Privacy Policy

We use different methods to collect personal information from and about you including through:

• Personal information you give us. We collect information that you voluntarily submit when visiting the Site. If you choose to use our services or request that we send information to you, if you sign up for our newsletter, subscribe to updates or events, or contact us using our Contact page, you may be asked to supply personal information (such as your name, title, company name, industry, address, email address, and telephone numbers). We use forms on this Site which collect such information and allow you to contact us directly via email.

• Careers at Red Door. Our Site may post information about job openings and employment information. We collect information you may choose to provide if you elect to apply for a posted position. The information requested includes typical resume information such as your contact information, education and employment history, and information about your experience relating to the position. We also allow you to upload your resume and a cover letter as part of the application process.

• Personal information we automatically collect. We use cookies, pixels, and similar technologies as well as system logs to collect aggregate (non-personal) information about Site usage by all of our visitors and to help us remember you and your preferences when you revisit the Site.
  
  • As you interact with the Site, we automatically collect information about your browser and device that is needed to allow you to connect with our Site. We also collect statistical information about how you use the Site such as technical data about the pages viewed, date and time, and browser type. IP numbers are not stored, but are temporarily used to determine domain type and in some cases, geographic region. We do not make any association between this information and a visitor’s identity.
  • We use cookies and may use plug-ins, pixels, web beacons, and similar tracking technologies to collect and share Site use information, conduct analytics, and provide targeted advertising. Cookies are small bits of information stored on your browser. Cookies, pixels, and similar technologies may stay on your browser into the future until they expire or you delete them. We also use technology that is necessary for our Site to function, such as to remember the information you input into forms so that you do not have to re-input it if you temporarily navigate away from the form, and to improve navigational reliability within the Site. These technologies usually are erased when you close your browser window. Further general information about cookies and how they work is available at www.allaboutcookies.org.
  • We may allow selected third parties to place cookies or other technologies through the Site to provide us with better insights into the use of the Site or user demographics or to provide relevant advertising to you. These third parties may collect information about a consumer’s online activities over time and across different websites when he or she uses our Site. We may also permit third-party service providers to place cookies through our Site to collect information in order to perform analytic or marketing functions. We do not control the use of such third-party cookies or the resulting information, and we are not responsible for any actions or policies of such third parties.
  • Please see our Cookie Policy for further details about our use of cookies and similar technologies.
  • We currently use technology that recognizes a “do-not-track” signal from your web browser.
  • For information about how we collect and use data in connection with our ElevateAI Platform, please see the section titled “Information We Collect Through the Platform” below.

We use the collected information for our general commercial purposes, such as to improve our Site, grow our business, and offer our own, our affiliates’, or third-party products or services that we think you may find of interest. We may use the information provided in your email to respond to your questions or comments or to provide information on products or services to you. We may use your email address to send you information about our products or services, newsletters, or marketing emails. We may store your comments for future reference.

We may also use your personal information for the following purposes:

• To confirm your identity;
• To respond to your questions and provide related customer services;
• To detect and prevent fraud or other financial crime;
• To monitor and protect the security of our information, systems and network;
• For internal business intelligence purposes, to conduct research, product development and enhancements;
• To inform you of changes made to our Site and other services;
• To conduct marketing and commercial activities and to market relevant offers and promotions to you;
• To ensure that content from our Site is presented most effectively for you and your computer;
• To display content based on your interests;
• To enable you to search information on our Site;
• To assess your needs and interests in order to better tailor offers and/or advertising; and
• To improve our Site.

We may reveal information about you to unaffiliated third parties if you request or authorize it, if the information is provided to help complete a transaction for you, or as otherwise disclosed in this Privacy Policy.

We may share your personal information with third-party intermediaries, agents, outside vendors, or service providers for the purpose of providing you with the services and information you request or to perform functions on our behalf (e.g., analyzing data, providing marketing assistance, providing customer service, processing orders, etc.). For example, we may provide your personal information to vendors processing our outbound email communication or to shipping companies (e.g., FedEx, U.S. Mail, etc.) to deliver the materials you request.

