Privacy Policy

Welcome to “ADIN” (the “Service”), operated by Tribute Labs Services LLC (“Tribute Labs,” “Tribute,” “we,” “us,” or “our”). We respect your privacy and want you to understand how we collect, use, and share information about you. This Privacy Policy applies to all users of our Service and by providing your information or visiting, joining, or otherwise using or interacting with the Service or its website, digital applications, online communications channels, or other features of the Service's web presence, you agree to the terms and conditions outlined in this Privacy Policy. The terms and conditions set forth in our Terms and Conditions are hereby incorporated by reference and made a part of this Privacy Policy as if fully set forth herein.

1. Information We Collect

Research & Analysis Data

When you use ADIN to research and analyze topics, we collect:

• Documents and materials you upload (reports, files, etc.)
• Names, URLs, and information you provide
• AI-generated reports created by our proprietary AI analysis system
• Team collaboration data, shared report access logs, and viewing activity
• Your interactions with reports, analysis features, and AI-generated content
• Comments, notes, and annotations you add to reports

AI Memory & Learning Data

ADIN learns from your conversations to provide a personalized experience. This includes:

• Facts, preferences, and patterns the AI identifies from your conversations (stored as “memories” across categories such as preferences, goals, relationships, and communication style)
• A knowledge graph of entities and relationships relevant to your work
• Synthesized insights derived from past conversations to improve future interactions

You can view, delete, and export all AI-learned memories at any time through your account settings. You can also ask ADIN to forget specific information during a conversation.

SMS Data

If you use ADIN via SMS, we collect your phone number and the content of text messages exchanged with the Service. Phone numbers are stored in E.164 format and masked in internal displays.

Engagement Data

We may track engagement metrics such as feature usage frequency and interaction streaks to personalize your experience within the Service.

Automatically Collected Information

When you visit, use, join, or interact with our Service, we may automatically collect certain information, including:

• Usage Details: Pages or features you use, time spent, navigation paths, and any content you view or generate in the Service.
• Device & Browser Data: IP address, browser type, operating system, device identifiers, and region settings.
• Cookies & Similar Technologies: We may use cookies or similar tools to recognize you, remember your preferences, and enhance your experience.

You can control or disable cookies through your browser settings, as well as block, modify, or hide your IP address or other device or browsing data. However, doing so may affect certain functionalities of the Service.

When you choose to sign up for and become a member of the Service or purposefully use or interact with our Service, we may request or require the collection of certain information, including:

• Account Information: When you create an account or join the Service, we may collect your name, email address, username, and any other details necessary to facilitate account creation and user access.
• Personal Identification or Personally Identifiable Information: This may include data such as government-issued identification documents or identification numbers, proof of identity documents, tax information such as taxpayer identification numbers or tax returns, or other personal identification or verification data, when required for compliance with legal or regulatory requirements, such as KYC or AML procedures.
• Financial Data: For specific features or access to services, we may collect financial information such as bank account, digital payment account, or cryptographic wallet account details or transaction history. Sensitive payment details are processed through secure third-party platforms.
• Preferences and Settings: Information that you provide to customize your user experience or preferences on the Service's platform.
• Feedback and Communications: Information you voluntarily share with us, such feedback submissions, survey responses, member communications and polling, or support requests.
• Other Content You Provide: Information you submit or upload to the Service and its platform, such as communications, documents, written text, or any other materials relevant to the Service's functionality and your interaction with and use of the Service.
• Transaction Data: Information related to transactions performed through or due to the Service, such as amounts and dates, excluding sensitive payment details.

This information is collected to provide and enhance the functionality of our Service, deliver a personalized experience, and improve overall user satisfaction.

2. Information We Do Not Collect

• No Sensitive Personal Data: We do not intentionally or automatically collect data about your race, ethnicity, religious or political views, genetic data, or sexual orientation. We do not automatically collect health or biometric data. However, if you choose to connect fitness or health integrations (such as Strava, Fitbit, Oura, or WHOOP), those services may share fitness activity and biometric data (such as age, weight, height, or biological sex) with us per your explicit authorization. You can disconnect these integrations at any time through your account settings.
• No Direct Payment Info: We do not process or store credit card numbers, digital and cryptographic wallet private keys or payment accounts, or other sensitive payment details on the Service (though certain related data may be collected through secure third-party platforms).

