Adapters.io Privacy Policy

This policy explains what personal data Adapters ("Adapters", "we", "us") collects when you use the adapters.io website and the Adapters service, why we collect it, and the choices you have. We keep it short on purpose: we collect little, we sell nothing, and the records you sync through the platform pass through encrypted and are not retained.

1. Data we collect

Account and signup data. When you sign up or express interest, we collect your email address, an optional company name, and the confirmation code we email you to verify the address. We also record the page and campaign parameters (UTM tags) that led to the signup so we know which of our pages are useful.

Contact messages. When you use the contact form we receive the name, email, optional company, and message you submit, plus your IP address for abuse prevention.

Usage analytics. We use Microsoft Clarity to understand how visitors use the site: pages viewed, clicks, scrolling, and approximate device and location information. Clarity may use cookies or similar technologies for this purpose. We use this data in aggregate to improve the site, not to profile individuals.

Server logs. Like almost every website, our servers log requests, including IP address, user agent, timestamps, and the URLs requested. Logs are used for security, debugging, and capacity planning.

Customer data in the service. Records that move through an adapter are processed transiently to perform the sync and are not retained after the sync completes. Sync logs contain metadata (record identifiers, timestamps, statuses), not record contents. Connector credentials are stored encrypted.

2. How we use data

• To provide and operate the service, including sending signup confirmation codes and service emails.
• To respond to messages you send us, including sales, support, and security inquiries.
• To secure the service: rate limiting, abuse and spam prevention, and incident investigation.
• To understand aggregate usage of the website and improve our pages and product.
• To comply with legal obligations.

We do not sell personal data. We do not share personal data with third parties for their own advertising. We do not send marketing email without your consent, and every marketing email we ever send will include an unsubscribe link that works.

3. Processors we rely on

We use a small number of service providers to run Adapters, each bound by a data processing agreement and limited to processing on our instructions:

• Hosting and infrastructure providers that run our servers and databases.
• Email delivery providers that send confirmation codes and transactional email.
• Analytics: Microsoft Clarity, for the usage analytics described above.

Enterprise customers receive our current subprocessor list, and notice of changes to it, as part of their DPA.

4. Retention

Signup and account data is kept for as long as your account or expression of interest is active, and deleted or anonymized within 90 days of a verified deletion request. Contact form messages are kept for up to 24 months so we can follow up on prior conversations. Server logs are retained for up to 12 months. Synced records are not retained at all: they pass through during a sync and are gone when it completes.

5. Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to access, correct, delete, or export the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. California residents additionally have the right to know what categories of personal information we collect and to not be discriminated against for exercising their rights. We honor these requests regardless of jurisdiction where we reasonably can.

To exercise any of these rights, email [email protected]. We verify requests against the email address on file and respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your supervisory authority.

6. Security

Data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Access to production systems is role-gated and logged. The full picture, including our pass-through processing model, is described on our security page.

7. International transfers

We are US-based. Where personal data is transferred from the EU, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses with our processors. Enterprise customers can pin data processing to a US or EU region.

8. Children

Adapters is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

If we change this policy in a material way, we will update the date at the top of this page and, for significant changes affecting account holders, notify you by email before the change takes effect. Continued use of the service after a change means you accept the updated policy.

10. Contact

Questions, requests, or concerns about privacy: [email protected]. For anything else, use the contact page.