Privacy Policy

Datafruit, Inc. Last Updated: March 6, 2026

Introduction

This Privacy Policy explains how Datafruit, Inc. ("Datafruit," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website, platform, and AI-powered services (collectively, the "Services"). Our Services help enterprise software implementation teams with discovery, project scoping, margin estimation, and knowledge transfer.

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

Information We Collect

Information You Provide

• Account Information. When you create an account, we collect your name, email address, company name, job title, and password.
• Customer Data. Data you upload or input into the Services, including project documentation, requirements, scope documents, engagement records, delivery artifacts, and related business information ("Customer Data").
• Communications. Information you provide when you contact us for support, submit feedback, or communicate with us through any channel.
• Payment Information. Billing details such as company name, billing address, and payment method. Payment processing is handled by third-party processors; we do not store full credit card numbers.

Information Collected Automatically

• Usage Data. Information about how you interact with the Services, including features used, actions taken, timestamps, and session duration.
• Device and Log Data. IP address, browser type, operating system, device identifiers, referring URLs, and access logs.
• Cookies and Similar Technologies. We use cookies, pixels, and similar technologies to operate the Services, remember preferences, and understand usage patterns. You can manage cookie preferences through your browser settings.

Information from Third Parties

• Integrations. If you connect third-party tools (e.g., Slack, Salesforce, Jira), we receive data necessary to provide the integration functionality you've enabled.
• Business Partners. We may receive business contact information from partners, resellers, or publicly available sources.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process and deliver AI-powered outputs such as business requirements documents, project scopes, and margin estimates
• Train and improve our AI models (see "AI and Machine Learning" below)
• Communicate with you about your account, updates, and support requests
• Process transactions and send billing-related communications
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address security issues, fraud, and technical problems
• Comply with legal obligations

AI and Machine Learning

Our Services use artificial intelligence to process Customer Data and generate outputs. Here's how that works:

• Processing. Customer Data you submit is processed by our AI models to produce deliverables like requirement extractions, scope documents, and margin estimates.
• Model Improvement. We may use de-identified and aggregated data derived from Customer Data to improve our AI models. We do not use identifiable Customer Data to train models that serve other customers unless you explicitly opt in.
• Opt-Out. Enterprise customers can opt out of any model training on their data through their account settings or by contacting us at privacy@datafruit.com.

How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Service Providers. With vendors who perform services on our behalf (hosting, analytics, payment processing, customer support), bound by confidentiality obligations.
• Integrations. With third-party tools you choose to connect, to the extent necessary to provide the integration.
• Legal Compliance. When required by law, regulation, legal process, or governmental request.
• Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, with notice to you.
• With Your Consent. In any other situation where you have given us explicit permission.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. Customer Data is retained according to the terms of your service agreement. When you delete your account, we will delete or de-identify your personal information within 90 days, except where retention is required by law.

Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, regular security assessments, and incident response procedures. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or incomplete information.
• Deletion. Request deletion of your personal information, subject to legal retention requirements.
• Portability. Request a portable copy of your data in a structured, machine-readable format.
• Objection. Object to certain processing of your personal information.
• Restriction. Request that we restrict processing of your personal information.

To exercise any of these rights, contact us at privacy@datafruit.com. We will respond within 30 days.

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@datafruit.com.

International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States. We take steps to ensure that international transfers comply with applicable law and that your information receives adequate protection.

Children's Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Datafruit, Inc. Email: privacy@datafruit.com