3. How We Use Your Information

• To Provide & Maintain the Service: We use your information to run artificial intelligence (AI) analyses, tailor recommendations, and ensure the Service's platform functions smoothly.
• Improving the Service: Usage analytics help us fix bugs, enhance features and design, and better understand users' needs.
• Communications: We may send you updates, respond to inquiries, or deliver necessary notifications about changes to our Service or policies.
• Legal Compliance: We may use or disclose data as required by law, regulatory obligations, or to protect our rights, property, or safety.
• Business Operations: We may use your information for internal business purposes such as auditing, data analysis, and research to improve our products, services, and customer communications.

4. Third-Party Services

Our Service integrates with the following third-party services to provide functionality. These third parties may receive your information only as necessary to provide these services to us.

• AI Processing Providers: Our AI system routes requests to multiple providers depending on the task. These include OpenAI, Anthropic (Claude), and Google (Gemini). Your prompts, messages, and relevant context are sent to these providers for AI model inference. Strava-connected fitness analysis is processed for the requesting user only and is not used to train models, create embeddings, or improve shared models. Each provider processes data according to their respective data handling policies.
• Pinecone: Vector database service used for semantic search and retrieval across your uploaded files, memories, and conversation history. Stores vector embeddings (numerical representations) of your content.
• SendGrid: Email delivery service for notifications, team invitations, and report completion alerts.
• Linq: SMS messaging service that delivers text messages when you use ADIN via SMS. Receives your phone number and message content.
• Magic: Passwordless authentication service that manages secure login via email.
• Stripe: Payment processing service for subscription billing and transaction management. Sensitive payment details are handled directly by Stripe and are not stored on our servers.
• Vercel: Hosting and infrastructure provider for our web application, including analytics (page views and feature usage events) and performance monitoring. No personally identifiable information is collected by Vercel Analytics.
• Upstash: Managed caching infrastructure used to improve Service performance and responsiveness.
• Google Cloud Storage: Secure document storage for uploaded materials and generated reports.
• Integration Providers: If you connect external tools (such as Gmail, Notion, Linear, GitHub, Slack, Spotify, Discord, or others), those services may receive relevant data per your authorization. If you connect fitness or health integrations (such as Strava, Fitbit, Oura, or WHOOP), those services may share fitness activity and biometric data with us. For Strava specifically, ADIN uses read-only activity data for same-user analysis, and Strava-derived outbound delivery is limited to the same user's own email/SMS destinations. You can disconnect any integration at any time through your account settings, which immediately revokes access.

Each third-party service provider has its own privacy policy governing how they handle user data. We encourage you to review these policies when interacting with these services through our platform.

5. Google API Services User Data

Our Service allows you to connect your Google Account to access Google services such as Gmail, Google Calendar, Google Docs, Google Sheets, and Google Slides. When you authorize these connections through Google's OAuth consent flow, we access, use, store, and share your Google user data as described below.

What Google Data We Access

Depending on which integrations you connect and the permissions you grant, we may access:

• Gmail: Email messages, metadata (sender, recipient, subject, date), attachments, labels, and drafts — to display your inbox, search emails, draft replies, and send messages on your behalf within the Service.
• Google Calendar: Calendar events, attendee information, and availability — to display your schedule, check availability, and create or modify events.
• Google Docs: Document content — to export or create documents from the Service.
• Google Sheets: Spreadsheet data, cell values, and formulas — to read, write, and create spreadsheets from the Service.
• Google Slides: Presentation content, slides, and speaker notes — to create and edit presentations from the Service.

How We Use Google Data

Google user data is used solely to provide the integration features you have requested within the Service. For example, displaying your emails so you can manage them, showing your calendar so you can schedule meetings, or exporting content to Google Docs. We do not use Google user data for advertising, marketing to you, or any purpose unrelated to the features you have authorized.

How We Store Google Data

We store OAuth access tokens and refresh tokens securely using encryption at rest to maintain your authorized connection. Google user data (such as email content or calendar events) is accessed in real time when you use the relevant features and is not permanently stored on our servers beyond transient caching necessary to deliver the Service.

