Reducto Privacy Policy
This Privacy Policy explains how Reducto, Inc. ("Reducto," "we," "us," or "our") collects, uses, discloses, and retains personal information, and the choices and rights you have. It also serves as our notice at collection for California residents. Capitalized terms not defined here have the meanings in our Terms of Service at https://reducto.ai/terms.
1. Who This Policy Covers
1.1 People and Activities Covered
This policy applies to personal information we collect about:
(a) visitors to our websites, including reducto.ai and its subdomains (the "Website");
(b) people who interact with our official social media pages;
(c) business contacts, prospects, and event attendees we interact with through our sales and marketing activities and tools, such as our CRM and sales calling, email, and meeting tools;
(d) people who use our web-based products, such as Studio and Workflows, and other web-based products we offer from time to time, on a Free or Standard (pay-as-you-go) plan (the "Web-Based Services"); and
(e) job applicants and candidates (see Section 9).
1.2 Customers With a Signed Agreement
When we process Content for a customer under a Signed Agreement, we act as that customer's service provider or processor. The customer's privacy notice, not this policy, governs that Content, and we do not use it to train our models unless the Signed Agreement allows it. If your information was submitted to Reducto by one of these customers, please contact that customer. This policy still covers the account, billing, and sales information we collect about people at those customers.
1.3 What This Policy Does Not Cover
This policy does not cover our employees and contractors, who receive a separate notice, or third-party websites, platforms, and services, including social media platforms, which have their own privacy policies.
2. Information We Collect
2.1 Information You Give Us
We collect information you provide when you create an account, contact us, fill out a form, register for an event or webinar, buy a paid plan, request support, or apply for a job. This includes your name, email address, phone number, company, job title, password, billing information, and the contents of your messages. Our payment processor collects your payment card and bank account details. We do not receive or store full card or bank account numbers. We see only limited details, such as card brand, last four digits, and expiration date.
2.2 Content You Upload
When you use the Web-Based Services, we collect the Content you upload and the Output we generate. Content can include any type of personal information, including information about people other than you. We do not ask for personal information in Content, and our Terms prohibit uploading sensitive categories of data on Free and Standard plans. We process whatever Content you choose to upload.
2.3 Information Collected Automatically
When you use the Website or Web-Based Services, we and our partners collect information about your device and activity, such as IP address, browser and device type, pages viewed, links clicked, referring URLs, dates and times of access, and approximate location derived from your IP address. In the Web-Based Services, we also collect product usage data and logs, such as features used, jobs run, and errors. This usage data is linked to your account. We collect this information using cookies, pixels, software development kits, session replay, and similar technologies (see Section 5).
2.4 Information From Other Sources
We collect information about you from:
(a) data providers and enrichment services, such as business contact details, company information, and job title;
(b) advertising and social media platforms, such as information from lead forms and data about how you engaged with our ads;
(c) visitor identification providers, which may identify you or your company when you visit our Website;
(d) recruiters, job boards, and references, for job applicants;
(e) event co-hosts, partners, and people who refer you to us; and
(f) public sources, such as company websites and professional networking profiles.
2.5 Sales Calls and Meetings
We use sales and marketing tools to call, email, and meet with business contacts and to keep records of those interactions. We use CRM, sales engagement, and meeting tools for these purposes. With notice, we may record and transcribe sales calls and meetings and use tools to summarize them.
3. How We Use Information
3.1 Purposes
We use personal information to:
(a) provide, operate, and maintain the Services, including creating and managing accounts;
(b) process payments and manage billing;
(c) respond to requests and provide customer support;
(d) protect the security and integrity of the Services, and detect and prevent fraud, abuse, and violations of our Terms;
(e) train, test, and improve our AI models and Services, as described in Section 3.2;
(f) analyze how people use the Website and Services and develop new products and features;
(g) market our products, including through email, sales calls, events, and advertising, and measure the effectiveness of our marketing;
(h) show you ads on other websites and platforms based on your activity on our Website (cross-context behavioral advertising);
(i) identify businesses and people who may be interested in our products and research prospective customers;
(j) evaluate job applicants and manage recruiting;
(k) comply with law, respond to legal process, and enforce our agreements; and
(l) carry out a merger, acquisition, financing, or sale of assets.
We may also create de-identified or aggregated information and use it for any lawful purpose. When we do, we will maintain it in de-identified form and not attempt to re-identify it, except as permitted by law.
3.2 AI Model Training
For Free and Standard plans, we use Content, Output, and related usage data to train, test, and improve our AI models and Services. Because Content can include personal information, this training can involve personal information. We do not remove or de-identify personal information in Content before training. Our team reviews Content and selects it for training, so Reducto personnel can see Content and any personal information in it. We may use third-party AI model providers to process Content, and we configure them for zero data retention. Once Content has been used for training, we cannot remove its effect on models already trained. You can ask us to delete your Content by emailing support@reducto.ai. We delete it and remove it from our training datasets within 30 days of your request. We do not use Content submitted under a Signed Agreement for training unless the Signed Agreement allows it.
