Adelphoï Labs
Paul Davis

Privacy Policy

Effective Date: January 1, 2026

Last Updated: March 12, 2026

Adelphoï Labs ("Adelphoï Labs," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information obtained through our website and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Applicability

This Privacy Policy applies to:

  • Visitors to our website
  • Individuals who communicate with us electronically
  • Prospective and current clients, partners, and subscribers
  • Users of our business tools and member portal

This Policy is intended to comply with applicable privacy and data protection laws, including but not limited to:

  • The General Data Protection Regulation (GDPR) (and UK GDPR, where applicable)
  • The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
  • Other applicable U.S. state privacy laws (Virginia, Colorado, Connecticut, Utah, etc.)

2. Information We Collect

a. Personal Information You Provide

We may collect personal information you voluntarily provide, including:

  • Name
  • Email address
  • Organization or company name
  • Phone number
  • Professional role, inquiry details, or other content you submit
  • Account credentials (hashed passwords)
  • Financial data you upload for analysis (processed confidentially)

b. Automatically Collected Information

When you use the Services, we may automatically collect certain technical and usage information, such as:

  • IP address
  • Browser type/version
  • Device type and operating system
  • Approximate location (derived from IP address)
  • Pages viewed, session activity, access times, referring/exit URLs

c. Cookies and Similar Technologies

We may use cookies, pixels, SDKs, and similar technologies to support functionality, measure performance, and improve user experience. For detailed information about our cookie practices, please see our Cookie Policy.

Types of cookies we may use:

  • Essential cookies (required for core site functions and security)
  • Analytics cookies (to understand site usage and improve performance)
  • Preference cookies (to remember selections, where enabled)

3. Global Privacy Control (GPC) and Opt-Out Preference Signals

We honor Global Privacy Control (GPC) signals. If your browser or device transmits a GPC signal, we will treat it as a valid request to opt out of:

  • The sale of personal information
  • Sharing of personal information for cross-context behavioral advertising
  • Non-essential tracking and analytics cookies

When we detect a GPC signal, we will display a confirmation message indicating that your privacy preferences have been honored. To learn more about GPC and how to enable it in your browser, visit globalprivacycontrol.org.

4. Legal Bases for Processing (GDPR/UK GDPR)

Where GDPR/UK GDPR applies, we process personal data under one or more of the following legal bases:

  • Consent: where you have provided consent (you may withdraw consent at any time)
  • Legitimate Interests: to operate, secure, and improve the Services
  • Contractual Necessity: to perform or prepare to perform a contract with you
  • Legal Obligation: to comply with applicable laws and regulations

5. How We Use Personal Information

We may use personal information to:

  • Respond to inquiries and requests
  • Provide advisory, research, educational, or consulting services
  • Communicate insights, updates, newsletters, or materials
  • Maintain site security and prevent misuse
  • Improve operational effectiveness and user experience
  • Comply with legal, regulatory, and contractual obligations

We do not sell personal information. We also do not disclose personal information for third-party advertising or marketing purposes.

6. Disclosure of Information

We may disclose personal information only as follows:

  • Service Providers: to vetted vendors that perform services for us under appropriate contractual protections
  • Legal and Compliance: to law enforcement, regulators, courts, or other authorities when required or permitted by law
  • Protection of Rights: to protect the rights, property, security, and integrity of Adelphoï Labs and others
  • Business Transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets

7. Third-Party Service Providers

We use the following categories of third-party service providers to operate our Services:

Provider Purpose Data Processed
Google Analytics Website analytics Usage data, IP address (anonymized)
Mapbox Interactive maps Location queries, IP address
Stripe Payment processing Payment information
AWS (Amazon Web Services) Cloud hosting & storage All data stored on our platform
Abacus.AI AI processing & email delivery Content for AI analysis, email addresses

All service providers are bound by data processing agreements that require them to protect your personal information and use it only for the purposes specified.

8. Data Retention

We retain personal information for the following periods:

Data Category Retention Period Reason
Contact form submissions 3 years Business relationship management
User accounts Until deletion requested Service provision
Financial analysis data 7 years Tax and regulatory compliance
M&A engagement records 7 years after engagement ends Legal and regulatory requirements
Newsletter subscriptions Until unsubscribed Consent-based marketing
Analytics data 26 months Performance analysis
Cookie consent records 2 years Compliance documentation

After the retention period expires, data is securely deleted or anonymized.

9. Data Security

We maintain appropriate administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure password hashing (bcrypt)
  • Role-based access controls
  • Regular security assessments
  • Employee training on data protection

However, no system can guarantee absolute security. In the event of a data breach, we will notify affected individuals and authorities as required by applicable law.

10. Your Rights (EEA/UK – GDPR/UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have the right to:

  • Access your personal data
  • Request correction/rectification
  • Request deletion ("right to be forgotten")
  • Restrict or object to certain processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local data protection authority

11. Your Rights (California – CCPA/CPRA)

If you are a California resident, you may have the right to:

  • Right to Know: Request disclosure of personal information collected, including access to historical data back to January 1, 2022 (or longer if retained)
  • Right to Access: Obtain a copy of your personal information
  • Right to Delete: Request deletion of your personal information (subject to legal exceptions)
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of personal information
  • Right to Limit: Limit use of sensitive personal information
  • Non-Discrimination: Not be discriminated against for exercising your rights

We do not sell personal information. However, you may submit an opt-out request to ensure you are not included in any future data sharing.

To exercise your California privacy rights, please visit our Privacy Rights Request page or contact us using the information below.

12. Exercising Your Privacy Rights

To submit a privacy rights request (access, deletion, correction, opt-out, or data portability), you may:

Response Times:

  • CCPA/CPRA requests: Within 45 days (extendable to 90 days)
  • GDPR requests: Within 30 days (extendable to 60 days)

We may need to verify your identity before processing your request to protect your privacy.

13. International Data Transfers

Adelphoï Labs primarily serves North America. If you access the Services from outside the United States or Canada, you understand that your information may be transferred to, stored in, and processed in jurisdictions that may have different data protection standards.

For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission.

14. Third-Party Websites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties.

15. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint, please contact us at:

Adelphoï Labs
Email: [email protected]
General: [email protected]
Phone: 214-856-2268

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.