Privacy Policy

Effective Date: October 8, 2026

Cardinal AI, Inc. (“Cardinal,” “we,” “our,” or “us”) provides an AI-powered sales outreach and go-to-market automation platform. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website at https://www.trycardinal.com or use our services.

1. Information We Collect

We may collect the following categories of information:

Account Information: Your name, email address, company name, account credentials, and other information provided when registering for our services.

Integration Data: When you connect third-party services, including Google, Gmail, Google Workspace, LinkedIn, or CRM platforms, we may access information authorized through those integrations.

Sales and Contact Data: Business contact information, including names, professional email addresses, job titles, company details, and communications used to facilitate sales outreach.

Usage Information: Information about how you interact with our platform, including feature usage, campaign activity, device information, and technical logs.

Communications: Information you provide when contacting our support team or communicating with us.

2. How We Use Information

We use collected information to:

Provide, maintain, and improve our services.
Authenticate users and manage accounts.
Enable email and sales outreach automation.
Synchronize information with authorized third-party integrations.
Generate AI-assisted content, recommendations, and analytics.
Monitor platform performance and prevent unauthorized activity.
Respond to customer inquiries and provide support.
Comply with applicable legal obligations.

3. Google User Data

When you connect your Google account, Cardinal may request access to certain Google account information and services, depending on the permissions you authorize.

This may include your email address, basic profile information, Gmail messages, and email-sending functionality.

We use Google user data only to provide functionality explicitly requested or authorized by you, including:

Connecting your Google account to Cardinal.
Sending and managing email outreach through your connected account.
Synchronizing relevant email communications and campaign activity.
Displaying email-related information within the Cardinal platform.

Google API Limited Use Disclosure

Cardinal’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data to third parties.

We do not use Google Workspace API data to develop, improve, or train generalized artificial intelligence or machine learning models.

Access to Google user data is restricted to authorized systems and personnel as necessary to provide our services, maintain security, comply with applicable law, or fulfill other purposes permitted under Google’s policies.

You may revoke Cardinal’s access to your Google account at any time through your Google Account permissions.

4. Information Sharing

We do not sell your personal information.

We may share information with trusted service providers that support our infrastructure, hosting, analytics, customer support, and platform functionality.

We may also disclose information when required by law, to protect our legal rights, or in connection with a corporate transaction.

Service providers are expected to handle information in accordance with applicable contractual and security obligations.

5. Data Security

We implement reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and disclosure.

These measures may include encrypted communications, access controls, authentication mechanisms, and infrastructure monitoring.

No method of electronic storage or transmission is completely secure.

6. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide our services, fulfill legitimate business purposes, and comply with applicable legal obligations.

Users may request deletion of their account and associated personal information by contacting us.

When a user disconnects an integration or deletes an account, we handle associated data in accordance with our retention and deletion practices, subject to applicable legal requirements.