How We Share Google Data

We do not sell, rent, or share your Google user data with third parties except as strictly necessary to provide the Service (for example, sending your email content through our AI infrastructure to generate a draft reply you requested). We do not transfer Google user data to advertising platforms, data brokers, or information resellers.

Google API Services Limited Use Disclosure

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in the Service's interface.
• We do not transfer Google user data to third parties unless it is necessary to provide or improve user-facing features, for security purposes, to comply with applicable laws, or as part of a merger or acquisition with the user's explicit consent.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data unless we have obtained your affirmative consent to view specific data, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data is aggregated and anonymized for internal operations.

Revoking Google Access

You can disconnect your Google Account from the Service at any time through your account settings within the Service. You may also revoke our access to your Google data by visiting your Google Account permissions page and removing access for ADIN. Upon revocation, we will cease accessing your Google data and delete any stored tokens associated with your connection.

6. Data Security

We employ industry-standard security measures, including encryption, secure servers, and access controls, to safeguard your information. Despite our best efforts, no security system is foolproof, and we cannot guarantee the absolute security of your information.

In the event of a data breach that compromises your personal information, we will notify affected users in accordance with applicable laws and regulations. This notification will typically include information about what occurred, what information was affected, steps we're taking to investigate and prevent future breaches, and recommendations for protecting yourself.

7. Data Retention

We keep your information only as long as reasonably necessary to fulfill the purposes described above, or as required by law or legitimate business needs. Once we no longer need the data, we will securely delete or anonymize it.

8. User Rights: Data Removal & More

Self-Service Data Controls

You can manage your data directly within the Service without needing to contact us:

• Export: Download your conversations, AI-learned memories, and file metadata as JSON files from Settings > Data Controls.
• View & Manage Memories: Review every fact the AI has learned about you and delete individual memories from Settings > Personalization > Memories. You can also ask ADIN to forget specific information during a conversation.
• Clear Data: Selectively clear all conversations, all memories, or all uploaded files from Settings > Data Controls.
• Delete All Data: Permanently delete all your conversations, memories, and files at once from Settings > Data Controls.
• Delete Account: Permanently delete your entire account and all associated data from Settings > Security.
• Disconnect Integrations: Revoke access for any connected integration at any time through your account settings, which immediately stops data access.

Additional Rights

• Access & Updates: In addition to the self-service tools above, you may contact us at the email address further below to review, correct, or update your information.
• Deletion Requests: You may request that we delete your data. We will honor such requests unless we need the information for any legal or business reasons.
• Opt-Out: You can opt out of receiving certain emails from us by following available unsubscribe instructions or by contacting us directly.

Please note that some Service features may require certain user data for access, functionality, and use. If you ask us to delete or restrict your data, you may lose access to certain parts of the Service.

9. Children

Our Service is not intended for individuals under the age of 18 (or the equivalent minimum age in certain jurisdictions). We do not knowingly collect personal data from children. If you are a parent or legal guardian or custodian, and believe your child has provided us with personal data, please contact us, and we will promptly remove such data.

10. EU & UK Users

If you are located in the EU or the UK, you may have certain rights under the EU General Data Protection Regulation (GDPR) or the UK GDPR, such as:

• Right to Access: Obtain a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Limit how we process your data.
• Right to Data Portability: Receive personal data you provided to us in a structured, commonly used, machine-readable format.
• Right to Object: Object to certain data processing.

To exercise these rights, please contact us at the email address further below. We will respond within a reasonable timeframe in accordance with applicable law.

11. California Disclosures

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: The categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information (subject to certain exceptions).
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.

California residents may also request a list of third parties to whom we disclosed personal information for direct marketing purposes in the preceding calendar year. To exercise any of these rights, please contact us as described below.

12. International Transfers

We operate in the United States. If you are located outside of the U.S., your information may be transferred to and processed in the U.S. or other jurisdictions that may not have the same data protection laws as your home country. By using our Service, you consent to these transfers.

13. Do Not Track Signals

Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, our Service does not respond to browser “Do Not Track” signals, but we continue to review new technologies and may adopt a standard once one is created.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service's platform or by sending an email, and modify the “Last Updated” date above accordingly.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Thank you for taking the time to read our Privacy Policy. We are committed to respecting your privacy and keeping you informed about how we handle your information.