APPLIED SIGNALS

Privacy Policy

Last Updated: June 25, 2026

Table of Contents

1. Overview

2. Who We Are and Scope of this Policy

3. Information We Collect

4. Business Operational Data and Customer Content

5. Voice, Communications, CRM, Calendar, and Workflow Data

6. Cookies, Analytics, and Tracking Technologies

7. How We Use Information

8. Artificial Intelligence, Automated Analysis, and Model Use

9. Legal Bases for Processing

10. How We Share Information

11. Third-Party Service Providers and Subprocessors

12. Google API Services and Limited Use Commitments

13. Marketing Communications and Testimonials

14. Data Retention

15. Security Practices

16. Customer Responsibilities

17. Your Privacy Rights

18. U.S. State Privacy Rights, Including California

19. GDPR, UK GDPR, EEA, UK, and Swiss Privacy Rights

20. Canadian Privacy Rights

21. International Data Transfers

22. Children’s Privacy

23. Do Not Track and Preference Signals

24. Links to Third-Party Websites

25. Changes to this Privacy Policy

26. Contact Us

Appendix A: Categories of Data, Purposes, and Retention

Appendix B: Website-Ready Summary Language

1. Overview

This Privacy Policy explains how Applied Signals AI Inc. d/b/a Applied Signals (“Applied Signals,” “we,” “us,” or “our”) collects, uses, stores, protects, discloses, and otherwise processes information when you visit our website, complete an Operational Intelligence Assessment, use our AI-powered operational intelligence services, interact with our applications, communicate with us, or otherwise engage with Applied Signals.

Applied Signals provides operational intelligence, workflow, and AI-enabled services designed to help service businesses identify missed opportunities, improve coordination, strengthen responsiveness, and better manage operational execution. Because our services may involve business workflows, call handling, scheduling, CRM data, customer communications, and AI-generated analysis, this policy is intended to explain both ordinary personal information practices and the additional data practices relevant to AI-enabled business operations.

This Privacy Policy does not replace any written agreement between Applied Signals and a customer. If a separate services agreement, data processing agreement, order form, or other written agreement applies, that agreement may contain additional terms governing how customer data is processed.

2. Who We Are and Scope of this Policy

Applied Signals AI Inc. d/b/a Applied Signals is responsible for the personal information we collect and process as described in this policy, except where we process information solely on behalf of a business customer under that customer’s instructions.

This policy applies to information collected through:

• our website located at https://www.appliedsignals.ai and related pages that link to this Privacy Policy;
• Operational Intelligence Assessments, Opportunity Discovery forms, intake forms, and related questionnaires;
• AI-generated reports, business recommendations, consultant briefs, and operational analyses;
• voice, communications, scheduling, CRM, workflow, reporting, and automation services we provide or configure for customers;
• sales, marketing, support, onboarding, events, and partner activities; and
• any application, portal, or customer-facing tool that links to this Privacy Policy.

This policy does not apply to third-party websites, platforms, services, or applications that we do not control, even if they are linked from our website or integrated into our services.

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you or your organization provide to us directly, including when you submit a form, request an assessment, schedule a call, create an account, communicate with us, upload materials, purchase services, or participate in onboarding.

• identity and contact information, such as name, business name, title, email address, phone number, mailing address, and contact preferences;
• account information, such as username, password, authentication information, profile details, and account settings;
• billing and payment information, such as billing contact details, payment status, invoices, subscriptions, tax information, and transaction records;
• sales and support communications, including emails, call notes, chat messages, form submissions, survey responses, and support requests;
• uploaded or submitted materials, including documents, spreadsheets, screenshots, recordings, call scripts, knowledge base materials, standard operating procedures, workflows, or other business materials; and
• any other information you choose to provide.

3.2 Information Collected Automatically

When you visit or use our website or services, we may automatically collect certain technical and usage information.

• device and browser information, including IP address, browser type, operating system, device identifiers, language settings, referring URL, and approximate location derived from IP address;
• log and usage data, including pages viewed, actions taken, timestamps, clicks, form interactions, session information, error logs, performance metrics, and feature usage;
• cookie and tracking information, including analytics identifiers, advertising identifiers where applicable, and preferences stored through cookies or similar technologies; and
• security information, including authentication logs, access records, suspicious activity indicators, and system event data.

3.3 Information from Third Parties

We may receive information from third parties when permitted by law and consistent with this policy.

• business partners, referral partners, affiliate partners, or agencies that introduce you to Applied Signals;
• CRM, scheduling, communications, analytics, or workflow platforms that you authorize us to access or integrate with;
• publicly available business sources, company websites, professional networks, directories, and business databases;
• payment processors, identity verification providers, hosting providers, security providers, and other service providers; and
• social media or advertising platforms if you interact with our pages, ads, or content.

4. Business Operational Data and Customer Content

Applied Signals services are designed to evaluate and improve business operations. As a result, we may process business operational information that may or may not include personal information. We refer to this information as “Customer Content” or “Business Operational Data.”

Business Operational Data may include:

• call volume, missed calls, after-hours activity, hold times, response times, call disposition, and customer service workflows;
• scheduling practices, appointment data, dispatch workflows, calendars, technician availability, and booking outcomes;
• customer inquiry information, lead source information, estimate follow-up practices, unsold estimate data, and sales or service pipeline information;
• CRM records, tags, notes, lifecycle stages, contact records, deal records, and customer communication history;
• staffing levels, roles, operating hours, escalation procedures, quality assurance practices, training materials, and operational bottlenecks;
• business metrics such as approximate revenue, average ticket size, close rates, conversion rates, capacity constraints, and other operational inputs submitted for analysis;
• voice recordings, transcripts, call summaries, SMS messages, emails, chat messages, and other customer communications if enabled or provided; and
• reports, recommendations, scores, consultant briefs, benchmarks, and other outputs generated from the information above.

Business Operational Data belongs to the customer or the applicable data owner. Applied Signals uses this information to provide, maintain, secure, improve, and support the services, and to fulfill our contractual obligations. We do not claim ownership of Customer Content submitted by customers.

5. Voice, Communications, CRM, Calendar, and Workflow Data

Some Applied Signals services may involve voice agents, call routing, call summaries, transcripts, text messaging, email workflows, calendar scheduling, CRM updates, and automation workflows. Depending on the services you use, we or our service providers may process communications-related data.

• Voice data may include call recordings, transcripts, call summaries, caller phone numbers, timestamps, agent responses, escalation outcomes, and quality assurance notes.
• Messaging data may include SMS, email, chat, routing instructions, appointment confirmations, follow-up messages, and communication metadata.
• CRM data may include contacts, companies, deals, tasks, notes, tags, lifecycle stages, form submissions, and activity history.
• Calendar and scheduling data may include availability, appointment times, booking links, meeting participants, rescheduling information, and event notes.
• Workflow data may include triggers, actions, logs, exceptions, system outputs, audit trails, and integration records.

Where Applied Signals processes information about a customer’s end users, callers, prospects, or clients on behalf of a business customer, the business customer is responsible for providing any legally required notices, consents, call recording disclosures, SMS consents, and other permissions required for that use.

6. Cookies, Analytics, and Tracking Technologies

We may use cookies, pixels, tags, local storage, software development kits, and similar technologies to operate our website, remember preferences, secure our services, measure performance, understand usage, and improve marketing effectiveness.

6.1 Categories of Cookies and Similar Technologies

• Strictly necessary technologies used to provide core website functionality, authentication, security, load balancing, and form operation.
• Preference technologies used to remember user choices, settings, language preferences, or display preferences.
• Analytics and performance technologies used to understand traffic, page performance, conversion paths, and usage trends.
• Marketing and advertising technologies used to measure campaign performance and, where enabled, deliver or evaluate advertising across platforms.

6.2 Managing Cookies

You can control cookies through your browser settings. Some browsers allow you to block or delete cookies. If you disable certain cookies, parts of our website or services may not function properly. Where required by law, we will provide additional cookie controls or consent mechanisms.

7. How We Use Information

We use information for the purposes described below, depending on your relationship with Applied Signals and the services you use.

• to provide, operate, maintain, and improve our website, assessments, reports, applications, and services;
• to create, administer, authenticate, and secure user accounts;
• to perform Operational Intelligence Assessments, Opportunity Discovery reviews, benchmarking, scoring, reporting, and consultant brief generation;
• to configure, operate, and support voice, scheduling, CRM, workflow, automation, reporting, and communications services;
• to communicate with you about services, assessments, onboarding, support, billing, policy updates, security notices, and administrative matters;
• to personalize and improve user experience, recommendations, content, and service delivery;
• to analyze usage, diagnose technical issues, measure performance, and improve reliability;
• to conduct quality assurance, validation review, testing, debugging, and service improvement;
• to process payments, invoices, subscriptions, taxes, refunds, collections, and related financial records;
• to send marketing communications, educational content, partner communications, event invitations, and promotional materials where permitted;
• to protect the security, integrity, and availability of our systems and prevent fraud, misuse, unauthorized access, and harmful activity;
• to comply with legal obligations, respond to lawful requests, enforce agreements, resolve disputes, and protect rights, safety, and property; and
• for any other purpose disclosed at the time of collection or with your consent.

8. Artificial Intelligence, Automated Analysis, and Model Use

8.1 AI-Enabled Services

Applied Signals uses artificial intelligence and automation to help analyze operational data, identify patterns, generate insights, produce draft recommendations, summarize communications, support workflows, and improve operational execution. AI may be used in connection with Operational Intelligence Assessments, reports, scores, consultant briefs, voice workflows, customer communications, CRM updates, and internal quality assurance.

8.2 Decision Support, Not Professional Advice

AI-generated outputs are decision-support tools. They are not legal, accounting, tax, investment, insurance, employment, compliance, or other professional advice. Customers should review AI-generated outputs, recommendations, summaries, scores, benchmarks, and reports before relying on them for material business decisions.

8.3 Human Review and Validation

Applied Signals may use human review, validation flags, quality assurance processes, and internal review workflows to improve output quality and reduce the risk of incorrect or incomplete recommendations. However, no AI or analytics system is perfect, and outputs may contain errors, omissions, assumptions, or outdated information.

8.4 Customer Data and AI Training

Unless a customer expressly authorizes a different use in writing, Applied Signals does not use Customer Content or Business Operational Data to train public, generalized AI models. We may use aggregated, de-identified, or anonymized information to understand service performance, improve reliability, develop benchmarks, strengthen security, and improve our services, provided such information does not identify a customer, end user, or individual.

8.5 Automated Recommendations and Scoring

Our services may generate automated or semi-automated scores, benchmarks, recommendations, readiness assessments, routing suggestions, risk indicators, financial estimates, or operational insights. These outputs are based on information provided to us, configuration choices, benchmark assumptions, and system logic. They are intended to guide review and discussion, not to produce binding decisions about individuals.

9. Legal Bases for Processing

Where privacy laws require a legal basis for processing personal information, we rely on one or more of the following legal bases:

• Contractual necessity: to provide services, fulfill agreements, administer accounts, process payments, and support customers.
• Legitimate interests: to operate and improve our business, secure our systems, communicate with customers, analyze usage, prevent fraud, and develop services in ways that do not override applicable privacy rights.
• Consent: where we ask for consent, such as for certain marketing communications, cookies, integrations, call recording practices, or optional features.
• Legal obligations: to comply with applicable laws, lawful requests, tax, accounting, employment, security, and regulatory obligations.
• Vital interests or public interests: in limited circumstances where applicable law recognizes such bases.

If you are located in a jurisdiction where consent is the primary basis for processing, we will process personal information based on your consent or as otherwise permitted by applicable law. You may withdraw consent where legally available, but doing so may limit our ability to provide certain services.

10. How We Share Information

We may share information in the following circumstances:

• Service providers and subprocessors. We share information with vendors that help us provide hosting, storage, AI processing, communications, analytics, payments, scheduling, CRM, workflow automation, security, and support.
• Customer-authorized integrations. We share or transfer information through integrations that you or your organization enable, configure, or authorize.
• Business customers. If you use our services through an organization, information may be available to that organization and its authorized users.
• Professional advisors. We may share information with attorneys, accountants, auditors, insurers, consultants, and other professional advisors.
• Business transactions. We may share information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction.
• Legal and safety purposes. We may disclose information to comply with law, court orders, subpoenas, regulatory requests, legal process, security investigations, or to protect rights, safety, property, and system integrity.
• With consent. We may share information for other purposes with your consent or direction.

We do not sell personal information for money. If our use of advertising, analytics, or tracking technologies is considered a “sale” or “sharing” under certain privacy laws, users may have the right to opt out as described in the relevant state privacy rights section below.