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

If we are required by court order, a lawfully issued subpoena, or are otherwise required by law to provide information to comply with the law, applicable regulations, governmental and quasi-governmental requests, court orders, or subpoenas, to enforce our Terms of Use or other agreements, or to protect our rights, property, or safety or the rights, property, or safety of our users or others (e.g., to a consumer reporting agency for fraud protection, etc.), we will disclose your information to the extent so required.

We may also disclose your personal information where the disclosure is made as part of a purchase, transfer, or sale of services or assets (e.g., in the event that substantially all of our assets are acquired by another party, customer information may be one of the transferred assets).

We may share your information with third parties for their direct marketing purposes.

We do not sell or rent your information to any third parties.

‍

RDI operates a hosted, subscription-based software platform known as ElevateAI, accessible at elevateai.reddoor.biz (the “Platform”). The Platform provides analytics, automation, and artificial intelligence-enabled features to our enterprise customers (“Customers”) and their authorized employees, contractors, and agents (“Authorized Users”). This section describes the information RDI collects directly from or about Authorized Users in connection with their access to and use of the Platform, and how we use, share, and protect that information.
‍

Our Role: Controller vs. Processor

‍When our Customers submit, upload, or transmit data to the Platform (“Customer Data”), we process that data on their behalf as a service provider and data processor under applicable privacy laws. Our Customers are the data controllers of Customer Data and are responsible for providing their own privacy notices to individuals whose personal information is contained within Customer Data. This Privacy Policy does not govern our processing of Customer Data on behalf of our Customers. Our processing of Customer Data is governed by our agreements with each Customer, including our SaaS Addendum and, where applicable, a Data Processing Agreement.

However, RDI also collects certain information directly from Authorized Users and from the Platform itself for our own business purposes. For this information, RDI acts as a data controller and is responsible for the processing described in this section. The categories of data we collect as a controller are described below.

‍
Account and Authentication Data

‍When an Authorized User account is created or accessed, we may collect:

• Full name and business email address; Role and organizational affiliation; and
• Account preferences and notification settings.

Usage Data

‍We automatically collect technical and operational information generated by the Platform in connection with Authorized Users’ access to and use of the Platform (“Usage Data”), including:

• Technical logs and system telemetry;
• Usage metrics, including feature access, frequency, and duration of use;
• Query statistics and performance information;
• Error logs, crash reports, and diagnostic data; and
• API call volumes and response times.
  ‍

Session and Activity Data

‍We collect information about individual sessions and interactions with the Platform, including:

• Session identifiers and timestamps (login, logout, session duration);
• Navigation paths, feature interactions, and click patterns;
• Search and query history within the Platform;
• Audit logs recording user actions (e.g., data exports, configuration changes, report generation); andAI feature interaction history, including query submissions and output type. By default, Customer Data content (i.e., prompts, intermediate model reasoning, and tool inputs/outputs) is not collected. Customers may opt in to broader telemetry, including Customer Data content, under the applicable Customer agreement, where such telemetry supports product improvement, model selection, and Customer-specific analytics.

‍
Device and Access Data

‍When Authorized Users access the Platform, we automatically collect:

• IP address;
• Browser type and version;
• Device type and operating system;
• Screen resolution and language settings;
• Approximate geolocation (derived from IP address); and
• Referring URLs and access timestamps.

Cookies and Similar Technologies on the Platform‍

The Platform uses cookies and similar technologies to support its functionality and to collect Usage Data and Session and Activity Data. These may include:

• Strictly necessary cookies — Required for authentication, session management, and security (e.g., session tokens, CSRF protection)
• Functional cookies — Used to remember user preferences, settings, and display configurations
• Analytics cookies — Used to collect aggregated information about Platform usage patterns, feature adoption, and performance metrics

The Platform does not use advertising or behavioral tracking cookies. Authorized Users may manage cookie preferences through their browser settings; however, disabling strictly necessary cookies may impair Platform functionality.

