1. Who is responsible for your data
Collective Intelligence, Inc. is the data controller for personal data collected to operate Dossier, including account information, support correspondence and service administration. Where we process research inputs and reports solely on a customer's instructions, the customer remains responsible for their lawful use of that information and we process it to provide the service. Contact us at info@connectiveintel.com.
2. Information and purposes
- Account information: name, email, authentication information and sign-in provider identifiers are used to create accounts, authenticate access and communicate about the service. Password authentication is handled by our authentication service; passwords are not included in reports.
- Your profile and research inputs: background, interests, goals, notes, names, profile links and the report language you choose are used to conduct requested research and personalize meeting insights.
- Information about researched individuals: publicly accessible professional and biographical information, source links and content, identity candidates, your verification decisions, generated reports and report versions are used to build evidence-backed dossiers. Information comes from customer inputs and public web sources, not private or login-only content.
- Purchase records: order references, credit balances, credit usage and transaction status are used to provide purchased reports, reconcile purchases and maintain required records. Paddle handles checkout and payment information.
- Support messages: contact details and correspondence are used to respond to questions, refund requests, privacy requests and complaints.
- Technical and usage information: IP addresses, device and browser information, session identifiers, access events and error logs may be processed to operate the service, troubleshoot issues and prevent fraud or abuse.
Research prompts and selected source content are sent to our AI service to generate reports. Do not submit sensitive personal information that is unnecessary for lawful meeting preparation. We do not intend to infer sensitive personal attributes.
3. Legal bases
Where applicable, we rely on performance of our contract for account access and requested services; legitimate interests for proportionate public-source research, service reliability, security, fraud prevention and support; legal obligations for required financial records and lawful requests; and consent where required for optional processing. We consider the rights and reasonable expectations of individuals when relying on legitimate interests. Customers must establish their own lawful basis for research inputs and use of reports.
4. Who receives information
We share only information needed for the relevant purpose with hosting, authentication, storage, AI processing, public-web research and support service providers. Dossier uses Lovable Cloud for hosting and account/data services, Lovable AI for report generation and Firecrawl for public-web research.
Paddle receives information needed as Merchant of Record for product sales, subscription management where applicable, payments, tax compliance and invoicing. Dossier currently sells one-time report credits, not subscriptions. Paddle also processes data under its own Privacy Notice.
We may share relevant information with professional legal or accounting advisers, and with authorities when legally required. We do not sell personal data. A report is made available to the customer who requested it; customers are responsible for how they download or share it.
5. Retention
Account data is retained while needed to provide your account. Research inputs, verification records and saved report versions are retained to provide your dossiers and version history until deletion is requested or they are no longer needed. Purchase records are retained for applicable accounting, tax and legal requirements. Support and technical records are kept only as long as needed for their purposes. Contact us to request deletion. We delete or anonymize data when it is no longer needed, subject to legal obligations, dispute resolution, security needs and backup expiry.
6. Your privacy rights
Depending on the laws that apply to you, you may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent without affecting prior lawful processing. These rights may apply to information about you in another customer's dossier as well as your own account. Send requests to info@connectiveintel.com; we may need to verify your identity without collecting unnecessary information.
For UK/EEA data subjects, we will respond within one month unless a lawful extension applies. You may complain to your local data protection supervisory authority. Other applicable laws may provide additional rights and response periods. Contact us about incorrect identity matches, source content or reports so we can review the concern.
7. Security and international transfers
We use appropriate technical and organizational measures, including encryption in transit and access controls that restrict account data to authorized users. No system is completely secure. Keep account credentials confidential and contact us promptly about suspected unauthorized access.
Our service providers may process data outside your country, including outside the UK/EEA. Where required by applicable law, international transfers must use appropriate safeguards such as adequacy decisions or Standard Contractual Clauses and applicable UK safeguards. Contact us for information about the safeguards relevant to your data.
8. Cookies and local storage
Dossier uses essential cookies or browser storage for sign-in sessions, security and remembering your language preference. Checkout may use Paddle's essential payment and fraud-prevention technologies. The app does not currently offer optional advertising or analytics cookies. You can clear or block cookies and local storage in your browser, but this may prevent sign-in, remembered preferences or checkout. If optional analytics or marketing cookies are introduced, we will provide appropriate information and consent controls before using them where required.
Pages load fonts from Google Fonts, which receives technical request information such as your IP address and browser headers when your browser requests those fonts.
Account export and deletion
Use Account settings in My profile to export your account data or permanently delete your account and research records. Download your reports first. Unused credits are lost on account closure; closure does not automatically request a refund. We retain financial records required by law after removing the account identifier.
9. Updates and contact
We may update this notice as the service changes and will notify you of material changes where required. For privacy requests or questions, contact Collective Intelligence, Inc. at info@connectiveintel.com.