Digital Bar Privacy Policy

Digital Bar LLC ("Digital Bar," "we," "us," or "our") operates a range of AI-powered communication, automation, analytics, and procurement products. This Privacy Policy describes how we collect, use, and disclose personal information across all of our products, platforms, and websites (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.

1. Overview & Products Covered

This Privacy Policy applies to all Digital Bar products, including:

• Momentum CRM web application
• Momentum CRM mobile native application
• Momentum Energy
• Acquisition Engine
• Everfound

Some provisions apply to all Services; others apply only to specific products and are clearly labeled. In particular, Section 16 (Customer Data We Process on Behalf of Customers) applies only to our platform products and does not apply to Everfound.

2. Definitions

"Services" — All Digital Bar products, platforms, websites, APIs, AI features, automation and communication tools, integrations, storage, and related features operated by Digital Bar LLC.

"Customer" — The entity or individual who creates a Digital Bar account and deploys the Services.

"End Users" — Individuals authorized by a Customer to access the Customer's account (e.g., employees, agents, analysts, evaluators, leadership).

"Customer Data" — Content, data, configurations, contact and prospect lists, communications content (including call recordings and transcripts where enabled), business and portfolio data, RFP and submission data, workflow and automation configurations, integration payloads, prompts, AI outputs, metadata, and any other information submitted to or generated through the Services by or on behalf of a Customer. Our handling of Customer Data is addressed in Section 16.

"Agreement" — The binding terms that govern access to and use of the Services by a Customer and its End Users, which may consist of online terms and conditions and/or a Master Services Agreement executed by Digital Bar and Customer.

3. Our Role: Controller and Processor

Digital Bar operates under a hybrid privacy model.

Digital Bar is a Controller for:

• Account registration information
• Billing and payment data
• Website visitor data (cookies, analytics, logs)
• Security and diagnostic logs (at the infrastructure and system level)
• Communications sent directly to Digital Bar support
• First-party marketing and product analytics
• Fraud prevention

For our platform products, Digital Bar also acts as a Processor / Service Provider for Customer Data, as described in Section 16. Digital Bar does not act as a Processor for Everfound; for Everfound, Digital Bar is solely a Controller of the limited account, payment, and audit-input information described in this Policy.

4. Information We Collect

A. Information You Provide to Us (Controller Role)

• Contact data: Name, email, phone number, address
• Professional data: Company information and your role
• Account credentials: Usernames, passwords, security verification data
• Billing and payment information: Payment card numbers, billing addresses, transaction history
• Communications and feedback: support tickets, emails, feature requests

B. Information Collected Automatically (Controller Role for Operations & Analytics)

• Device and network data: IP address, general geolocation metadata, browser type and device identifiers
• Usage activity: pages visited on our websites, features used, log data, access dates and times
• Tracking technologies: Cookies, pixels, beacons, and analytics data

C. Mobile Application Data (Momentum CRM Mobile Native Application)

When you use our mobile applications, we and our service providers may collect:

• Device and app data: device identifiers, operating system and version, app version, push notification tokens, and crash and diagnostic logs
• Permissioned access: depending on the features you use and the permissions you grant on your device, the app may access the contacts or files you choose to import. The app requests these only as needed, and you can manage or revoke permissions in your device settings.

We do not access device-level data without the applicable permission.

5. How We Use Personal Information (Controller Role)

Digital Bar uses personal information we collect as a Data Controller to:

• Provide and maintain the Services
• Authenticate users
• Process payments and prevent fraud
• Provide customer support
• Improve, optimize, and analyze the Services
• Communicate product updates, marketing, and transactional notices
• Enforce the governing Agreement
• Comply with legal obligations and government requests
• Prevent fraud and abuse

Digital Bar does not sell personal information or share it with third parties for cross-contextual advertising.

6. How We Share Information

Digital Bar shares personal information in the following limited circumstances:

A. Service Providers (Processors / Sub-Processors)

We use third-party vendors and sub-processors to provide platform infrastructure, cloud hosting, AI model access, telephony and messaging providers, payment processing, geospatial services, data storage, analytics, and security tools. Sub-processors are bound by confidentiality and data-protection obligations no less restrictive than this Policy.

