Legal background

Privacy Policy

Last updated:
Jun 29, 2026

Introduction

This Privacy Policy explains how Edvise, Inc., doing business as Endex ("Endex," "we," "our," or "us"), collects, uses, discloses, and protects personal information in connection with our website at endex.ai, our marketing and advertising activities, our event registrations, and other interactions you may have with us outside of a customer contractual relationship (collectively, the "Site").

Scope. This Privacy Policy applies to information we collect when you visit our Site, sign up for a demo or waitlist, attend our events, communicate with us, or otherwise interact with us as a prospective or current contact. This Privacy Policy does not govern how we process data on behalf of our enterprise customers through our products and services. Customer data processing is governed by the applicable Master Services Agreement, Data Processing Agreement, or other written agreement between Endex and the customer (collectively, "Customer Agreements"). If you are an end user of our products through your employer, please refer to your employer's privacy notice and the applicable Customer Agreement for information about how your data is handled within the Endex platform.

Personal Information We Collect

Information You Provide to Us

  • Contact Information. Name, email address, phone number, company name, job title, and mailing address, collected when you fill out a form, request a demo, join our waitlist, or contact us.
  • Professional Information. Company name, job title, department, and professional background, collected to help us understand your needs and communicate with you effectively.
  • Event and Survey Information. Information you provide when registering for a webinar, conference, or other event we host or participate in, or when you respond to a survey.
  • Communications. The content of messages you send us through email, contact forms, or other channels, including any recordings of sales or support calls (where permitted by law and with appropriate notice).
  • Investor Information. If you are a shareholder or investor, we collect information related to your investment, including share purchasing history, number and value of shares held, and holder-of-record details, to manage investor relations, process transactions, prepare tax documents, and maintain our cap table.

Information We Collect Automatically

When you visit the Site, we and our service providers automatically collect certain technical and usage information, including:

  • Device and Browser Information. Device type, operating system, browser type, screen resolution, and unique device identifiers.
  • Network Information. IP address, Internet service provider, and approximate geographic location derived from your IP address.
  • Usage Information. Pages visited, links clicked, referring and exit URLs, date and time of visits, time spent on pages, and other browsing behavior on the Site.
  • Interaction Data. We use analytics tools that may record how you interact with the Site, including clicks, scrolling behavior, and page navigation patterns, to help us understand how visitors use and experience the Site and to identify areas for improvement.

We collect this information through cookies, pixels, web beacons, log files, and similar technologies. See the "Cookies and Tracking Technologies" section below for more detail.

Information We Receive from Third Parties

  • Single Sign-On Providers. If you log into any Endex web portal using a third-party authentication service (e.g., Google or Microsoft), we receive authentication tokens and basic profile information (such as your name and email address) to verify your identity and provide access.
  • Social Media Platforms. When you interact with us on social media (e.g., by following our LinkedIn page), we may receive profile information you have made publicly available.
  • Business Partners and Referrals. We may receive your contact information from a business partner, referral source, or your employer in connection with evaluating or onboarding our services.
  • Data Enrichment Providers. We may supplement contact information we already hold with additional professional information (such as company size or industry) from third-party data providers to improve the relevance of our outreach.
  • Advertising Partners. Our advertising partners may provide us with information about your interactions with our ads on third-party platforms.

How We Use Personal Information

We use the personal information described above for the following purposes:

  • Responding to inquiries. To respond to your demo requests, form submissions, support inquiries, and other communications.
  • Marketing and communications. To send you information about Endex, including product updates, event invitations, newsletters, and promotional content, in accordance with your preferences and applicable law.
  • Site operations. To operate, maintain, and improve the Site, including troubleshooting, analytics, and security monitoring.
  • Analytics and personalization. To understand how visitors interact with the Site, to analyze trends, and to personalize your experience.
  • Advertising. To deliver and measure the effectiveness of our advertising campaigns on third-party platforms.
  • Event administration. To register you for events and communicate with you about events you have signed up for.
  • Investor relations. To manage our cap table, process investment transactions, provide investment-related communications, and prepare required tax and legal documents.
  • Legal and compliance. To comply with applicable legal obligations, respond to legal process, enforce our terms of use, and protect our rights and the rights of others.
  • Business transactions. In connection with a potential or actual merger, acquisition, financing, or sale of assets, personal information may be disclosed to the parties involved and their advisors.

Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies on the Site:

  • Strictly Necessary — Required for the Site to function (e.g., security, session management). Examples: Session cookies, CSRF tokens.
  • Analytics — Help us understand Site traffic and usage patterns. Examples: Google Analytics.
  • Functional — Remember your preferences and settings. Examples: Language preferences.
  • Advertising — Deliver and measure targeted advertisements on third-party platforms. Examples: LinkedIn Insight Tag, Google Ads, Meta Pixel.

Your Cookie Choices. You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. You can also opt out of interest-based advertising through the Digital Advertising Alliance or the Network Advertising Initiative.

Global Privacy Control. We recognize Global Privacy Control (GPC) and similar universal opt-out preference signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out of the sale or sharing of personal information associated with that browser, as required by applicable law.

How We Share Personal Information

We do not sell personal information for monetary consideration. We may share personal information in the following circumstances:

  • Service Providers. We share personal information with service providers that perform functions on our behalf, such as website hosting, email delivery, analytics, advertising, payment processing (Stripe), and customer relationship management. These providers are contractually obligated to use personal information only as directed by us.
  • Advertising Partners. We may share identifiers (such as hashed email addresses or cookie identifiers) with advertising platforms to deliver and measure targeted ads. Under certain state privacy laws, this sharing may be classified as a "sale" or "sharing" of personal information. See "Your Privacy Rights" below for your opt-out options.
  • Professional Advisors. We may share personal information with legal, financial, and other professional advisors in connection with business operations, disputes, or transactions.
  • Legal Requirements. We may disclose personal information to comply with applicable law, legal process, or governmental requests, or to protect our rights, property, or safety or the rights, property, or safety of others.
  • Business Transfers. In connection with a merger, acquisition, reorganization, financing, or sale of assets, personal information may be transferred to the acquiring entity or its advisors.
  • With Your Consent. We may share personal information with third parties when you direct us to do so or provide consent.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, subject to the following general guidelines:

  • Marketing contacts (no active engagement) — 24 months from last interaction
  • Demo/waitlist submissions — 24 months from submission, or until the inquiry is resolved
  • Website analytics data — 26 months
  • Event registration data — 24 months from the event date
  • Communications and support inquiries — 36 months from resolution
  • Investor data — Duration of the investment relationship plus 7 years for tax and legal compliance

We may retain personal information for longer periods where required by law (e.g., tax or accounting obligations) or to establish, exercise, or defend legal claims.

Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. The sections below describe rights available under specific state laws.

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.):

  • Right to Know. You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, the categories of third parties with whom we have shared your information, and whether we have sold or shared your information.
  • Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Correct. You may request correction of inaccurate personal information.
  • Right to Opt Out of Sale/Sharing. You may opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We honor Global Privacy Control signals for this purpose. To opt out, you may submit a request at privacy@endex.ai or click "Do Not Sell or Share My Personal Information" below.
  • Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

Categories of Personal Information Collected (Preceding 12 Months):

  • Identifiers (name, email, IP address) — Collected: Yes | Shared for Advertising: Yes
  • Professional or employment-related information — Collected: Yes | Shared for Advertising: No
  • Internet or electronic network activity (browsing, search history on Site) — Collected: Yes | Shared for Advertising: Yes
  • Geolocation data (approximate, from IP) — Collected: Yes | Shared for Advertising: No
  • Inferences drawn from the above — Collected: Yes | Shared for Advertising: No

We do not collect sensitive personal information (as defined by the CCPA) through the Site.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Do Not Sell or Share My Personal Information — To submit an opt-out request, email privacy@endex.ai with the subject line "Do Not Sell or Share."

Virginia, Colorado, Connecticut, and Other State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island may have some or all of the following rights under their respective state privacy laws:

  • Right to Confirm and Access. You may confirm whether we are processing your personal data and request access to it.
  • Right to Delete. You may request deletion of personal data you have provided to us.
  • Right to Correct. You may request correction of inaccuracies in your personal data.
  • Right to Data Portability. You may request a copy of your personal data in a portable, readily usable format.
  • Right to Opt Out. You may opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
  • Right to Appeal. If we decline a privacy request, you may appeal by contacting us at the address below. If your appeal is denied, you may contact your state's Attorney General.

