LEGAL
Privacy Policy
1. Who we are and what this policy covers
This policy describes how DataDock AI, Inc. (“DataDock AI,” “we,” “us”) collects, uses, shares, and protects personal information when you visit datadock.ai or use the DataDock AI products Basin Reporting, Basin Research, and FilingFlow, including their APIs and documentation (together, the “Services”). It also describes the choices and rights you have in relation to your information.
Where a customer organization controls the content processed in a product workspace, DataDock AI processes that content on the organization’s behalf under the applicable subscription agreement. Members of an organization should also consult their organization’s own policies.
2. Information we collect
Information you provide. Account and registration details such as your name, work email, company, and role; content you submit through the Services, including documents, research questions, watchlists, and notes; messages you send through contact forms or to our support and sales teams; and billing details for paid subscriptions.
Information collected automatically. Log and device data such as IP address, browser type, pages viewed, and timestamps; usage data about how features are used; and cookies and similar technologies described in our Cookie Policy.
Information from other sources. Business contact information from your organization when it provisions your account, and publicly available professional information where relevant to providing the Services.
3. How we use information
We use personal information to provide, operate, and secure the Services; to authenticate users and maintain audit trails; to respond to inquiries and provide support; to administer subscriptions and billing; to understand usage in aggregate and improve the products; to send service communications and, with your consent where required, product updates you can opt out of at any time; and to comply with legal obligations.
We do not sell personal information. We do not share customer workspace content across tenants or use one customer’s content to provide services to another.
4. How we share information
We share personal information only with: (a) service providers that support our infrastructure, such as cloud hosting, payment processing, and support tooling, under contracts that limit their use of the information; (b) your organization, where your account is provisioned under its subscription; (c) professional advisers such as auditors and counsel where necessary; (d) authorities where required by law, subpoena, or to protect rights, safety, or the integrity of the Services; and (e) a successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.
5. Data retention
We retain personal information for as long as needed to provide the Services, comply with legal and audit obligations, resolve disputes, and enforce agreements. Workspace content is retained for the duration of the applicable subscription and made available for export for a reasonable period after termination, after which it is deleted or de-identified.
6. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, tenant isolation, and logging. No system is completely secure; we encourage you to use strong credentials and to notify us promptly of any suspected compromise. Our practices are described further on the Security page
7. Your rights and choices
Depending on where you are located, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. Where the GDPR applies, our legal bases are performance of a contract, legitimate interests such as securing and improving the Services, consent, and compliance with legal obligations, and you may lodge a complaint with your supervisory authority.
To exercise any of these rights, contact us at contact@datadock.ai. If your account is provisioned by your organization, we may direct your request to that organization as the controller of the relevant data.
8. International transfers
The Services are operated from the United States. Where personal information is transferred from other jurisdictions, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.
9. Children
The Services are business tools intended for professional use. They are not directed to children, and we do not knowingly collect personal information from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated date, and where required we will provide additional notice.