Privacy Policy

Last Updated: March 13, 2026

1. Introduction

Dhisana AI, Inc. ("Dhisana AI", "we", "our", or "us") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, process, disclose, and safeguard personal information when you use our website, products, and services.

Dhisana AI provides an AI-powered platform that helps organizations automate go-to-market workflows, including lead research, enrichment, account intelligence, outreach content generation, workflow automation, and related analytics.

This Privacy Policy applies to:

• Visitors to the Dhisana AI website
• Customers using the Dhisana AI platform
• Individuals whose data may be processed through the platform

2. Data Controller and Data Processor Roles

2.1 Customer Data

For customer data uploaded to or processed through the Dhisana AI platform, including CRM contacts, prospect data, business contact information, communications, and related workflow data, Dhisana AI acts as a data processor. Our customers act as the data controllers and determine the purposes and means of processing such data.

Dhisana AI processes customer data solely for the purpose of providing the services described in the applicable agreement with the customer and in accordance with customer instructions.

2.2 Website Data

For information collected directly through our website, such as contact requests, demo requests, newsletter signups, and marketing interactions, Dhisana AI acts as the data controller.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, business email address, company name, job title, and contact details
• Profile Information: Additional details you choose to add to your profile or account
• Communication Data: Messages, emails, meeting information, and other communications with us
• Customer Data: Prospect, account, lead, customer, and business information you upload or connect to the platform

3.2 Information We Collect Automatically

• Usage Data: Information about how you use our website and platform, features accessed, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers, and similar technical information
• Log Data: Server logs, error reports, audit events, and system performance metrics
• Cookies and Tracking Data: Information collected through cookies, pixels, and similar technologies

3.3 Information from Third Parties

• Integration Data: Information from connected services such as CRMs, email systems, analytics tools, and communication platforms
• Data Enrichment: Publicly available or licensed business information used to enhance prospect and account profiles
• Analytics Providers: Aggregated website and service usage information from analytics and performance tools

4. How We Use Information

We use personal information for the following purposes:

• Provide, operate, maintain, and improve our website, platform, and services
• Enable AI-powered workflow automation, research, enrichment, and content generation
• Manage accounts, authenticate users, and provide customer support
• Customize and personalize user experiences
• Process transactions and send related notices
• Communicate with you about product updates, service notices, and marketing, where permitted by law
• Monitor usage patterns, platform performance, and service reliability
• Detect, prevent, and respond to technical issues, fraud, abuse, or security threats
• Comply with legal, regulatory, and contractual obligations

Customer data is processed only according to customer instructions, applicable agreements, and applicable law.

5. Artificial Intelligence and Automated Processing

Our platform uses artificial intelligence and machine learning technologies to support business workflows such as:

• Lead and account research
• Qualification and prioritization
• Summarization and account insights
• Sales outreach content generation
• Workflow automation and recommendations
• Operational analytics and support

Dhisana AI designs AI systems to support human decision-making and operational workflows rather than replace human judgment in high-risk or regulated decisions.

Customer data processed through the Dhisana AI platform is not used to train foundation AI models unless explicitly authorized by the customer.

Dhisana AI may leverage trusted infrastructure and model providers, including Microsoft Azure and Azure OpenAI services, to support AI capabilities. These providers process data to provide the requested services and do not use customer data to train their models where such protections are provided under applicable service terms.

6. Responsible AI Governance

Dhisana AI is committed to responsible development, deployment, and operation of AI technologies. Our governance practices are designed to support fairness, accountability, transparency, security, and human oversight.

• Human review and approval for critical or customer-facing workflows where appropriate
• Internal review of AI system design, deployment, and safeguards
• Monitoring and logging of AI-assisted workflows and outputs
• Use of structured business rules and deterministic signals alongside AI reasoning where appropriate
• Ongoing improvement of AI quality, reliability, and safety controls

7. Information Sharing and Disclosure

7.1 We Do Not Sell Personal Information

Dhisana AI does not sell, rent, or lease personal information to third parties.

