Legal

Privacy Policy

Effective Effective January 1, 2026. Last updated October 11, 2026.

This Privacy Policy explains how InfuseLabs Inc (“InfuseBI,” “we,” “us”) collects, uses, discloses, and retains personal information through infusebi.ai and related marketing pages (the “Site”), and describes the rights available to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

1. Scope of this policy

This policy covers personal information we collect as a business through the Site — for example when you request a demo, contact us, or browse our pages.

It does not cover data our customers load into, or generate within, the InfuseBI platform. For that data we act as a service provider (and, where applicable, a processor) on our customer's instructions, and our handling is governed by that customer's subscription agreement and data processing addendum rather than by this policy. If you are an end user of a customer's InfuseBI deployment and want to exercise rights over data held there, please contact that organization directly.

2. Personal information we collect

In the twelve months preceding the effective date of this policy, we have collected the following categories of personal information, using the category names set out in the CCPA/CPRA:

Identifiers: Name, business email address, business telephone number, employer name, and IP address — collected directly from you when you submit the demo request form or otherwise contact us.
Professional or employment-related information: Job role or title, company type, company size band, current BI tooling, and the use case you describe — collected directly from you through the demo request form.
Commercial information: Records of the products and services you have expressed interest in, and our correspondence with you about them.
Internet or other electronic network activity information: Pages viewed, buttons clicked, referring URL, campaign tags in the link you followed (such as utm_source, utm_campaign), advertising click identifiers (such as Google's gclid, gbraid and wbraid, LinkedIn's li_fat_id and Meta's fbclid), approximate location derived from IP address, browser type and device characteristics. These are collected automatically through cookies, local storage and similar technologies (see section 10). When you submit the demo request form, we attach the campaign tags, click identifiers and referring site from your first and most recent visits to your request, so we can tell which channel brought you to us.
Inferences: Conclusions we draw from the above about which products or content may be relevant to your organization.

We do not knowingly collect sensitive personal information as defined by the CCPA/CPRA through the Site, and we do not use or disclose personal information for purposes that would require us to offer a right to limit the use of sensitive personal information. We ask that you not include sensitive personal information, confidential business data, or regulated customer data in free-text fields such as the demo request message box.

3. Sources of personal information

Directly from you, when you complete a form, email us, or speak with our team.
Automatically from your device, through server logs and similar technologies as you browse the Site.
From service providers that host our Site and process our web forms.
Our analytics and advertising providers (Google), through cookies and similar technologies on the Site.
From publicly available or commercially available business sources, such as company websites and professional networking profiles, used to provide context on inbound enquiries.

4. How we use personal information

We use personal information for the following business and commercial purposes:

Responding to demo requests, sales enquiries, and support questions.
Scheduling and conducting product walkthroughs tailored to your stated use case.
Sending business communications about InfuseBI products, security updates, and availability.
Operating, securing, debugging, and improving the Site.
Measuring the effectiveness of our marketing content and measuring and improving our advertising.
Complying with legal obligations, enforcing our terms, and establishing or defending legal claims.

We will not use personal information for a materially different, unrelated, or incompatible purpose without first providing notice.

5. How we disclose personal information

We disclose personal information for business purposes to the following categories of recipients, each of which is contractually restricted from using it for any purpose other than performing services for us:

Hosting, content delivery and infrastructure providers that operate the Site.
HubSpot, which receives demo-request form submissions (including the attribution details described in section 2), and stores and manages demo requests, meetings and related correspondence. After a successful demo request, we embed the HubSpot Meetings scheduler and prefill it with your first name, last name, and email address to make booking easier. To measure our Google Ads, HubSpot sends Google Ads a hashed (SHA-256) copy of your email address and the stage your request reaches (for example, demo held or became a customer), and we may upload the Google Ads click identifier from your visit to Google Ads. We do this only if advertising cookies were enabled when you submitted the form (in the EEA, UK and Switzerland, only if you accepted them). If you opted out through Cookie settings or "Do Not Sell or Share My Personal Information", or your browser sent a Global Privacy Control signal, we don't. See HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy
Google (Google Analytics 4, Google Tag Manager, Google Ads), for analytics and advertising measurement. See https://policies.google.com/technologies/partner-sites
Professional advisors, including legal and accounting advisors, where necessary.
Government authorities, regulators, or litigants, where disclosure is required by law or legal process.
An acquirer or successor entity, in connection with a merger, acquisition, financing, or sale of assets.

7. Retention

We retain each category of personal information for as long as reasonably necessary for the purpose it was collected. Demo request and enquiry records are retained for the duration of the commercial relationship and for 24 months after the last substantive contact. Server and security logs are retained for 90 days. Google Analytics event data is retained for 14 months. Attribution details stored in your browser expire after 90 days. Attribution details attached to a demo request are kept with that request for the period above. We retain information for longer where required to comply with a legal obligation or to establish or defend legal claims.

