Dureach AI Intelligence Engine

Privacy Policy

Privacy Policy

Last updated: August 16, 2026

This Privacy Policy explains how Dureach collects, uses, shares, and protects personal information across its website, SaaS platform, AI workforce workflows, B2B data services, trade-data products, APIs, and related support channels.

1. Scope

This policy applies to:

  • Visitors to Dureach websites and marketing pages.
  • Users of Dureach accounts, workspaces, AI agents, APIs, and customer support.
  • Prospects, customers, partners, vendors, and event contacts.
  • Business contacts, company records, and professional profile data that may appear in Dureach data products.

This policy does not replace a signed customer agreement, order form, data processing addendum, or data license. If Dureach processes personal data for a customer as a processor or service provider, the Data Processing Addendum and the customer’s instructions govern that processing.

2. Information We Collect

Dureach may collect the following categories of information:

  • Account and contact information: name, business email, phone number, company, title, billing contact, login details, and account preferences.
  • Customer content: prompts, briefs, uploaded files, CRM records, campaign inputs, website requests, workflow instructions, messages, and other content customers provide to the service.
  • Workspace and usage data: user roles, workspace activity, approvals, task status, API logs, feature usage, audit events, and support history.
  • Billing and commercial data: plan, invoices, transaction records, tax details, payment status, and contract metadata. Payment processors may handle full payment-card details directly.
  • Website and device data: IP address, browser, device identifiers, cookie IDs, pages viewed, referral source, timestamps, and approximate location or company signals derived from business-context analytics.
  • Business contact and attribute data: company identity, professional role, business email, work phone, seniority, department, public profile links, website data, hiring signals, technology signals, trade-data signals, and similar business-context attributes.
  • Communications: emails, form submissions, meeting notes, chat messages, support tickets, survey responses, and opt-out preferences.

Dureach does not intentionally collect sensitive personal information such as health records, biometric identifiers, payment-card numbers in customer content, children’s data, government IDs, or financial account credentials. Customers must not upload those categories unless a signed agreement expressly permits it.

3. Sources of Information

Dureach may collect information from:

  • You, your employer, or your authorized users.
  • Customer systems connected to Dureach, such as CRM, email, website, analytics, or workflow tools.
  • Public websites, public records, company sites, professional pages, and business directories.
  • Licensed data providers, trade-data providers, enrichment providers, and integration partners.
  • Website analytics, cookies, security logs, and similar technologies.
  • Events, referrals, partners, and business communications.

4. How We Use Information

Dureach uses information to:

  • Provide, operate, secure, and support the website and services.
  • Create and administer accounts, workspaces, subscriptions, invoices, and support cases.
  • Run customer-requested AI workflows, research tasks, outreach drafts, publishing tasks, website tasks, CRM operations, data enrichment, and trade-data workflows.
  • Maintain approvals, audit trails, workflow state, and handoff-ready outputs.
  • Improve product quality, reliability, security, and user experience.
  • Detect abuse, enforce terms, prevent fraud, and protect systems.
  • Communicate about product updates, service notices, support, billing, security, and marketing where permitted.
  • Build, maintain, validate, and deliver business-context data products, subject to applicable contracts and law.
  • Comply with legal, tax, accounting, security, sanctions, export-control, and regulatory obligations.

5. AI Workflow Data

Dureach provides operator-reviewed AI workflows. Customers control the business briefs, files, prompts, approvals, and outputs they submit or generate inside their workspaces.

Dureach may process customer content to deliver the requested workflow, troubleshoot issues, prevent abuse, and improve service reliability. Customers remain responsible for reviewing outputs before using them in customer-facing, legal, compliance, financial, employment, credit, customs, regulated, or high-impact decisions.

6. Cookies and Website Analytics

Dureach uses cookies, pixels, analytics tools, log files, and similar technologies to keep the website working, measure performance, remember preferences, protect against abuse, and understand business interest in Dureach services.

You can manage cookies through your browser settings. Some website features may not work correctly if cookies are disabled.

7. How We Share Information

Dureach may share information with:

  • Service providers and subprocessors that help host, secure, support, analyze, bill, communicate, and operate the services.
  • Customer-authorized integrations selected by a customer or user.
  • Professional advisors such as lawyers, auditors, accountants, insurers, and security consultants.
  • Corporate transaction parties in connection with a merger, acquisition, financing, restructuring, or sale of assets.
  • Government, legal, or safety recipients where required by law or necessary to protect rights, safety, security, or service integrity.
  • Customers and workspace administrators according to account roles, permissions, and customer instructions.

Dureach does not sell customer content. If a privacy law defines certain data-sharing, advertising, or analytics activities as a “sale” or “sharing,” you may have opt-out rights described below.

Where required, Dureach relies on legal bases such as contract performance, legitimate interests, consent, legal obligation, and customer instructions.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also have rights to opt out of certain targeted advertising, sales, sharing, profiling, or marketing communications.

To exercise privacy rights, contact [email protected] or use the Remove My Data Policy. We may need to verify your request before acting on it. Authorized agents may submit requests where applicable law permits.

9. California and U.S. State Privacy Notices

Residents of California and other U.S. states with privacy laws may have additional rights, including rights to know, access, correct, delete, obtain a portable copy, opt out of sale or sharing, opt out of targeted advertising, limit use of sensitive personal information, and appeal a denied request.

Dureach does not intentionally use sensitive personal information to infer characteristics. If you believe Dureach holds sensitive personal information about you, contact [email protected].

10. International Data Transfers

Dureach is based in the United States and may process information in the United States and other countries where Dureach, its service providers, or subprocessors operate. Where required, Dureach uses appropriate transfer mechanisms such as standard contractual clauses, data processing terms, or other lawful transfer safeguards.

11. Data Retention

Dureach keeps information for as long as needed to provide services, comply with contracts, operate security and audit controls, resolve disputes, enforce terms, meet legal obligations, and support legitimate business purposes.

Retention periods vary by data type, account status, contractual commitment, legal requirement, and deletion request. Customers may request deletion or export of customer content according to their agreement and workspace settings.

12. Security

Dureach uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. No online service can guarantee absolute security. Customers are responsible for managing user access, passwords, integrations, exported data, and lawful use of the service.

Report security concerns to [email protected].

13. Marketing Choices

You can opt out of marketing emails by using the unsubscribe link in the email or contacting [email protected]. Dureach may still send transactional, security, billing, account, or service messages.

14. Children’s Data

Dureach services are for business use and are not directed to children. Dureach does not knowingly collect personal information from children.

15. Changes to This Policy

Dureach may update this Privacy Policy by posting a revised version on this page. The “Last updated” date shows when the current version took effect.

16. Contact

For privacy questions or requests, contact [email protected].

For legal terms questions, contact [email protected].