Privacy Policy

1. Introduction

DEX Solutions ("DEX," "we," "us," or "our") operates the dexai.live platform and related services, including our Slack and Microsoft Teams integrations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By accessing or using DEX, you agree to this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, password, organization name, and role when you register.
• Dataset content: Files you upload (CSV, Excel, and other spreadsheet formats) and the data contained within them.
• Queries and messages: Questions you ask through the web interface, Slack, or Microsoft Teams, and the AI-generated responses.
• Payment information: Billing details processed through our payment provider. We do not store full credit card numbers on our servers.
• Communications: Messages you send to our support team or through feedback channels.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, analysis frequency, and interaction patterns.
• Device information: Browser type, operating system, device identifiers, and screen resolution.
• Log data: IP address, access times, referring URLs, and error logs.
• Cookies: Session cookies for authentication and preferences. See Section 8 for details.

2.3 Third-Party Integrations

When you connect DEX to third-party services (Slack, Microsoft Teams, Google Sheets, Excel Online, or databases), we receive access tokens and the data you authorize us to access. We only access data necessary to provide the requested functionality.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the DEX platform and its features.
• Process and analyze your datasets using AI to generate insights, charts, and projections.
• Respond to your queries in the web interface, Slack, and Microsoft Teams.
• Maintain conversation context for follow-up questions within messaging integrations.
• Send transactional communications (account confirmations, security alerts, billing notices).
• Improve our platform, develop new features, and fix bugs.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our Terms of Service.

4. AI Processing

DEX uses third-party AI models (currently Google Gemini) to analyze your data and generate insights. When you run an analysis or ask a question:

• Relevant portions of your dataset (column names, sample rows, statistics) are sent to the AI provider to generate responses.
• We send only the minimum data necessary to produce accurate analysis.
• AI providers process data according to their own privacy policies and data processing agreements.
• We do not use your data to train AI models. Your data is used solely to generate responses to your queries.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Within your institution: Team members within your organization can access shared datasets and analyses based on their assigned roles and permissions.
• Service providers: We share data with third-party providers who help us operate our platform (cloud hosting, AI processing, payment processing, email delivery). These providers are contractually obligated to protect your data.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority, or to protect rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (256-bit AES).
• Tenant isolation: Each institution's data is logically isolated. Users from one organization cannot access another organization's data.
• Audit trail: Every action (uploads, analyses, data access, team changes) is logged with timestamps and user attribution.
• Access controls: Role-based access control (Owner, Admin, Analyst, Viewer) governs who can view, edit, or manage data and settings.
• Authentication: Passwords are hashed using bcrypt. Sessions are managed with secure, signed JWT tokens.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account closure upon request.
• Datasets: Retained until you delete them or close your account.
• Analysis history: Retained until you delete individual analyses or close your account.
• Messaging conversations: Slack and Teams conversation context is automatically deleted after 24 hours.
• Audit logs: Retained according to your plan tier (30 days, 1 year, or unlimited).
• Backups: Encrypted backups may retain data for up to 90 days after deletion for disaster recovery purposes.

8. Cookies

DEX uses the following types of cookies:

• Essential cookies: Required for authentication and session management. These cannot be disabled.
• Preference cookies: Store your settings (theme, sidebar state). These are optional.

We do not use advertising or tracking cookies. We do not share cookie data with third parties for advertising purposes.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data portability: Request your data in a machine-readable format.
• Objection: Object to certain types of processing.
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@dexai.live.

10. International Data Transfers

Your data may be processed in countries other than your own. We use cloud infrastructure providers with data centers in multiple regions. Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements.

11. Children's Privacy

DEX is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of DEX after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: