Privacy Policy

This Privacy Policy explains what data Adduce collects, why, and what we do with it. Adduce is operated by Holonomy Securities (“we”, “us”). We keep the data we hold to the minimum the Service needs to work, and we do not sell it.

• Account data. Your email address, a securely hashed password, and an optional display name.
• Billing data. Your subscription tier and status. Card details are handled entirely by Stripe, our payment processor; we never see or store your full card number.
• Usage data. Counts of checks run, and basic technical logs (such as timestamps and error records) needed to operate and secure the Service.
• Text you check with the hosted API. Processed to return results and to keep the reports tied to your account. Text you check with the downloadable tool is analysed on your own machine and is not sent to us.

We use your data to:

• provide, maintain, and improve the Service;
• authenticate you and keep your account secure;
• process subscriptions and prevent abuse;
• respond to your support requests;
• meet our legal obligations.

We do not sell your data, and we do not use the text you submit to train machine-learning models.

We share data only with the service providers we need to run Adduce, under contracts that limit them to that purpose. These include Stripe (payments), our cloud hosting provider (Amazon Web Services), and our transactional email provider (used to send account emails such as password resets). We may disclose data if the law requires it, or to protect the rights and safety of our users and the Service.

We keep account and billing data for as long as your account is active, and for a limited period afterwards to meet legal and accounting obligations. When you delete your account, we delete or anonymise the data tied to it, except where we are required to retain some records by law.

We protect your data with encryption in transit, hashed passwords, and access controls on our systems. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your data and to respond promptly if something goes wrong.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile and delete your account from your account settings, or contact us to exercise any of these rights.

Adduce is operated from the United States, and our infrastructure is hosted in Canada and the United States. If you use the Service from elsewhere, your data will be transferred to and processed in these countries, which may have different data-protection laws from your own.

Adduce is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page. For any privacy question, or to exercise your rights, contact us at privacy@adduce.dev.