Privacy Policy

This Privacy Policy describes how Dale AI, Inc. ("Dale AI," "we," "us," or "our") collects, uses, shares, and protects information in connection with our website (dale.app), our application, and related services (collectively, the "Services"). Dale AI provides an AI-powered voice and communication platform for real estate professionals.

This Privacy Policy applies to all users of our Services, including real estate agents and teams who create accounts ("Users"), individuals whose contact information is stored or managed within a User's account ("Contacts"), and visitors to our website ("Visitors"). Our Terms of Service and AI Policy are separate documents that also govern your use of the Services.

By using our Services, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

We collect information in three ways: information you provide directly, information we collect automatically, and information we receive from third parties.

1.1 Information You Provide

Account Information. When you create an account, we collect your name, email address, phone number, brokerage or company affiliation, and billing information.

Waitlist and Marketing. If you join our waitlist or subscribe to updates, we collect your name and email address.

CRM and Contact Data. Users import or manually enter contact information for their clients, leads, and sphere of influence ("SOI"). This may include names, phone numbers, email addresses, mailing addresses, transaction history, notes, property preferences, and relationship details. Users are responsible for ensuring they have the appropriate rights and consent to provide this information to Dale AI.

Communication Content. We process the content of calls, text messages, emails, and other communications handled through the Services, including messages between Users and their Contacts.

Voice Data. When calls are placed or received through our Services, we generate transcripts of those calls. If you have enabled call recording, we also collect audio recordings. See Section 3 for details.

Payment Information. We collect billing details to process subscription payments. Payment card information is collected and processed by our payment processor, Stripe, and is not stored on our servers.

Support Communications. We collect information you provide when contacting our support team, including email correspondence and call recordings if applicable.

1.2 Information We Collect Automatically

Usage Data. We collect information about how you interact with the Services, including features used, pages visited, actions taken, timestamps, and session duration.

Device and Browser Information. We collect device type, operating system, browser type, screen resolution, and unique device identifiers.

Log Data. Our servers automatically record information including IP address, access times, referring URLs, and system activity.

Performance Data. We collect crash reports, response times, and error logs to maintain and improve the Services.

1.3 Information from Third Parties

OAuth and Single Sign-On. If you authenticate through a third-party provider, we receive your name, email, and profile information as authorized by that provider.

Publicly Available Information. We may supplement Contact data with publicly available real estate transaction records, property data, or professional licensing information to enhance CRM functionality for Users.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Services, including making and receiving calls, sending messages, managing CRM records, and running automated workflows on behalf of Users.
• Process voice interactions, including transcribing calls, summarizing conversations, qualifying leads, and generating follow-up recommendations.
• Manage accounts and billing, including authentication, subscription management, and payment processing.
• Communicate with you, including sending service-related notices, responding to support requests, and providing product updates.
• Improve and develop the Services, including analyzing usage patterns, diagnosing technical issues, and developing new features.
• Ensure security and prevent abuse, including detecting fraud, enforcing our Terms of Service, and protecting the rights and safety of our users.
• Comply with legal obligations, including responding to lawful requests from government authorities.
• Send marketing communications, with your consent, about our products, features, and promotions. You can opt out at any time.

3. Voice Data: Transcripts and Optional Recordings

Voice data is central to our Services. This section explains how we handle it.

3.1 Transcripts and Recordings

Transcription is a core feature of the Service and cannot be disabled. All calls placed or received through Dale AI — whether between our AI assistant and a Contact, or bridged calls involving a User and a Contact — are transcribed in real time. Transcription is required for CRM processing, call summaries, follow-up generation, and lead qualification.

Audio recording is optional. Users may enable or disable call recording in their account settings. When recording is enabled, the full audio of calls is captured and stored. When recording is disabled, only the transcript is retained.

