Privacy Policy

Introduction

Predien LLC ("Predien," "we," "us," or "our") operates an AI-powered decision intelligence platform that connects your business systems into one analytical model, delivered together with an assigned forward deployed analyst. This Privacy Policy describes how we collect, use, and protect your information when you use our platform.

Key principle: Predien is built on a multi-tenant, tenant-isolated architecture. Your business data is never visible to, or accessible by, any other client. Every query is scoped and enforced at the data layer to your organization alone.

Information We Collect

Business and Operational Data
When you connect a data source, your ERP, CRM, core systems, QuickBooks, Excel/CSV uploads, or a direct database connection, Predien ingests that data to build your analytical model. This includes financial statements, operational data, labor and workforce data, and any other business activity you choose to connect. This data is structured into dimensions and metrics specific to your organization and remains isolated to your tenant environment.

Forward Deployed Analyst Access
Your assigned forward deployed analyst accesses your connected data to configure dimensions, metrics, and dashboards, validate AI-flagged insights, and maintain your scenario models. This access is scoped to your account and is necessary to deliver the platform's core function, finished intelligence rather than raw data you have to interpret yourself.

AI Processing Data
Natural-language queries and AI-generated insights are processed through a tiered architecture. Simple factual lookups are routed directly to your structured data with no AI model involved. More complex analytical and diagnostic questions are escalated to a reasoning model for variance decomposition and narrative explanation. Edge-based inference is processed with zero data egress from our infrastructure.

Account Data
When you create an account, we collect:

• Name and email address
• Organization name
• Hashed passwords (we never store plaintext credentials) or OAuth credentials if you sign in via Google
• Billing information (processed by our payment provider)

Device and Analytics Data
We collect standard device and browser information, including IP addresses, browser type, operating system, and usage patterns, to improve our service and ensure security.

Cookies
Our website and platform use essential cookies for authentication and session management. We use analytics cookies, including Google Analytics, to understand how users interact with our platform. You can manage cookie preferences through your browser settings.

How We Use Your Information

• Platform delivery: Building and maintaining your analytical model, dashboards, scenarios, and insights
• Analyst services: Enabling your forward deployed analyst to configure, validate, and maintain your account
• Security monitoring: Detecting and preventing unauthorized access, fraud, and abuse
• Personalization: Remembering your dashboard configuration, thresholds, and workspace settings
• Analytics: Aggregated, anonymized usage data to improve platform performance
• Communications: Service updates, security notices, and billing notifications

Data Sharing

We share data only in the following limited circumstances:

• AI model providers: Diagnostic and analytical queries that require model reasoning are sent to our AI providers solely to generate the requested analysis. We do not share account data or business context beyond what is necessary to fulfill the query.
• Service vendors: Third-party vendors who support our infrastructure (hosting, payments, analytics) are bound by strict contractual data protection obligations.
• Legal requirements: We may disclose information if required by law, subpoena, or valid legal process. We will notify you of such requests unless prohibited by law.
• Business transfers: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you or provide a clear disclosure on our website if your information becomes subject to a different privacy policy.
• Aggregated data: We may share aggregated, non-personally identifiable data (e.g., overall usage statistics) with third parties for analytics or research. Such data does not contain personal identifiers.

Security Measures

• HTTPS/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Tenant isolation enforced at the database query layer for every request
• Role-based access control (Owner, Admin, Member, Guest) governing what each user can view and do
• Invite-only access with time-limited, single-use invitation tokens
• Rate limiting and CORS/CSRF enforcement
• Least-privilege access controls for all systems
• Regular security audits and penetration testing
• SOC 2 aligned security practices

Data Retention

We retain your business data for as long as your account remains active and your engagement with Predien continues. Every data upload is version-controlled, with full lineage back to its source file and batch, so historical data is preserved and traceable rather than overwritten. If you disconnect a data source or close your account, related stored data will be deleted within a reasonable period upon request. Operational and security logs are kept for a limited duration, after which they are securely deleted or anonymized.

Security Incidents

In the event of a data breach or security incident, we will notify affected users and relevant authorities in accordance with applicable data protection laws. Post-incident reviews help us enhance our safeguards to prevent future breaches.

Data Residency

Predien's infrastructure runs on Cloudflare's global edge network, with data stored and processed close to where it is generated to minimize latency. Predien LLC is based in the United States. Organizations with specific regional data residency requirements should contact us to discuss available accommodations.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a structured, machine-readable format
• Consent withdrawal: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at [email protected]. We may request additional information to verify your identity before fulfilling your request, as required or permitted by law.

Marketing Communications

If you receive marketing emails from us, you can unsubscribe at any time by clicking the "unsubscribe" link in the email or by contacting us directly at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. When we do, we will revise the "Last Updated" date at the top of this Policy. If we make material changes, we will notify users via email or a prominent notice on our website prior to the changes taking effect.

Your continued use of our Services after any changes indicates your acceptance of the updated Policy.

Questions About Privacy?

Our team is here to help with any questions about how we handle your data.
[email protected]