Privacy Policy

Effective Date: April 29, 2026

Last Updated: April 29, 2026

⚠️ ATTORNEY REVIEW NOTICE: This document is a template based on industry-standard SaaS privacy policies and addresses GDPR, CCPA, and US state privacy laws at a baseline level. It has NOT been reviewed by a licensed attorney. Before using this with paying customers — especially in healthcare, financial services, or jurisdictions outside the US — have a privacy-experienced attorney review and customize this document. Templates do not replace legal advice.

1. Introduction

Inxcess LLC, doing business as Radarrr ("Radarrr," "we," "us," "our") respects your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our website (radarrr.ai) and services (the "Services").

This Policy applies to:

• Visitors to our website
• Customers who purchase our Services
• End users whose data is processed through the Services on behalf of our Customers (e.g., a Customer's customers who interact with the AI agent)

If you have any questions, contact us at privacy@radarrr.ai.

2. Information We Collect

2.1 Information You Provide Directly

When you use our website or sign up for Services, we may collect:

• Account information: name, email, business name, phone number, password
• Billing information: payment card details (processed by Stripe — we do not store full card numbers), billing address, tax identification
• Business configuration: services offered, pricing, hours, providers, brand voice preferences
• Communications: messages you send to us (email, support requests, calls)
• Survey and feedback: responses to surveys, feedback forms, or research interviews

2.2 Information Collected Automatically

When you visit our website or use the Services, we automatically collect:

• Device and usage data: IP address, browser type, operating system, pages viewed, links clicked, referring URLs, timestamps
• Cookies and similar technologies: see Section 6 (Cookies)
• Service performance data: API call logs, error logs, response times — used for monitoring and troubleshooting

2.3 Information We Process On Behalf of Customers

When the Services are used to handle customer interactions (the AI agent Candace responding to a Customer's customers), we process:

• End-user contact information: phone numbers, email addresses, names — provided by the Customer
• Conversation content: voice recordings, transcripts, SMS messages, Instagram and Facebook DMs exchanged between the AI agent and end users
• Booking and transaction details: appointment times, services requested, deposits collected
• Customer history: prior visits, prior services, prior providers — provided by the Customer to enable personalization

This data is processed on behalf of our Customers, who are the data controllers. Radarrr acts as a data processor for this category of data. End users with questions about how their data is used should contact the Customer (the business they are interacting with) directly.

2.4 Information from Third Parties

We may receive information about you from:

• Stripe: payment confirmation and billing status
• Google, Meta, and similar platforms: if you log in via OAuth or grant us API access to your business accounts
• Public sources: business information from public registries, when relevant to business verification

3. How We Use Information

We use the information described above for the following purposes:

3.1 To Provide the Services

• Configure and operate the AI agent on Customer's behalf
• Process voice calls, SMS messages, and DMs
• Schedule appointments and process deposits
• Send weekly summary reports
• Respond to support requests
• Process payments and manage billing

3.2 To Improve the Services

• Monitor service performance and identify issues
• Analyze usage patterns to improve features
• Train and refine AI prompts (using only de-identified, aggregated data — see Section 3.5)
• Conduct research and analytics

3.3 To Communicate with You

• Send transactional emails (account confirmations, billing receipts, weekly summaries)
• Send service updates and announcements
• Respond to your inquiries
• Send marketing communications (only with your consent — you may opt out at any time)

3.4 To Comply with Legal Obligations

• Verify business identity for fraud prevention
• Maintain records required by law (tax records, transaction logs)
• Respond to lawful requests from government authorities
• Enforce our Terms of Service

3.5 De-identified and Aggregate Data

We may create de-identified or aggregated data from the information we collect, including for AI model improvement, benchmarking, and business analytics. De-identified data does not identify any individual or business and may be used or shared without restriction.

4. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar laws, we process your information under the following legal bases:

• Performance of a contract: to provide the Services you have signed up for
• Legitimate interests: to improve and secure our Services, prevent fraud, and conduct analytics, where those interests are not overridden by your rights
• Consent: for marketing communications and certain cookies (you may withdraw consent at any time)
• Legal obligation: to comply with laws and respond to lawful requests

5. How We Share Information

We do not sell personal information. We share information only as described below.

5.1 With Service Providers (Sub-processors)

We share information with trusted third-party service providers who help us operate the Services. These providers are bound by contractual obligations to protect the data and use it only for the purposes we direct. Our current sub-processors include:

A current list of sub-processors is available on request.