4. How We Disclose Information
4.1 Categories of Recipients
We disclose personal information to:
(a) Service providers and contractors that process it on our behalf, such as cloud hosting and infrastructure providers, AI model and compute providers, payment processors and billing tools, CRM and sales engagement tools, call recording and transcription tools, email and marketing tools, analytics providers, error monitoring and session replay providers, support chat providers, lead form providers, scheduling and event tools, and recruiting platforms.
(b) Advertising, analytics, and visitor identification partners, such as social media and search advertising networks and visitor identification services, which collect information through technologies on our Website for advertising, measurement, and visitor identification. These disclosures may be a "sale" or "sharing" under California law (see Section 8).
(c) Social media platforms, when you interact with our pages or ads on those platforms.
(d) Your organization, if you use the Services through an organization workspace. The workspace administrators may be able to access your account information and Content.
(e) Government authorities, courts, and other parties, when we believe disclosure is required by law or necessary to protect the rights, property, or safety of Reducto, our users, or others.
(f) Parties to a corporate transaction, such as a merger, acquisition, financing, or sale of assets, and their advisors.
(g) Others with your consent or at your direction, such as when you connect a third-party integration.
5. Cookies, Tracking, and Your Choices
5.1 Cookies and Similar Technologies
We and our partners use cookies, pixels, and similar technologies on the Website for site operation, analytics, error monitoring and session replay, support chat, and advertising and visitor identification. Some of these partners collect information about your online activities over time and across different websites. Visitor identification tools run only on the Website. Studio and our sign-in and sign-up pages also use advertising pixels, which load only if you accept the Advertising category, and we report account sign-ups to those advertising partners. These partners receive the page address and title and the referring page. Studio page addresses can include internal identifiers, such as organization, pipeline, and job IDs. We do not send Content or file names to advertising partners. Workflows uses analytics and session replay only, and session replay masks text and form inputs. You can manage optional categories using Cookie Settings or Your Privacy Choices in the Website footer and the Web-Based Services.
We use the following providers and technologies on the Website:
(a) PostHog for analytics. Website analytics requests are sent through a first-party proxy and are controlled by the Analytics category.
(b) Sentry for error monitoring and, when you accept the Functional category, session replay to help diagnose errors and improve the Website.
(c) Meta, LinkedIn, Google Ads, Reddit, X, Influ2, and Vector for advertising and visitor identification. These technologies are controlled by the Advertising and visitor-identification category.
(d) Pylon for support chat, controlled by the Functional category.
(e) Default.com to provide and operate lead forms. The form provider's software is loaded when a lead form is used. Its separate advertising pixel is not loaded by the Website.
5.2 Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control ("GPC") signal, we treat it as a request to opt out of the sale and sharing of your personal information. We apply it to the browser that sends the signal, on the Website, in Studio, and on our sign-in pages, by keeping the Analytics and Advertising categories off unless you later turn them on. We do not link this choice to your account, so it does not carry over to other browsers or devices. To opt out on another browser or device, enable GPC there or use Your Privacy Choices. We do not respond to browser "Do Not Track" signals other than GPC.
5.3 Marketing Choices
You can unsubscribe from marketing emails by using the link in any marketing email. You can ask us to stop calling you by telling us on the call or emailing support@reducto.ai. We may still send you service and transactional messages.
6. How Long We Keep Information
We keep personal information only as long as reasonably necessary for the purposes described in this policy, including to provide the Services, comply with law, resolve disputes, and enforce agreements. We decide how long to keep each category using these criteria:
| Information | How long we keep it |
|---|---|
| Account information | While your account is open, and afterward as long as needed for the purposes in Section 3, to meet legal obligations, and to resolve disputes |
| Content and Output (Free and Standard) | Until you ask us to delete it. We complete deletion requests within 30 days. Information already used for training remains in trained models. |
| Billing and transaction records | As long as required by tax, accounting, and other laws |
| Product usage data and logs | As long as needed to operate, secure, and improve the Services and to train our models |
| Website analytics, cookie, and advertising data | For the lifetime of the cookie or similar technology set by us or our partners, and as long as needed for analytics and advertising purposes |
| Sales and marketing records, including call recordings | While we have an active business relationship with you or a reasonable prospect of one, unless you ask us to delete them sooner |
| Support communications | As long as needed to resolve your request and keep a support history while your account is open |
| Job applicant information | For the hiring process, and afterward as long as required by employment record-keeping laws or needed to consider you for future roles |
7. Security
We use administrative, technical, and physical safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee the security of information you send us.
