Effective date: March 25, 2026 | Last updated: August 27, 2026

Privacy Policy

This Privacy Policy describes how Cedar AI Agents, Inc. ("Cedar," "we," "us," or "our") collects, uses, and protects information in connection with the Cedar AI platform (the "Service"). Cedar is incorporated in British Columbia, Canada.

1. Information We Process

Cedar processes three categories of data:

Customer Data — data you and your organization provide through the Service. This includes:

Network Data — professional and company data Cedar obtains from sources other than you, used to build and enrich the professional network graph that powers referral matching. This includes:

Service Data — data Cedar collects automatically to operate and improve the Service:

2. How We Use Information

Cedar uses Customer Data solely to provide the Service to you. Specifically:

Cedar does not use Customer Data to train general-purpose AI or machine learning models, to build profiles for advertising, or for any purpose other than delivering the Service to you.

Cedar uses Network Data to build and maintain the professional network graph that identifies possible referral paths between an employee and a candidate. Network Data is not used to train general-purpose AI or machine learning models, is not used for advertising, and is not used for any purpose other than operating the Service.

3. AI and Machine Learning

Cedar's Service uses AI to generate recommendations. Our AI processes your data as follows:

4. Sharing and Sub-Processors

Cedar shares data only as necessary to deliver the Service. Our key sub-processors are:

Network Data is processed by the same sub-processors listed above where necessary to operate the Service. Cedar does not sell, rent, or share Customer Data or Network Data with third parties for their own purposes.

5. Data Retention and Deletion

Cedar retains Customer Data for the duration of your active subscription or evaluation period. Upon termination:

Some sub-processors delete or expire content on their own retention schedules; where that schedule is shorter, content may be removed before the periods described above.

Service Data. Session replay data is deleted automatically within 30 days of capture under a storage lifecycle rule, whether or not your subscription has ended. Other Service Data is retained only as long as needed to operate, secure, and support the Service.

Network Data. Cedar retains Network Data for as long as it remains relevant to the professional network graph. Individuals whose information appears in Network Data may contact Cedar about that information as described in Section 8.

6. Security

Cedar protects Customer Data using industry-standard security measures, including:

In the event of a security incident affecting Customer Data, Cedar will notify affected customers within 72 hours of confirmed discovery.

7. International Data Transfers

Cedar is incorporated in Canada, which the European Commission recognizes as providing an adequate level of data protection for commercial organizations. Customer Data may be processed in the United States by the sub-processors listed in Section 4. For those onward transfers, Cedar relies on the transfer mechanisms in its agreements with those sub-processors, including Standard Contractual Clauses or equivalent frameworks, as required under applicable data protection law.

8. Your Rights

Depending on their location, customers, their employees, and individuals whose professional information Cedar holds as Network Data may have rights with respect to personal data, including:

To exercise these rights, contact support@getcedar.ai. Cedar will respond within 30 days. Individuals whose professional information Cedar holds as Network Data may contact Cedar at the same address regarding that information, and Cedar will respond to such requests as required under applicable data protection law. Where Cedar processes personal data on behalf of a customer, Cedar will refer the request to that customer and assist in responding to it.

9. Cookies and Tracking

Cedar's Service operates primarily within Slack and does not use cookies or tracking technologies for advertising purposes. Our website (getcedar.ai) may use minimal analytics to understand visitor behavior. Cedar's web application records session replay data as described in Section 1, which Cedar uses to diagnose errors and support users, not for advertising or profiling. No personal data is sold or shared with advertising networks.

10. Changes to This Policy

Cedar may update this Privacy Policy from time to time. Material changes will be communicated to active customers with at least 30 days notice. The current version is always available at getcedar.ai/privacy.

11. Contact

For questions about this Privacy Policy, contact Cedar at: support@getcedar.ai

Cedar AI Agents, Inc., Suite 2700, The Stack, 1133 Melville St, Vancouver, BC V6E 4E5, Canada