‍

RDI uses the information described above for the following purposes:

• Providing, operating, and securing the Platform — To deliver Platform functionality, manage access, enforce usage restrictions, and maintain the security and integrity of the Platform and its infrastructure.
• Authentication and access management — To verify Authorized User identity, manage login sessions, enforce role-based access controls, and prevent unauthorized access.
• Platform improvement and performance optimization — To analyze usage patterns, identify errors and performance bottlenecks, inform product development, and enhance the user experience.Generating aggregated statistics — To produce aggregated and anonymized data that does not identify any individual or Customer, for purposes of benchmarking, analytics, product improvement, and reporting, consistent with our agreements with Customers.
• Security monitoring, incident detection, and fraud prevention — To detect, investigate, and respond to security threats, anomalous activity, unauthorized access attempts, and potential abuse of the Platform.
• Compliance, audit, and billing — To maintain records necessary for legal compliance, regulatory obligations, internal and external audit requirements, and accurate billing.
• Support and troubleshooting — To diagnose and resolve technical issues, respond to support requests, and provide assistance to Authorized Users and Customers.

We do not use personal information collected through the Platform to train or fine-tune generally available third-party artificial intelligence or machine learning models in identifiable form. We may use de-identified or aggregated data derived from Platform usage to improve the Platform and related offerings, provided such use does not identify any individual or Customer.

‍

‍

RDI may share information collected through the Platform with the following categories of recipients:

‍
Service Providers and Subprocessors

‍We use third-party service providers and subprocessors to help provide, operate, secure, monitor, and support the Platform. Depending on the services they provide, these providers may process limited Platform Data and, where applicable, Customer Data on our behalf, including for the following functions:

• Cloud hosting, infrastructure, storage, networking, and security services
• AI and machine learning model providers used to deliver Platform functionality
• Analytics, observability, logging, performance monitoring, and error-reporting services
• Customer support, incident management, and project tracking tools
• Authentication, identity management, access control, and related administrative services

We require these providers to process information only for the purposes of providing services to RDI and in accordance with our instructions, our agreements with Customers, and applicable law. We use contractual, technical, and organizational safeguards designed to require confidentiality, protect the security of the information, limit access to what is reasonably necessary, and prohibit use of the information for the provider’s own independent purposes. We do not authorize service providers or subprocessors to use Customer Data or personal information collected through the Platform to train or improve generally available third-party AI or machine learning models, except where expressly permitted under the applicable Customer agreement. Additional information about our subprocessors may be made available to Customers upon request or as otherwise described in the applicable Customer agreement.

‍
Your Customer (Employer or Contracting Entity)

‍If you are an Authorized User accessing the Platform on behalf of a Customer, we may share account information, usage reports, and activity summaries with that Customer as part of our service. Your Customer may have its own policies governing how it uses such information.
‍

Legal and Regulatory Requirements‍

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, the safety of any person, or the integrity of the Platform.
‍

Business Transfers‍

In the event of a merger, acquisition, reorganization, or sale of substantially all of our assets, information collected through the Platform may be transferred as part of that transaction. We will notify affected Customers in accordance with our agreements.

‍
No Sale of Personal Information‍

RDI does not sell personal information collected through the Platform as “sell” is defined under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), or similar state privacy laws. We do not share personal information collected through the Platform for cross-context behavioral advertising purposes.

‍

RDI retains personal information collected through the Platform for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. In determining the appropriate retention period, we consider:

• The duration of the applicable Customer’s Subscription Term;
• Whether the data is needed for ongoing Platform security, audit, or compliance purposes;
• Applicable legal, regulatory, or contractual retention requirements; and
• The sensitivity and nature of the data.
  ‍

Account and Authentication Data is retained for the duration of the Authorized User’s active account and for a reasonable period thereafter to support audit, compliance, and reactivation needs. Upon termination or expiration of a Customer’s subscription, we will delete or anonymize Authorized User account data in accordance with our standard retention practices, subject to applicable legal and regulatory requirements.

Usage Data, Session and Activity Data, and Device and Access Data are retained in identifiable form for no longer than reasonably necessary for the purposes described above and are periodically aggregated, anonymized, or deleted consistent with our retention practices.

Aggregated Statistics, which do not identify any individual, may be retained indefinitely.