8. California Privacy Rights
8.1 Personal Information We Collect, Disclose, Sell, and Share
In the past 12 months, we have collected the following categories of personal information. For each category, the table shows examples, the categories of sources, and whether we sold or shared it. We collected each category for the purposes in Section 3 and disclosed each category to service providers and contractors for those purposes, as described in Section 4.1(a). Retention periods are in Section 6.
| Category | Examples | Sources | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, email, phone number, IP address, account ID, cookie IDs | You; your device; data providers; ad and social platforms; visitor identification providers; recruiters | Yes, to advertising, analytics, and visitor identification partners |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, address, phone number, billing information | You; payment processor | No |
| Commercial information | Plans used, purchases, usage and billing history | You; your use of the Services | No |
| Internet or other electronic network activity | Browsing and click activity, pages viewed, product usage, logs | Your device; our partners | Yes, to advertising, analytics, and visitor identification partners |
| Geolocation data | Approximate location derived from IP address | Your device | Yes. Advertising and visitor identification partners receive your IP address directly from your browser and may derive approximate location from it |
| Sensory data | Call and meeting recordings | You, during calls and meetings | No |
| Professional or employment-related information | Job title, company, work history, resume details | You; data providers; public sources; recruiters | No |
| Education information | Education history | Job applicants; recruiters | No |
| Inferences | Interest in our products, company fit | Our analysis; data and visitor identification providers | No |
| Protected classification characteristics | Voluntary demographic information from job applicants | Job applicants | No |
| Sensitive personal information | Account login credentials | You | No |
| Content | Any category above, depending on what users upload | Users of the Web-Based Services | No |
8.2 Sale and Sharing
We do not sell personal information for money. We do allow advertising, analytics, and visitor identification partners to collect identifiers and internet activity through our Website, so we can show ads on other sites and platforms, measure our ads, and identify businesses interested in our products. California law may treat this as a "sale" or "sharing." You can opt out using Your Privacy Choices in the Website footer or by enabling GPC. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
8.3 Sensitive Personal Information
We use and disclose sensitive personal information only for purposes permitted under the CCPA regulations without a right to limit, such as using login credentials to give you access to your account. We do not use or disclose sensitive personal information to infer characteristics about you.
8.4 Your Rights
If you are a California resident, you have the right to:
(a) know what personal information we have collected about you, including the categories of personal information and sources, our purposes for collecting, selling, or sharing it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we have collected about you;
(b) delete personal information we collected from you, subject to certain exceptions;
(c) correct inaccurate personal information we maintain about you;
(d) opt out of the sale or sharing of your personal information; and
(e) not be retaliated against for exercising your privacy rights, including if you are a job applicant.
8.5 How to Exercise Your Rights
To submit a request to know, delete, or correct, email support@reducto.ai with the subject line "Privacy Request." To opt out of sale or sharing, use Your Privacy Choices in the Website footer or enable GPC in your browser.
Verification. We verify requests to know, delete, or correct by matching information you provide, such as your name and email address, with information we have. If you have an account, we may ask you to confirm the request from your account email or by logging in. For requests for specific pieces of information, we may ask for more information. We use the information you provide only to verify and respond to your request. Opt-out requests do not require verification.
Authorized agents. An authorized agent may submit a request for you. We may require signed written permission from you, and may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.
Responses. We will respond within the time required by law. If we deny a request in whole or in part, we will explain why.
8.6 Contact for Privacy Questions
Questions about this policy or our privacy practices can be sent to support@reducto.ai.
9. Job Applicants and Candidates
If you apply for a job with us or a recruiter introduces you to us, we collect information such as your contact details, resume, work and education history, interview notes, references, and, if you choose to provide it, demographic information for equal opportunity reporting. We collect it from you, recruiters, job boards, references, and public professional profiles. We use it to evaluate your application, communicate with you, comply with law, and improve our recruiting. We disclose it to recruiting platforms and other service providers, and we do not sell or share it. The California rights in Section 8 apply to applicants.
10. Children
The Services are not directed to children, and you must be at least 18 years old to use them. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
11. International Users
We are based in the United States and process information in the United States. We do not block access to the Services from other countries. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. For Free and Standard plans, we and our service providers process Content in the United States. Processing outside the United States, such as in the European Union, is available only to customers whose Signed Agreement requires it.
12. Changes to This Policy
We may update this policy from time to time. We will post the updated policy on the Website with a new "Last updated" date. If we make a material change, we will notify registered users by email or in the Services before the change takes effect.
13. Contact Us
Reducto, Inc., 77 Geary Street, Floor 4, San Francisco, CA 94108, Attn: Privacy, support@reducto.ai.
