Providers: Profile information if you sign in with Google, Microsoft, or other OAuth providers
• Payment Processors: Transaction confirmation from Stripe
• Analytics Providers: Aggregated usage statistics and performance data

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve Our Service

2.2 Communicate with You

2.3 Ensure Security and Compliance

2.4 Analytics and Personalization

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

3.1 Service Providers

We work with trusted third-party service providers who help us operate our Service:

• Cloud Hosting: AWS (Amazon Web Services) for infrastructure
• Payment Processing: Stripe for secure payment transactions
• Analytics: Google Analytics, Mixpanel for usage analytics
• Customer Support: Intercom, Zendesk for support ticketing
• Email Services: SendGrid for transactional emails

All service providers are bound by confidentiality obligations and may only use your data to perform services on our behalf.

3.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

3.4 With Your Consent

We may share your information with third parties when you explicitly consent, such as connecting your account to third-party CRM platforms or sharing practice recordings with team managers.

4. Data Security

We implement industry-leading security measures to protect your information:

• Encryption: Enterprise-grade encryption for data at rest and in transit
• Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA)
• Regular Audits: Ongoing security assessments and updates
• Monitoring: 24/7 security monitoring and intrusion detection
• Data Backups: Automated encrypted backups with disaster recovery plans
• Employee Training: Regular security awareness training for all staff

Despite our security measures, no system is 100% secure. If you believe your account has been compromised, please contact us immediately at security@dialyx.com.

5. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Canceled Accounts: Data is retained for 90 days after cancellation, then deleted
• Legal Obligations: Some data may be retained longer to comply with legal requirements
• Practice Recordings: Voice recordings are retained for 12 months or until you delete them
• Analytics Data: Aggregated, anonymized data may be retained indefinitely

You can delete specific practice recordings or your entire account at any time from your account settings.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 General Rights

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Request restriction of processing your data
• Objection: Object to processing of your personal data
• Withdraw Consent: Withdraw consent for marketing communications

6.2 GDPR Rights (European Union)

If you are in the EU/EEA, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

6.3 CCPA Rights (California)

California residents have the right to:

To exercise your rights, please contact us at privacy@dialyx.com or through your account settings. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security)
• Performance Cookies: Help us understand how you use the Service (analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity for advertising purposes (with your consent)

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our Service.

8. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the US, your information will be transferred to, stored, and processed in the US.

We ensure appropriate safeguards are in place for international data transfers:

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.