7.2 When We May Share Information

• Service Providers and Sub-processors: With trusted vendors who support cloud hosting, AI processing, analytics, communications, and platform operations
• Integrations: With services you choose to connect, such as CRMs, email platforms, analytics tools, and communication systems
• Legal Requirements: When required by law, regulation, legal process, or government request
• Business Transfers: In connection with mergers, acquisitions, financing, reorganizations, or asset sales
• Consent: When you explicitly direct or authorize us to share information

7.3 Sub-processors

Dhisana AI may engage trusted service providers and sub-processors to operate and support the platform. These may include:

• Microsoft Azure for cloud infrastructure
• Azure OpenAI services for AI processing infrastructure
• Analytics and monitoring providers
• Communication and messaging infrastructure providers

These providers are contractually required to implement appropriate security and confidentiality safeguards and to process data only for authorized purposes.

8. Data Security

Dhisana AI implements industry-standard technical and organizational measures designed to protect personal data and customer information.

• Encryption in transit and at rest
• Role-based access controls and authentication safeguards
• System logging, monitoring, and audit capabilities
• Vulnerability management and security testing
• Employee training on data protection and security practices
• Secure infrastructure hosted on Microsoft Azure

Dhisana AI maintains operational security practices aligned with SOC 2 Type II audited controls.

9. Data Retention

We retain personal information only for as long as necessary to provide our services, fulfill contractual commitments, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records.

Customers may request deletion of their data in accordance with their agreements with Dhisana AI. Upon termination of services, customer data will be deleted or returned according to applicable contractual terms and retention policies, subject to legal or regulatory requirements.

10. Your Rights and Choices

10.1 Access and Control

Depending on applicable law, you may have the right to:

• Access and review personal information
• Update or correct inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Export data in a portable format where applicable
• Object to certain processing activities
• Opt out of certain communications

Requests relating to customer data processed on behalf of a customer should generally be directed to the relevant customer as the data controller.

10.2 Cookie Preferences

You can control cookies through your browser settings and, where available, consent tools on our website. Please note that disabling certain cookies may affect site functionality.

11. Cookies and Tracking Technologies

We may use cookies, pixels, local storage, and similar technologies to operate our website and services, analyze traffic and usage patterns, improve performance, remember preferences, and support marketing activities.

These technologies may be used to:

• Enable core website and platform functionality
• Understand user interactions and improve website experience
• Measure campaign effectiveness
• Support marketing and remarketing efforts where permitted by law

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where personal data is transferred internationally, Dhisana AI implements appropriate safeguards in accordance with applicable data protection laws.

These safeguards may include:

• Standard Contractual Clauses
• Adequacy decisions by relevant authorities
• Use of service providers with recognized compliance frameworks and contractual protections

13. Regional Privacy Rights

13.1 European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy laws, you may have additional rights regarding your personal data, including rights of access, correction, deletion, portability, restriction, and objection to processing, subject to applicable law.

13.2 California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information is collected, used, disclosed, or shared, and the right to request deletion of personal information, subject to applicable exceptions.

14. Third-Party Advertising and Opt-Out

We may work with advertising, analytics, and attribution partners that use cookies, pixels, and similar technologies to help us understand website activity and deliver relevant communications and marketing. These technologies may associate website activity with identifiers such as an email address where permitted by law.

You may opt out of certain advertising or tracking-related activities by visiting:

• https://app.retention.com/optout
• https://www.rb2b.com/rb2b-gdpr-opt-out

15. Children's Privacy

Dhisana AI services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take reasonable steps to delete such information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and may provide additional notice where required by law. We encourage you to review this Privacy Policy periodically.

17. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

18. Effective Date

This Privacy Policy is effective as of March 13, 2026, and applies to information collected by Dhisana AI on or after this date.