3.2 Consent and Disclosure

Call recording and transcription laws vary significantly by jurisdiction. It is solely your responsibility as a User to:

• Know and comply with all applicable federal and state laws regarding call recording, transcription, and wiretapping in every jurisdiction where you or your Contacts are located.
• Ensure that adequate notice and consent disclosures are provided to all call participants as required by applicable law.
• Configure your account settings and call handling practices in accordance with local law, including enabling any required disclosure announcements.
• Obtain and document any required consent before calls are recorded or transcribed.

Dale AI provides configurable disclosure settings that may assist with compliance, but selecting and using the correct settings for your jurisdictions is your obligation. Dale AI does not provide legal advice regarding call recording or transcription compliance.

3.3 How Voice Data Is Used

Call transcripts are used to:

• Provide real-time AI conversation capabilities during calls
• Generate post-call summaries for the User's CRM
• Qualify leads and extract key information discussed during calls
• Create follow-up action items and scheduling recommendations
• Improve AI performance and transcription accuracy

If call recording is enabled, audio recordings may additionally be used for playback review and quality assurance.

3.4 Voice Data Storage

• Transcripts are stored in encrypted form on secure servers within the United States for the duration of the User's account.
• Audio recordings (when enabled) are stored in encrypted form and retained according to the User's configured retention period (see Section 8).
• Users can access, review, and delete transcripts and recordings through their account settings.

4. SMS and Text Messaging Data

4.1 Text Messages Sent Through the Services

Dale AI sends and receives SMS and MMS messages on behalf of Users as part of lead follow-up, appointment scheduling, and ongoing Contact engagement. Message content is stored within the User's CRM.

4.2 Consent for Text Messaging

• User-to-Contact messaging. Users are responsible for obtaining appropriate consent from their Contacts before initiating automated text message campaigns through Dale AI. Dale AI provides tools to manage opt-in and opt-out preferences.
• Opt-out. Contacts can reply STOP to any message sent through Dale AI to opt out of future messages from that User. We honor all opt-out requests promptly.
• Service messages. We may send transactional or service-related SMS messages to Users (e.g., account verification, security alerts). Standard message and data rates may apply.

4.3 SMS Data Sharing

We do not sell, rent, or share SMS opt-in data or consent status with third parties for marketing purposes. SMS data is used solely to facilitate communications requested by the User through the Services.

5. AI and Automated Processing

5.1 How AI Processes Your Data

Dale AI uses artificial intelligence and large language models to:

• Transcribe and understand voice conversations in real time
• Generate natural-language responses during calls
• Summarize call content and extract key details
• Qualify leads based on conversation analysis
• Draft follow-up messages and schedule tasks
• Provide insights across a User's Contact database

5.2 AI Training Data

We use data generated through the Services to train and improve our AI models. This includes transcripts, conversation summaries, CRM interactions, usage patterns, and call recordings (when enabled). By using the Services, you consent to this use. Training data helps us improve transcription accuracy, conversation quality, lead qualification, and overall AI performance across the platform.

We implement safeguards in our training process:

• Training data is de-identified where feasible to reduce the presence of personal information in model weights.
• We do not sell or license training data or trained models to third parties.
• Our agreements with third-party AI providers govern whether and how data processed through their services may be used for model training. Details are available in our AI Policy.

5.3 Third-Party AI Services

We use third-party AI services (such as cloud-hosted large language models and voice synthesis providers) to power certain features. When your data is processed by these services:

• Data is transmitted securely and encrypted in transit.
• Our agreements with these providers govern whether and how data may be used for their own model training.
• Processing occurs within the United States.

5.4 Automated Decision-Making

Dale AI uses automated processing to qualify leads, prioritize follow-ups, and suggest actions. These are recommendations provided to Users and do not constitute legally binding decisions. Users retain full control over whether and how to act on AI-generated recommendations.

6. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

6.1 With Your User (for Contacts)

If you are a Contact, the User (real estate agent) who manages your information in Dale AI has access to your contact details, transcripts, call recordings (if enabled), messages, and CRM data associated with their account. The User controls how your data is used within their account.