5.2 With Our Customers

If you are an end user (a customer of one of our Customers), the conversation data we process is shared with the Customer (the business you are interacting with) as part of providing the Services. The Customer is responsible for how they use that data.

5.3 For Legal and Safety Reasons

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or government request
• Enforce our Terms of Service or investigate potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of Radarrr, our Customers, end users, or others

5.4 Business Transfers

If Radarrr is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share information with other parties when you give us your consent to do so.

6. Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixels, local storage) for the following purposes:

• Strictly necessary: to operate the website and Services (cannot be disabled)
• Analytics: to understand how the website is used (Google Analytics or similar)
• Marketing: to measure ad effectiveness, if applicable

You can control cookies through your browser settings. If you are in the EU/UK or California, we present a cookie consent banner on first visit allowing you to manage preferences.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law:

• Account information: for the duration of your subscription, plus 30 days after termination (during which you may request data export)
• Conversation data: for the duration of your subscription. After termination, retained for 30 days for export, then permanently deleted, except where required by law (e.g., financial records, tax records)
• Billing records: for at least seven (7) years for tax and accounting purposes
• Marketing data: until you opt out
• Backup data: typically purged within 90 days of primary data deletion

We may retain de-identified data indefinitely.

8. Data Security

We implement reasonable technical and organizational measures to protect personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Access controls limiting employee access to need-to-know
• Regular security reviews and dependency updates
• Sub-processor agreements requiring appropriate security
• Incident response procedures

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting personal information, we will notify affected parties as required by law.

9. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

9.1 Rights Available to All Users

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate information
• Deletion: request that we delete your information (subject to legal exceptions)
• Opt out of marketing: unsubscribe from marketing emails at any time using the unsubscribe link

9.2 Additional Rights for EU/UK Residents (GDPR)

• Data portability: receive your data in a structured, machine-readable format
• Restriction of processing: request that we limit how we use your data
• Objection to processing: object to processing based on legitimate interests
• Withdraw consent: for processing based on consent
• Lodge a complaint: with your local data protection authority

9.3 Additional Rights for California Residents (CCPA/CPRA)

• Right to know: what personal information we collect, use, disclose, and sell (we do not sell)
• Right to delete: subject to exceptions
• Right to correct: inaccurate information
• Right to limit use of sensitive personal information
• Right to non-discrimination: for exercising your rights
• Right to opt out of "sharing": we do not "share" personal information for cross-context behavioral advertising as defined by CPRA

9.4 Additional Rights for Other US States (Virginia, Colorado, Connecticut, Utah, etc.)

Similar rights to those above apply under various state privacy laws. We honor these rights for residents of those states.

9.5 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@radarrr.ai. We will respond within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before fulfilling certain requests.

If you are an end user (interacting with the AI agent of one of our Customers), please direct your privacy requests to the Customer (the business you are interacting with). They are the data controller for that information. We will assist them in responding to your request.

10. International Data Transfers

Radarrr is based in the United States. Information we collect may be transferred to and processed in the United States. If you are located outside the US, you understand that your information will be transferred to the US, where data protection laws may differ from your jurisdiction.

For transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent UK transfer mechanisms.

11. Children's Privacy

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it. Parents or guardians who believe their child has provided us information can contact privacy@radarrr.ai.

12. Healthcare Information (HIPAA)

If our Services are used by a HIPAA-covered entity or business associate to process Protected Health Information (PHI), the use of PHI is governed by a separate Business Associate Agreement (BAA) executed between Radarrr and the Customer. The BAA takes precedence over this Privacy Policy with respect to PHI.

13. Telephone Consumer Protection Act (TCPA) Compliance

When the Services are used to send SMS messages on behalf of a Customer:

• Radarrr requires Customers to have proper consent from message recipients
• Every SMS sent through the Services includes opt-out instructions ("Reply STOP to unsubscribe")
• Opt-out requests are honored immediately and permanently
• A2P 10DLC carrier registration is maintained for compliance

If you receive a message you believe was sent in error, reply STOP to opt out, or contact privacy@radarrr.ai.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via email or a prominent notice on our website at least 30 days before the change takes effect. Continued use of the Services after the effective date constitutes acceptance.

15. Contact Us

For privacy-related questions, requests, or complaints:

Inxcess LLC

DBA Radarrr

2418 Fats Domino Ave, New Orleans, LA

Email: privacy@radarrr.ai

General contact: support@radarrr.ai

For data protection inquiries from EU/UK residents: contact privacy@radarrr.ai and we will route to our designated representative if applicable.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.