1. Scope
This policy explains how Dialed ("we", "us") handles personal information when you visit dialedcpg.com, contact us, or use the Dialed service (the "Service"). Dialed is a business tool. For information our customers put into the Service or make available through connected accounts, the customer is the controller and Dialed acts as its processor, under our Terms of Service and any data processing agreement.
2. What we collect
- Account information: name, work email, company, role, phone if given, and sign-in details.
- Customer content: the brands, items, programs, samples, purchase orders, invoices, files, contacts and notes you add.
- Connected account content: when a user connects Microsoft 365, Google Workspace or another source, the messages, attachments, calendar events and files that the user authorizes Dialed to read, which can include personal information about the people they correspond with.
- Voice and chat: what you say or type to Pearl, and the resulting transcripts.
- Billing information: plan and payment status. Card details are collected and held by Stripe, not by Dialed.
- Usage and device data: pages viewed, actions taken, browser type, IP address and timestamps, used for security and to improve the Service.
- Website forms: what you send when you book a walkthrough, contact us or request a plan.
3. How we use it
- To provide the Service: keep your records, show them to the seats you authorize, and let Pearl summarize, organize and draft on your behalf.
- To secure the Service: authenticate users, enforce permissions, detect abuse and keep audit logs.
- To support and bill you, and to send service notices.
- To improve the Service using aggregated usage information.
- To reply to website inquiries and, where permitted, tell you about Dialed. You can opt out of marketing at any time.
We do not sell personal information, and we do not use customer content or connected account content to train AI models for anyone other than the customer it belongs to.
4. Pearl and connected accounts
Pearl reads connected accounts only within the permissions the user grants, and only to serve that user's workspace. Pearl drafts messages; a person approves every message before it is sent. A user can disconnect an account at any time, and Dialed then stops reading it. Customers can ask us to delete content previously read from a connected account.
Content sent to our AI and voice providers is processed to return a response to you, under agreements that do not permit them to use it to train their models.
5. Subprocessors
We share personal information with service providers that process it for us under written agreements:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage and server functions | United States |
| Vercel | Web hosting and delivery | United States |
| Anthropic | AI models that power Pearl | United States |
| ElevenLabs | Voice for Pearl (speech to text and text to speech) | United States |
| Resend | Transactional email, such as sign-in links and notices | United States |
| Stripe | Payments and billing | United States |
| EasyPost | Shipping labels and tracking for samples | United States |
| Microsoft | Connected Microsoft 365 accounts (mail, calendar, files), when a user connects one | United States |
| Connected Google Workspace accounts, when a user connects one | United States |
We will update this list before adding a new subprocessor that handles customer content.
7. Retention
We keep customer content for as long as the customer's workspace is active. After a workspace closes, customers can export their data for 30 days, after which we delete it from active systems within a reasonable period and from backups on their normal rotation. We keep billing records as long as the law requires.
8. Security
Data is encrypted in transit and at rest. Row-level security in the database limits each seat to what its role and brands allow, and sensitive actions are recorded in an audit log. See our security page for details.
9. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. If your information is in a customer's workspace, please contact that customer first; we will help them respond. To make a request of Dialed directly, use our contact page. We will not discriminate against you for exercising these rights.
10. International transfers
Dialed and its subprocessors process data in the United States. Where the law requires, we use appropriate safeguards such as standard contractual clauses for transfers.
11. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
13. Changes and contact
We will post changes to this policy here and update the date above; for material changes we will notify customers in advance. Questions can be sent through our contact page.