8. Your California privacy rights

If you are a California resident, the CCPA/CPRA gives you the following rights with respect to personal information we hold about you:

Right to know: To request the categories and specific pieces of personal information we have collected, the categories of sources, our purposes for collecting it, and the categories of third parties to whom we disclosed it.
Right to delete: To request deletion of personal information we collected from you, subject to the exceptions permitted by law.
Right to correct: To request correction of inaccurate personal information we maintain about you.
Right to opt out of sale or sharing: To direct us not to sell or share your personal information. Use the 'Do Not Sell or Share My Personal Information' link or a GPC signal, as described in section 6.
Right to limit use of sensitive personal information: To limit our use of sensitive personal information to permitted purposes. We do not collect sensitive personal information through the Site.
Right to non-discrimination: To exercise any of these rights without receiving discriminatory treatment. We do not offer financial incentives in exchange for personal information.

To exercise any of these rights, email privacy@infusebi.ai or write to us at the postal address below. We will verify your request by matching the information you provide against the information in our records, and may ask for additional information where needed to verify your identity to the degree of certainty the law requires. We will respond within forty-five days, and will tell you if we need an additional forty-five days.

An authorized agent may submit a request on your behalf by providing written permission signed by you, together with proof of the agent's own identity. We may also contact you directly to confirm the agent's authority. If we deny your request, you may appeal by replying to our response or emailing privacy@infusebi.ai with the subject line “Privacy Appeal.”

9. California Shine the Light

California Civil Code § 1798.83 permits California residents to request information about the disclosure of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. You may confirm this by emailing privacy@infusebi.ai.

10. Cookies, analytics and advertising

We use cookies and similar technologies (including browser local storage) on infusebi.ai for: strictly necessary purposes (serving pages, security, remembering your cookie choices); analytics (understanding how the Site is used); and advertising measurement (learning which ads and campaigns lead to demo requests and meetings). We manage these through Google Tag Manager. These technologies are not used inside the InfuseBI product or in analytics our customers embed in their own applications.

Your choices by region: We use Google Consent Mode. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics and advertising cookies are off until you accept them in our cookie banner; until then Google may receive limited cookieless signals to model aggregate statistics. Elsewhere, including the United States, they are on by default and you can turn them off at any time through Cookie settings / Do Not Sell or Share in the footer, or with Global Privacy Control.

_ga: Set by Google Analytics 4. Distinguishes visitors. Duration: 2 years.
_ga_SXPBJ5C7X2: Set by Google Analytics 4. Keeps session state. Duration: 2 years.
_gcl_au: Set by Google Ads (Conversion Linker). Ad-click information for conversion measurement. Duration: 90 days.
_gcl_aw / _gcl_gb / _gcl_ag: Set by Google Ads. Stores the Google Ads click identifier. Duration: 90 days.
HubSpot cookies (on HubSpot's domain): The HubSpot Meetings scheduler embedded after a successful demo request runs on meetings.hubspot.com and may set HubSpot's own cookies there. infusebi.ai does not set HubSpot cookies.
infusebi_attribution (local storage): Set by InfuseBI (first-party). Campaign tags, ad-click identifiers and referring site of your first and most recent visits, attached to demo requests. Duration: 90 days.
infusebi_consent: Set by InfuseBI consent banner. Remembers your cookie choices. Duration: 365 days.
infusebi_optout: Set by InfuseBI opt-out link. Records your Do Not Sell or Share choice. Duration: 365 days.

More controls: Google's My Ad Center (https://myadcenter.google.com), the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout), and your browser's cookie settings. Blocking strictly necessary cookies may break parts of the Site.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, appropriate to the nature of the information and the risks involved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International visitors

The Site is operated from the United States. If you visit from outside the United States, the information we collect will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

If you are in the European Economic Area, the United Kingdom or Switzerland, InfuseLabs Inc, a California corporation is the controller of personal information collected through the Site. We process it on these lawful bases: consent for analytics and advertising cookies (requested through our cookie banner; you can withdraw it at any time in Cookie settings); legitimate interests in responding to your enquiry, operating and securing the Site, and B2B marketing to business contacts; and legal obligation where the law requires. You have the rights to access, rectify, erase, restrict, object, and data portability, and to complain to your local supervisory authority. Transfers to the United States rely on Standard Contractual Clauses where required. Contact privacy@infusebi.ai.

13. Children

The Site is directed to businesses and is not intended for children. We do not knowingly collect personal information from anyone under sixteen. Our analytics and advertising tags are not designed to target children. If you believe a child has provided us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be announced on the Site before they take effect. We review this policy at least once every twelve months, as the CCPA/CPRA requires.

15. Contact us

Email: privacy@infusebi.ai
Post: InfuseLabs Inc, 4089 Clemence Ct, Corona, California 92881-5003

If you have a disability and need this notice in an alternative format, contact us at the address above and we will provide one.