11. Third-Party Service Providers and Subprocessors

Applied Signals uses third-party providers to deliver and support our services. The exact providers may change over time, but the categories may include:

• cloud hosting, infrastructure, database, and storage providers;
• AI model, transcription, speech, voice agent, and language processing providers;
• telephony, SMS, email delivery, and communications providers;
• CRM, marketing automation, analytics, and customer support providers;
• calendar, scheduling, meeting, and video conferencing providers;
• payment processing, billing, accounting, and tax providers;
• workflow automation, integration, logging, and monitoring providers;
• security, authentication, access management, backup, and incident response providers;
• document generation, reporting, PDF, dashboard, and file storage providers; and
• professional advisors and contractors supporting Applied Signals operations.

We seek to use service providers that agree to process information only for authorized purposes and maintain appropriate safeguards. Some providers may process information in the United States or other countries.

12. Google API Services and Limited Use Commitments

If Applied Signals connects to Google APIs, such as Google Calendar, Google Workspace, Gmail, Google Drive, or related services, our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For Google API data, Applied Signals will use information only to provide or improve user-facing features that are prominent in the applicable service, unless otherwise permitted by Google’s policies and applicable law. We will not use Google API data to serve advertisements, sell the data, or train generalized AI or machine learning models unless expressly permitted by Google’s applicable policies and user consent requirements.

Human access to Google API data is limited to circumstances such as user consent, security, troubleshooting, compliance, or where necessary to provide the requested service.

13. Marketing Communications and Testimonials

We may use contact information to send marketing communications, educational content, product updates, partner information, and event invitations where permitted by law. You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us. We may still send transactional, administrative, security, or service-related messages.

If we publish a testimonial, case study, review, or customer story containing personal information or identifiable business information, we will obtain appropriate permission where required. Customers may request removal of a testimonial by contacting us, though removal from third-party sites or cached pages may not be fully within our control.

14. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Retention periods may vary based on the type of information, the nature of the services, contractual requirements, legal obligations, security needs, backup cycles, dispute resolution, and customer instructions.

When information is no longer needed, we may delete, de-identify, aggregate, anonymize, or securely archive it. Backup copies may remain for a limited period before being overwritten or deleted according to backup schedules.

14.1 Illustrative Retention Schedule

15. Security Practices

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards may include:

• encryption in transit where appropriate, such as HTTPS/TLS;
• access controls, authentication, role-based permissions, and least-privilege principles;
• vendor security review and contractual protections where appropriate;
• monitoring, logging, backups, and incident response processes;
• segmentation of systems and environments where appropriate;
• employee, contractor, and administrator access limitations;
• secure configuration practices and periodic review of service access; and
• procedures for investigating suspected security incidents.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and customers should also protect their own accounts, passwords, devices, systems, and authorized integrations.

16. Customer Responsibilities

Because Applied Signals services may be configured for business operations, customers have important responsibilities. Customers are responsible for:

• ensuring they have the legal right to provide Customer Content and Business Operational Data to Applied Signals;
• providing legally required privacy notices to their customers, callers, employees, contractors, and end users;
• obtaining required consents for call recording, SMS, email, marketing, scheduling, CRM, and AI-enabled communications;
• configuring authorized integrations and user access appropriately;
• reviewing AI-generated recommendations, reports, summaries, scores, and workflow outputs before relying on them;
• using the services in compliance with applicable laws, contracts, industry rules, and platform policies; and
• not submitting sensitive, regulated, or prohibited data unless expressly authorized in a written agreement with Applied Signals.

Applied Signals services are not designed for processing protected health information under HIPAA, payment card data beyond what is processed by approved payment providers, government classified information, children’s data, or other highly regulated information unless we have expressly agreed in writing to support that use case.

17. Your Privacy Rights

Depending on where you live and the laws that apply, you may have certain privacy rights regarding your personal information. These rights may include:

• the right to know or access personal information we hold about you;
• the right to correct inaccurate personal information;
• the right to request deletion of personal information;
• the right to obtain a copy of personal information in a portable format;
• the right to restrict or object to certain processing;
• the right to withdraw consent where processing is based on consent;
• the right to opt out of certain marketing communications;
• the right to opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
• the right to appeal a denied privacy request where required by law; and
• the right not to be discriminated against for exercising privacy rights.