6.2 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud infrastructure (AWS) — Hosting, storage, and compute
• Payment processing (Stripe) — Subscription billing
• Voice and telephony providers — Call routing, phone number provisioning
• AI and language model providers — Voice transcription, conversation AI, text-to-speech
• Analytics providers — Product usage analytics
• Email service providers — Transactional and marketing email delivery

These providers are contractually obligated to use your information only to perform services for us and to maintain appropriate security measures.

6.3 Legal Compliance and Safety

We may disclose information if we reasonably believe it is necessary to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from government or law enforcement authorities
• Protect the rights, property, or safety of Dale AI, our Users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Enforce our Terms of Service

6.4 Business Transfers

If Dale AI is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

6.5 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Cookies, Tracking Technologies, and Marketing Pixels

7.1 What We Use

We use cookies, web beacons, pixels, local storage, and similar tracking technologies on our website and application. These technologies serve different purposes:

Essential Cookies. Required for the website and application to function. These maintain your session, authenticate your identity, remember security preferences, and enable core features like form submissions. You cannot opt out of essential cookies.

Functional Cookies. Remember your preferences, settings, and choices (such as language or region) to provide a personalized experience. These are not strictly necessary but improve usability.

Analytics Cookies and Tags. Help us understand how visitors use our website so we can improve it. We may use services such as Google Analytics, which collects information including pages visited, time on page, scroll depth, click events, referral sources, and conversion actions. Google Analytics may use cookies and collect your IP address (which we configure to be anonymized where available). Google's use of this data is governed by Google's Privacy Policy.

Advertising and Marketing Pixels. We may use tracking pixels, tags, and related technologies from advertising platforms to measure the effectiveness of our marketing campaigns, build custom audiences, and deliver relevant advertising to prospective users on third-party platforms. These may include:

• Meta Pixel (Facebook/Instagram): Tracks website visits, page views, and conversion events to measure ad performance and build lookalike audiences on Meta platforms. Governed by Meta's Privacy Policy.
• Google Ads (including Google Tag / gtag.js): Tracks conversions from Google Search, Display, and YouTube ads. May use remarketing to show ads to previous visitors. Governed by Google's Privacy Policy.
• LinkedIn Insight Tag: Tracks website visits for ad performance measurement and professional demographic reporting. Governed by LinkedIn's Privacy Policy.
• X (Twitter) Pixel: Measures conversions and enables audience targeting on X. Governed by X's Privacy Policy.
• Microsoft Clarity and/or Hotjar: Session replay and heatmap tools that help us understand user behavior on our website. These tools may record mouse movements, clicks, scrolls, and page interactions. Personal information entered into forms is masked by default. Governed by their respective privacy policies.

These third-party tracking technologies may collect data such as your IP address, browser type, device information, pages visited, and actions taken on our website. This data may be used by the respective platforms to serve you targeted advertisements on their networks, even after you leave our website.

7.2 Web Beacons and Clear GIFs

We may use web beacons (also known as clear GIFs or tracking pixels) in our marketing emails to track whether emails are opened and which links are clicked. This helps us measure the effectiveness of our email campaigns and tailor future communications. You can prevent web beacon tracking by configuring your email client to block remote images or by opting out of marketing emails entirely.

7.3 Local Storage and Similar Technologies

In addition to cookies, we may use browser local storage, session storage, and IndexedDB to store preferences, cache application data for performance, and maintain your authenticated session. These technologies function similarly to cookies but may store larger amounts of data and are not automatically sent with HTTP requests.

7.4 Your Choices

You have several options for managing tracking technologies:

• Browser settings: Most browsers allow you to block or delete cookies through their settings. Note that blocking all cookies may impair website functionality.
• Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on.
• Ad platform opt-outs: Visit DAA opt-out, NAI opt-out, or individual platform settings (e.g., Meta Ad Preferences, Google Ad Settings).
• Do Not Track: We honor Do Not Track (DNT) browser signals where technically feasible.
• Global Privacy Control (GPC): We recognize and honor GPC signals as a valid opt-out of sale/sharing under applicable state privacy laws.

8. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account information: Duration of account plus 30 days after deletion
• CRM and Contact data: Duration of account plus 30 days after deletion
• Call recordings (when enabled): As configured by User (default: 12 months), then deleted
• Call transcripts and summaries: Duration of account plus 30 days after deletion
• SMS/text message content: Duration of account plus 30 days after deletion
• Billing and payment records: As required by applicable tax and financial regulations
• Usage and analytics data: 24 months, then aggregated or deleted
• Cookie and tracking data: Varies by technology (session cookies expire when browser closes; persistent cookies up to 24 months; third-party pixel data per platform retention policies)
• Waitlist and marketing data: Until you unsubscribe or request deletion

When a User deletes their account, we delete or de-identify all associated data, including Contact data stored within that account, within 30 days, except where retention is required by law. Users may delete individual call recordings, transcripts, Contact records, and messages at any time through the Services.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your information, including:

• Encryption at rest and in transit using industry-standard protocols (TLS 1.2+ for data in transit, AES-256 for data at rest).
• Access controls with role-based permissions, multi-factor authentication, and principle of least privilege.
• Infrastructure security using enterprise-grade cloud infrastructure with SOC 2-compliant hosting providers.
• Tenant isolation ensuring that each User's data is logically separated and inaccessible to other Users.
• Regular security assessments including code reviews, dependency audits, and infrastructure monitoring.
• Incident response procedures to detect, investigate, and respond to security incidents promptly.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request that we correct inaccurate or incomplete personal information.
• Deletion. Request that we delete your personal information, subject to certain exceptions.
• Portability. Request a machine-readable copy of your personal information.
• Opt-out of marketing. Unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us.

For Users: You can exercise these rights through your account settings or by contacting us at privacy@dale.app.

For Contacts: If you are a Contact whose information is stored in a User's Dale AI account, you may contact that User directly to request access to, correction of, or deletion of your information. You may also contact us at privacy@dale.app, and we will assist in facilitating your request with the relevant User.

We will respond to all privacy rights requests within 45 days, or as otherwise required by applicable law. We will not discriminate against you for exercising your rights.

11. State-Specific Privacy Rights

11.1 California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights:

• Right to Know. You may request the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete. You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct. You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information. We only use sensitive personal information (such as voice data) as necessary to provide the Services.
• No Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of personal information we collect (as defined by the CCPA): Identifiers, commercial information, internet or electronic network activity information, audio/electronic/visual information (call recordings), professional or employment-related information, and inferences drawn from the above.

To submit a verifiable consumer request, contact us at privacy@dale.app. We may need to verify your identity before processing your request.

11.2 Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights, contact us at privacy@dale.app. You may appeal a decision regarding your request by contacting us, and if unsatisfied, you may contact the Virginia Attorney General.

11.3 Colorado (CPA)

Colorado residents have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. Contact us at privacy@dale.app to exercise these rights.

11.4 Other States

Residents of Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights similar to those described above. We comply with all applicable state privacy laws. Contact us at privacy@dale.app to exercise your rights under any applicable state law.

12. Children's Privacy

The Services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@dale.app.

13. International Users

The Services are hosted and operated in the United States. All data is stored and processed within the United States. If you access the Services from outside the United States, you understand and consent to the transfer and processing of your information in the United States, where data protection laws may differ from those in your jurisdiction.

We do not currently offer the Services to users in the European Economic Area (EEA), United Kingdom, or other jurisdictions that require specific data transfer mechanisms (such as Standard Contractual Clauses). If this changes, we will update this Privacy Policy accordingly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this page.
• We will notify Users by email or through a notice within the Services.
• We will post the revised Privacy Policy on our website.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your information, please contact us:

Dale AI, Inc.
Email: privacy@dale.app
Website: dale.app

For privacy rights requests, please email privacy@dale.app with the subject line "Privacy Rights Request" and include your name, email address, and a description of your request. We will respond within 45 days.