The availability of specific rights varies by state. Not all rights listed above are available in every jurisdiction.

Exercising Your Rights

To submit a privacy request, contact us at privacy@endex.ai. We will verify your identity before processing your request. We aim to respond within 45 days (or the shorter period required by applicable law). If we need additional time, we will notify you.

You may designate an authorized agent to submit a request on your behalf. We may require the authorized agent to provide proof of authorization and may contact you directly to verify the request.

International Data Transfers

Endex is based in the United States, and personal information collected through the Site is stored and processed in the United States. If you are visiting the Site from outside the United States, your personal information will be transferred to the United States, which may not provide the same level of data protection as your home jurisdiction.

Data Privacy Framework (DPF) Statement

Endex complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Endex has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Endex has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Access. In accordance with the DPF Access Principle, individuals in the European Union, the United Kingdom (and Gibraltar), and Switzerland have the right to access personal data about them that Endex holds and to correct, amend, or delete such personal data where it is inaccurate or has been processed in violation of the DPF Principles. To exercise these rights, please contact Endex at privacy@endex.ai. Endex will respond within a reasonable timeframe. Access, correction, amendment, or deletion may be limited in certain circumstances as permitted under the DPF Principles, including where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy, or where the rights of persons other than the individual would be violated.

Choice. Where Endex intends to (i) disclose personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, or the Swiss-U.S. DPF to a third party (other than an agent acting on Endex’s behalf under a written contract requiring protection consistent with the DPF Principles), or (ii) use such personal data for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individual, Endex will offer individuals the opportunity to opt out. To exercise this choice, individuals may contact Endex at privacy@endex.ai.

Inquiries and Complaints. In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Endex commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF should first contact Endex at: privacy@endex.ai.

Independent Recourse Mechanism. In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Endex commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Arbitration. For complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf.

Regulatory Authority. The Federal Trade Commission has jurisdiction over Endex's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. Endex is also liable in cases of onward transfers to third parties.

Standard Contractual Clauses

For transfers of personal data from the European Economic Area ("EEA") and the United Kingdom ("UK") not covered by our DPF certification, and as a supplemental safeguard, we rely on Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Agreement or Addendum, as applicable) to provide appropriate safeguards for the transfer of personal data to the United States.

Legal Bases for Processing (EEA and UK Visitors)

For individuals in the European Economic Area or the United Kingdom, we process personal information on the following legal bases:

  • Responding to demo requests, inquiries, and contact forms — Contractual necessity (Art. 6(1)(b)); or legitimate interests where no contract exists (Art. 6(1)(f))
  • Sending marketing emails and promotional communications — Consent (Art. 6(1)(a))
  • Website analytics and usage data — Legitimate interests in operating and improving the Site (Art. 6(1)(f))
  • Advertising and retargeting — Consent (Art. 6(1)(a))
  • Event registration and administration — Contractual necessity or consent (Art. 6(1)(b)/(a))
  • Investor relations and cap table management — Legal obligation and legitimate interests (Art. 6(1)(c)/(f))
  • Compliance with legal obligations — Legal obligation (Art. 6(1)(c))
  • Business transfers — Legitimate interests (Art. 6(1)(f))

Where we rely on legitimate interests, you may object to that processing by contacting us at privacy@endex.ai. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

EU and UK GDPR Representatives

In accordance with Article 27 of the EU GDPR and UK GDPR, Endex has appointed the following representatives:

EU Representative: Instant EU GDPR Representative Ltd

UK Representative: GDPRLocal Ltd.

Children's Privacy

The Site is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us at privacy@endex.ai and we will take steps to delete it.

Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. These measures include encryption in transit, access controls, and security monitoring. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Third-Party Links

The Site may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

Communication Preferences

  • Marketing Emails. You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email. Service-related communications (e.g., account notifications or transactional emails) are not affected by this preference.
  • Direct Mail. You can opt out of promotional direct mail by contacting us at privacy@endex.ai.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where required by law, notify you by email or prominent notice on the Site. Your continued use of the Site after any changes constitutes your acknowledgment of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Edvise, Inc. (d/b/a Endex)
Attn: Privacy
Email: privacy@endex.ai

For customer data inquiries: If your question relates to data processed through the Endex platform on behalf of your employer, please contact your employer directly or refer to the applicable Customer Agreement.