Privacy policy

This Privacy Policy explains how Dialed collects, uses, discloses, and protects personal information when you visit our websites, use our applications and services, communicate with us, or connect a business system to Dialed (collectively, the “Service”). The Service is operated by Float Capital, Inc., 5029 Emmalani Dr, Princeville, HI 96722 (“Dialed,” “we,” “us,” or “our”).

When a customer uses Dialed to process information about its staff, cafés, suppliers, or other business contacts, that customer controls why and how the information is processed. Dialed processes it on the customer’s instructions as a service provider or processor. The customer’s own privacy notice applies to that information. For account, website, billing, security, and support information that we use for our own business purposes, Dialed acts as the controller or business.

Depending on how you use the Service, we collect:

• Account and profile information, such as your name, work email, business, role, authentication status, and preferences.
• Customer Data, such as business communications, orders, documents, product catalogs, customer records, prices, fulfillment details, invoices, payments, corrections, and approval history.
• Connection information, such as the systems and accounts you connect, provider identifiers, granted permissions, connection status, and synchronization events. Credentials and tokens are kept by authorized credential providers or protected secret stores and are not given to AI systems.
• Billing information, such as plan, invoice, payment status, and transaction identifiers. Our payment processor handles full payment-card details.
• Usage and device information, such as pages and features used, browser and device type, IP address, timestamps, diagnostic events, and security logs.
• Communications, including support requests, sales conversations, survey responses, and feedback.

We receive information from you and your authorized users, from the business systems you choose to connect, from your organization’s administrator, automatically when you use the Service, and from service providers that support authentication, billing, communications, and security. We process connected-system information only within the access you authorize and the features you enable.

We use information to:

• provide and operate the workflows you configure;
• authenticate users, enforce permissions, and keep tenants isolated;
• read and structure business communications and documents;
• prepare, validate, approve, execute, and audit actions under your rules;
• connect with your accounting, email, commerce, shipping, and production systems;
• provide support, maintain the Service, and diagnose failures;
• protect the Service, our customers, and others from misuse or security threats;
• manage subscriptions and communicate about the Service;
• meet legal obligations and enforce our agreements; and
• measure and improve reliability using synthetic, aggregated, or fully anonymized data.

Dialed uses AI providers to perform bounded tasks such as classifying communications, extracting order fields, drafting text, and helping match records. We send only the information reasonably needed for the task. Customer Data is not used to train AI models, and we do not authorize our model providers to use it for their own model training.

Evaluation and test datasets contain only synthetic or fully anonymized records. We may also use aggregated service information that cannot reasonably identify a customer or person to test and improve Dialed. For more on safeguards, limitations, and human oversight, read our AI policy.

We disclose information only as needed in these circumstances:

• Your direction. We exchange information with the systems, recipients, and people you direct us to use, including when an approved workflow sends or records an action.
• Service providers. We use providers for hosting, databases, AI processing, authentication, credential custody, payments, email delivery, monitoring, and support. They may process information only to provide services to us under contractual restrictions.
• Your organization. Account administrators and authorized users may access information according to the permissions your organization assigns.
• Legal and safety reasons. We may disclose information when required by law or when reasonably necessary to protect rights, safety, security, or the integrity of the Service.
• Business transactions. Information may transfer as part of a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use Customer Data to target third-party advertising.

Depending on the features enabled for your account, the providers that help us operate Dialed include:

• Vercel for the public website and web application;
• Fly.io for API, worker, and isolated agent hosting;
• Supabase for database, authentication, storage, and protected credential services;
• Anthropic and OpenAI for bounded AI processing;
• Composio for authorized Google and Gmail connections;
• Stripe for subscription billing and payment processing;
• Sentry and Langfuse for error, performance, and AI-workflow observability; and
• Loops for Dialed account and service email.

Customer-directed systems such as Google Workspace, QuickBooks, Shopify, shipping, or production platforms also receive information when you connect them or approve a workflow. Provider use can vary by configuration. We will update this disclosure before a material new processing purpose takes effect.

We use essential cookies and similar storage to keep you signed in, remember settings, route traffic, and protect the Service. We may use limited analytics to understand website and product performance. We do not currently use cross-context behavioral advertising technologies. You can control cookies through your browser, though blocking essential cookies may prevent the Service from working. We will update this policy and provide legally required choices before adding materially different tracking practices.

We keep information only as long as reasonably needed to provide the Service, maintain security and audit records, meet legal obligations, resolve disputes, and enforce agreements. Retention depends on the type of record, your configuration and contract, the connected system, and legal requirements. Audit, billing, fraud-prevention, and backup records may be kept longer than active workflow content.

You can disconnect integrations and request account or Customer Data deletion by contacting us. We will delete or de-identify eligible information within a reasonable period and under our contractual obligations, except where we must retain it by law or for legitimate security, audit, or dispute purposes. Deletion from encrypted backups may follow the backup lifecycle.

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information we process. These include tenant isolation, access controls, protected credential custody, encryption in transit and at rest where supported, monitoring, audit trails, and a system design that separates AI reasoning from authority to execute actions.

No online service can guarantee absolute security. You are responsible for safeguarding your account, using available authentication controls, limiting user permissions, and notifying us promptly about suspected unauthorized access. See our security pagefor a plain-language overview.

Dialed and our providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where required, we use recognized safeguards for international transfers, such as contractual protections, and make additional information available on request.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

To make a request about information Dialed controls, contact us using the address below. We may need to verify your identity and authority. If your request concerns information a Dialed customer controls, contact that customer first; we will assist them as required. You may use an authorized agent where local law permits.

You can unsubscribe from non-essential marketing email using the link in the message. We may still send account, security, billing, and service notices.

Dialed is a business service and is not directed to children under 18. We do not knowingly collect personal information from children through the Service. If you believe a child has provided information to us, contact us so we can review and delete it where appropriate.

We may update this policy as our practices, Service, or legal obligations change. We will post the updated policy with a new effective date. If a change materially affects how we use personal information, we will provide additional notice before it takes effect when required.

Privacy questions and requests can be sent to Float Capital, Inc., 5029 Emmalani Dr, Princeville, HI 96722, with a copy to privacy@withdialed.com. Please write “Privacy request” in the subject line so we can route it correctly.