‍

The Platform is hosted in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we implement appropriate safeguards to protect personal information transferred across borders, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Addendum (UK IDTA), where applicable
• Data processing agreements with our service providers that include appropriate transfer mechanisms
• Other lawful transfer mechanisms recognized under applicable data protection laws
  ‍

For more information about cross-border transfers or to request a copy of the applicable transfer mechanism, please contact us using the information provided at the end of this Privacy Policy.

‍

In addition to the rights described elsewhere in this Privacy Policy, the following rights apply specifically to personal information we collect through the Platform as a data controller. Your ability to exercise these rights may depend on the applicable laws in your jurisdiction.

‍
For All Platform Users‍

You may:

• Request access to the personal information we hold about you in connection with your use of the Platform
• Request correction of inaccurate or incomplete personal information
• Request deletion of your personal information, subject to our legal and contractual retention obligations
• Withdraw consent to processing, where consent is the legal basis for processing

‍
Additional Rights Under GDPR (EEA/UK Users)‍

If you are located in the European Economic Area or the United Kingdom, you may also have the right to:

• Restrict the processing of your personal information in certain circumstances
• Receive your personal information in a structured, commonly used, and machine-readable format (data portability)
• Object to processing based on legitimate interests
• Lodge a complaint with your local data protection supervisory authority
  ‍

Our legal bases for processing personal information collected through the Platform include: (a) performance of a contract (providing and operating the Platform under our agreements with Customers); (b) legitimate interests (security, fraud prevention, Platform improvement, and analytics); and (c) legal compliance.

‍
Additional Rights Under U.S. State Privacy Laws‍

If you are a resident of California or another U.S. state with an applicable privacy law, you may have additional rights, including:

• The right to know what personal information we collect, use, disclose, and retain
• The right to delete personal information we have collected from you
• The right to opt out of the sale or sharing of personal information (note: RDI does not sell personal information collected through the Platform)
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
  ‍

How to Exercise Your Rights‍

If you are an Authorized User accessing the Platform on behalf of a Customer, we recommend that you first contact your employer or the Customer organization, as they are the controller of any Customer Data submitted through the Platform and may need to facilitate your request.

For requests relating to data we collect as a controller (as described in this section), please contact us at:

Email: privacy@reddoor.biz

Website: https://www.reddoor.biz/contact

We will respond to verified requests within the timeframes required by applicable law.‍

Children’s Privacy (Platform)‍

The Platform is designed for use by authorized business users and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children through the Platform. If we become aware that a child under 16 has provided personal information through the Platform, we will take steps to delete such information promptly.
‍

Changes to This Platform Section‍

We may update this Platform privacy section from time to time to reflect changes in our data practices, the Platform’s functionality, or applicable law. If we make material changes to how we collect, use, or share personal information through the Platform, we will notify Customers through the Platform or by other reasonable means. Your continued use of the Platform after such notice constitutes acceptance of the updated terms.

‍

We are headquartered in the United States of America. Your personal information will be accessed by us or transferred to us in the US and will be accessed by our US-based employees. If you are visiting our Site or accessing our Platform from outside the US, be aware that your personal information will be transferred to, stored, and processed in the US where our servers are located, and our central database is operated. By using our Site or Platform, you consent to this transfer of your personal information. Disclosing your personal information to us pursuant to this Privacy Policy is at your own risk. We strive to comply with laws of jurisdictions in which we maintain operations but we make no representations that the practices described in this Privacy Policy are compliant with laws outside those jurisdictions that apply to the collection, security, use and disclosure of personal information.

Should you wish to update the information submitted, you can update your information by emailing privacy@reddoor.biz.

You can choose not to receive promotional emails from us by “unsubscribing” using the instructions in any email you receive from us or you can contact us at privacy@reddoor.biz. This will not stop us from sending emails about your account or your transactions with us.

You can choose to delete or block cookies by setting your browser to either reject all cookies or allow cookies only from selected sites. If you block cookies, performance of the Site or Platform may be impaired and certain features may not function at all.

