Your information
deserves clarity.

1. Who we are and what this policy covers

ADVANTAGE AI LLC, a Delaware limited liability company, operates Advantai. In this policy, “we”, “us” and “our” refer to that company. This policy covers advantaico.com and the Advantai workspace at user.advantaico.com, including account administration, support and connected workflows.

We determine how information is used to operate the website, manage our customer relationships and protect the service. For information an organization places in its workspace, that organization generally determines the purpose of processing and we process it to provide its requested service. Its agreement and privacy notices also apply.

2. Information we process

Account and business information can include your name, work email, organization, role, invitation status, permissions, authentication records, subscription details and support communications. Administrators may provide some of this information for you. Billing records may include billing contacts and payment-provider customer, subscription and payment-status identifiers.

Workspace content can include CRM contacts and companies, relationship notes, property records, transaction details, uploaded documents, extracted text, portfolio and lease information, research prompts, scenario assumptions, generated results and client-sharing activity. These records may contain information about you or other people.

Technical records can include IP addresses, browser and device information, requested URLs, timestamps, response status, session identifiers, security events, errors and service-usage records. Help searches, guide conversations and feedback can produce records used for support and reliability. Connected services can return business contacts, company and property information, source links and related research evidence.

3. Website visits, cookies and browser storage

The marketing website currently does not accept payments or enquiry-form submissions and does not use third-party analytics or advertising pixels. Its pricing calculator works in your browser. Opening a “Coming soon” message does not create an account or submit an order.

Hosting and security services still process technical request information to deliver pages, manage traffic, diagnose faults and protect the site. An absence of advertising trackers does not mean that a visit produces no personal data.

The workspace uses cookies and browser storage for authentication, session continuity and interface preferences. Blocking necessary storage can prevent sign-in or disrupt workspace functions. The marketing site does not use browser Do Not Track signals to change its behavior because it does not run cross-site advertising tracking. Connected external websites have their own practices.

4. Why we use information

We use information to provide and administer accounts; enforce permissions; store, search and process workspace content; perform research and requested analyses; enable client collaboration; manage billing where enabled; answer support requests; and send account, security and service communications.

We also use relevant technical and operational records to detect abuse, investigate failures, maintain reliability, resolve disputes and meet applicable legal obligations. Where a law requires a legal basis, the applicable basis depends on the activity: performing a contract with you, legitimate interests in operating and securing a business service, compliance with law, or consent where required. An organization supplying personal data remains responsible for its own lawful basis.

5. AI, research and connected services

When you run an AI or research workflow, relevant prompts, document extracts, business records and context may be sent to the configured model, research or processing providers so they can perform the requested task. Generated outputs, sources and execution records may be saved in your workspace. Optional voice functions can process microphone audio and conversation content when used.

Provider access and processing depend on the services your organization enables and the applicable provider terms and settings. Do not assume that every provider has identical retention or model-training rules. Ask your administrator about the configured services before submitting restricted information. We do not promise that an AI result is accurate, complete or suitable for a decision about an individual.

6. Who receives information

Information is available to authorized people within your organization and to clients or collaborators with whom it is shared through the workspace. Administrators can manage memberships, permissions and connected services. Review recipients and sharing settings before sharing a record or document.

We use service providers for hosting and network delivery, databases and file storage, authentication, transactional email, AI and document processing, research integrations, support and payment processing where enabled. Website hosting is provided by Vercel; workspace infrastructure uses Supabase; transactional emails can be delivered through Resend; and Stripe processes payments where enabled. These providers receive information relevant to their functions. An external service you connect may also process information under its own agreement with you.

We may disclose information when required by applicable law or valid legal process, to protect legal rights and service security, or in connection with a merger, financing or transfer of the business, subject to applicable confidentiality and data-protection obligations. This policy does not authorize unrelated advertising uses of your workspace content.

7. Retention, deletion and account closure

Retention depends on the type of record, the purpose for which it is held, the customer agreement, workspace instructions, provider settings and applicable legal requirements. Relevant considerations include whether an account is active, whether a record is needed for security or billing, and whether a dispute or legal preservation obligation applies. There is no single retention period for every category.

Deleting a visible record, archiving an account, ending a subscription and removing all associated stored data are different actions. A deletion request can require review of related documents, generated records, backups and legal obligations. Ask your administrator or use workspace Help to request deletion or an explanation of the retention that applies to particular records.

8. Security and international processing

The service uses access controls, authenticated sessions and permission checks to limit access to workspace information. You are responsible for protecting your credentials, using available security features and managing authorized users. No online service can guarantee that unauthorized access, data loss or service disruption will never occur.

Information may be processed in the United States and other countries where the configured service providers operate. Those countries may have different privacy laws. Applicable transfer requirements depend on the customer, provider and processing location; this policy is not a promise of a particular data-residency region or transfer certification. Request information about the arrangements for your workspace before submitting data subject to location restrictions.

9. Your choices and regional rights

Depending on the law that applies and our role in processing, you may have rights to access or obtain a copy of personal data, correct inaccuracies, request deletion, restrict or object to processing, receive portable data, withdraw consent, or opt out of certain advertising, sales or significant automated profiling. These rights have conditions and exceptions; withdrawing consent does not invalidate earlier lawful processing.

Residents of applicable US states, including Delaware and California, may have state-specific rights where the relevant law covers the processing. Individuals in the EEA or UK may have rights under their applicable data-protection laws, including a right to object to processing based on legitimate interests and to complain to a supervisory authority. Mandatory privacy rights are not waived by using Advantai.

We may need to verify identity and authority before disclosing or changing data, including requests submitted through an authorized agent. We will explain a refusal or limitation where the law requires and provide any applicable appeal route. You may also complain to the competent privacy regulator. We will not unlawfully discriminate against someone for exercising an applicable privacy right.

10. Privacy requests and organizational accounts

If your information is held in an organization’s workspace, contact that organization’s administrator or use Help inside your existing Advantai workspace. Ask for a privacy review and describe the records, request and relationship to the organization. Your administrator can help route the request to the party responsible for the data. Do not send passwords, authentication codes or unnecessary sensitive documents.

When we process information on an organization’s instructions, we may need to refer a request to that organization or coordinate our response with it. An administrator’s decision to remove a user does not by itself remove the organization’s business records about that user.

11. Children and policy updates

Advantai is intended for adult business users, not children. Do not use it to submit children’s information or sensitive personal information that is unnecessary for an authorized business workflow. If you believe inappropriate information has been placed in a workspace, raise it with the administrator or through workspace Help.

We may update this policy as the service or its processing changes. We will post the revised version with its effective date and provide any additional notice or consent process required by applicable law. Changes do not remove rights that apply to information already collected.