17.1 How to Exercise Rights

To exercise privacy rights, contact us at support@appliedsignals.ai. We may need to verify your identity or authority before responding. If you make a request on behalf of someone else, we may request proof of authorization. We will respond to valid requests within the time required by applicable law.

17.2 Organizational Accounts

If your information is processed through an Applied Signals customer account, we may direct your request to the customer that controls the account, or we may process the request in accordance with that customer’s instructions.

18. U.S. State Privacy Rights, Including California

Certain U.S. state privacy laws may provide additional rights to residents of those states, including California. Depending on whether a law applies to Applied Signals and the specific information at issue, residents may have rights to know, access, correct, delete, opt out, limit use of sensitive personal information, and appeal certain decisions.

18.1 California Notice at Collection

For California residents, the categories of personal information we may collect are described throughout this policy and may include identifiers, commercial information, internet or electronic network activity information, geolocation information derived from IP address or device settings, professional or employment-related information, audio or communications information if voice or messaging features are used, inferences derived from business inputs, and other information you provide.

We collect these categories for the business and commercial purposes described in this policy, including providing services, customer support, security, analytics, marketing, billing, compliance, and service improvement.

18.2 Sale, Sharing, and Targeted Advertising

Applied Signals does not sell personal information for money. Certain advertising, analytics, or tracking activities may be considered “sharing,” “targeted advertising,” or a “sale” under some state privacy laws. Where applicable, we will provide a way to opt out of such activities.

18.3 Sensitive Personal Information

Applied Signals does not intentionally collect sensitive personal information such as precise geolocation, government identifiers, racial or ethnic origin, religious beliefs, health information, or biometric information unless expressly required for a specific service and permitted by law. Customers should not submit sensitive personal information unless specifically authorized in writing.

19. GDPR, UK GDPR, EEA, UK, and Swiss Privacy Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data protection laws, including the right to access, correct, delete, restrict, object to processing, withdraw consent, and receive a portable copy of your personal data. You may also have the right to lodge a complaint with a supervisory authority.

19.1 Controller and Processor Roles

Applied Signals may act as a controller for information we collect for our own business purposes, such as website visitors, sales prospects, billing contacts, and account administration. Applied Signals may act as a processor or service provider when we process Customer Content on behalf of a business customer under that customer’s instructions.

19.2 International Transfers

If personal data is transferred outside the EEA, UK, or Switzerland, we will use appropriate safeguards where required, such as standard contractual clauses, data processing agreements, or other lawful transfer mechanisms.

20. Canadian Privacy Rights

If you are located in Canada, we may process personal information with your express or implied consent, or as otherwise permitted by applicable Canadian privacy laws. You may request access to or correction of personal information, withdraw consent where applicable, and contact us with questions or complaints about our privacy practices.

Withdrawing consent may limit our ability to provide certain services. We may retain information where required or permitted by law, including for legal, security, accounting, or dispute resolution purposes.

21. International Data Transfers

Applied Signals is based in the United States, and information may be processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

22. Children’s Privacy

Applied Signals services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under 13, or the equivalent age under applicable law. If we learn that we have collected personal information from a child without required consent, we will take appropriate steps to delete it.

23. Do Not Track and Preference Signals

Some browsers transmit “Do Not Track” signals. Because there is not yet a uniform industry standard for responding to such signals, our website may not respond to all Do Not Track signals. Where required by applicable law, we will honor legally recognized opt-out preference signals, such as global privacy controls, in a manner required by that law.

24. Links to Third-Party Websites

Our website and services may link to third-party websites, platforms, applications, or services. We are not responsible for the privacy practices, content, or security of third parties. You should review the privacy policies of third-party services before providing information to them.

25. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date. If changes are material, we may provide additional notice through our website, email, account notice, or other appropriate means. Continued use of our services after an updated policy becomes effective means you acknowledge the updated policy to the extent permitted by law.

26. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you want to exercise privacy rights, contact us at:

Applied Signals AI Inc. d/b/a Applied Signals
Email: support@appliedsignals.ai
Website: https://www.appliedsignals.ai

Mailing Address: 2216 Martin Luther King Jr. Ave SE, Washington, DC 20020

Appendix A: Categories of Data, Purposes, and Retention

.