If you have given us consent to use your information for a specific purpose, you may withdraw that consent at any time by emailing privacy@reddoor.biz. This will not affect use of your information that occurred before we received notification of your withdrawal of consent.

‍

We may amend this Privacy Policy from time to time and will notify users of this Site and the Platform by posting the amended terms on the Site. The Policy in effect at the time you use the Site or Platform governs how we may use your information. If we make material changes, we will post the revised Policy with the revised effective date on this Site. Please check back here from time to time to review any changes.

Notice to Residents of the United Kingdom and the European Economic Area

For the purposes of the EU General Data Protection Regulation 2016 (the “GDPR”), Red Door Interactive, Inc. is the data controller and responsible for your personal information.

If you are a visitor from the United Kingdom or the European Economic Area (EEA), you may have the following rights in certain circumstances:

• Access. You may have the right to request access to any personal information we hold about you as well as related information, including the purposes for processing the personal information, the recipients or categories of recipients with whom the personal information has been shared, where possible, the period for which the personal information will be stored, the source of the personal information, and the existence of any automated decision making.
• Correction. You may have the right to obtain without undue delay the rectification of any inaccurate personal information we hold about you.
  Right to Be Forgotten. You may have the right to request that personal information held about you be deleted.
• Restriction on processing. You may have the right to prevent or restrict processing of your personal information.
• Transfer. You may have the right to request transfer of personal information directly to a third party where this is technically feasible.

To exercise any of these rights, please contact us using one of the following methods:

Email: privacy@reddoor.biz
Website: https://www.reddoor.biz/contact

We aim to respond to requests made by you within one (1) month but may extend that period by two (2) further months where necessary. Also, where you believe that we have not complied with our obligations under this Privacy Policy or UK or EEA law, you have the right to make a complaint to a UK or EU Data Protection Authority.

We collect and process personal information about you only where we have a legal basis for doing so under applicable data protection laws. The legal basis will depend on the purpose for which we process your personal information. This Policy describes our legal basis for collecting and using your information, including when:

• We need it to provide services, including to operate the Site and the Platform, provide customer support and personalized features and to protect the safety and security of the Site and the Platform;
• It satisfies a legitimate interest (which is not overridden by your rights and interests), such as for research and development, to market and promote the Site and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose; or
• We need to process your personal information to comply with a legal obligation.
  ‍

Notice to Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia and Utah‍

We are currently not subject to the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Personal Data Privacy Act, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Expectation of Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Data Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Texas Data Privacy and Security Act, the Virginia Consumer Data Protection Act, or the Utah Consumer Privacy Act. If we become subject to any of these laws in the future, we will update this Privacy Policy accordingly.

‍

We use reasonable technical, administrative, and physical measures to protect information contained in our system against unauthorized access, destruction, misuse, loss, or alteration. We may use standard encryption technology to protect information being transferred to our Site or Platform, but it is commonly known that information transferred over the Internet is never 100% secure. For example, such information may be viewed by a third party while in transit or may be unlawfully accessed by a third party who hacks into an otherwise protected computer. Consequently, although we endeavor to protect the privacy of your private information, you acknowledge that there are security and confidentiality risks associated with the Internet which are beyond our control and that the safekeeping of information exchanged between us over the Internet cannot be absolutely guaranteed. If you have created an account on our Site or Platform, you are responsible for securing your log-in credentials; if we receive instructions using your credentials, we will consider that you have authorized the instructions.

The Site is not directed toward individuals under the age of thirteen (13), and we require that such individuals not provide us with personal information. We do not knowingly collect or maintain personal information from anyone under the age of 13, and if we become aware that an individual under the age of 13 has provided us with personal information through the Site, we will delete the information. If you are the parent or legal guardian of an individual under the age of 13, please contact us at privacy@reddoor.biz.

We may permit others to link to this Site or to post a link to their site on ours. We do not endorse these sites and are not responsible for other sites or their privacy practices. Please read their privacy policies before submitting information.

This Site and Platform are owned and operated by Red Door Interactive, Inc. If you have any questions, concerns or comments about this Privacy Policy, please e-mail privacy@reddoor.biz.