B. Legal Compliance

We may disclose personal information where required by law, subpoena, or court order.

C. Protection of Digital Bar

We may disclose personal information to prevent fraud or abuse, enforce the governing Agreement, protect rights, security, or intellectual property, comply with legal obligations and government requests, respond to security incidents, and engage service providers and sub-processors who assist in operating the Services.

D. Business Transfers

If Digital Bar undergoes a business transaction, such as an acquisition, merger, or corporate reorganization, personal information and Customer Data may be among the assets disclosed during due diligence and/or transferred.

7. Data Retention

As Controller: We retain account-level data for as long as necessary to provide the Services, maintain corporate records, resolve disputes, and comply with our legal and regulatory obligations. Retention of Customer Data, where Digital Bar acts as a Processor, is addressed in Section 16.

8. Security

Digital Bar maintains reasonable administrative, technical, and physical safeguards designed to help protect the confidentiality, integrity, and availability of personal information processed by Digital Bar, but no system is 100% secure, and we cannot guarantee absolute security.

Digital Bar cannot be held liable for security vulnerabilities or data exposure resulting from a Customer's failure to secure access to their accounts, manage user permissions, or protect credentials for connected APIs and integrations.

9. International Transfers

Digital Bar and its sub-processors may process data in the United States or other countries, which may have different data-protection laws than your jurisdiction. Where required, we use appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms required by applicable law.

10. Children's Privacy

The Services are not aimed or intended for children under the age of 16, and Digital Bar does not knowingly collect children's personal information. Customers may not upload or process children's data in the Services. If we become aware that we have collected personal information of a child under the age of 16, we will promptly delete such information from our records.

11. Your Privacy Rights

We respect your privacy rights wherever you are located. Depending on your country, state, or region of residence, and subject to applicable law, you may have some or all of the following rights regarding the personal information we hold about you as a Controller:

• Access: confirm whether we process your personal information and request a copy of it
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information, subject to legal exceptions
• Portability: request a portable copy of your personal information
• Objection / Restriction: object to or request restriction of certain processing
• Withdraw consent: where processing is based on consent
• Opt-out: of marketing communications at any time

To exercise these rights, contact us at hello@digitalbar.ai. We may need to verify your identity before responding.

12. U.S. State Privacy Rights

Several U.S. states have enacted comprehensive consumer privacy laws (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others, with additional states taking effect over time). If you are a resident of a state that grants such rights, you have the rights described in Section 11 to the extent provided by your state's law — including the rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the sale or sharing of personal information, targeted advertising, and certain profiling.

Do Not Sell or Share. Digital Bar does not sell personal information for money, and does not share personal information for cross-contextual behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

Sensitive information. We do not use or disclose sensitive personal information for purposes that would require an opt-out or limitation right under applicable law.

Non-discrimination. We will not discriminate against you for exercising your privacy rights.

Appeals. If we decline your request, you may appeal by contacting hello@digitalbar.ai. If your appeal is denied, you may contact your state attorney general.

California Residents (CCPA/CPRA). In addition to the rights above, California residents have the right to know the categories of personal information we collect, the sources of that information, the business or commercial purposes for collecting it, and the categories of third parties to whom it is disclosed (all described in this Policy); the right to access, delete, correct, and obtain a portable copy of their personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising these rights. You may use an authorized agent to submit a request. Requests may be submitted to hello@digitalbar.ai.

13. EU/EEA, UK, and Other International Users

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with comprehensive data-protection laws, you have the rights described in Section 11 to the extent provided by your local law. You may also have the right to lodge a complaint with your local supervisory authority. Where required, we rely on lawful bases such as performance of a contract, legitimate interests, consent, or compliance with legal obligations to process your personal information.

14. Links to Other Sites

The Services contain links to other sites that are not owned or controlled by Digital Bar. We are not responsible for the privacy practices of such other sites. When individuals leave our site, we encourage them to read the privacy statements of each website that collects personal information. This Policy applies only to information collected by Digital Bar.

15. Product Note: Everfound (Controller-Only)

Everfound is an AI search visibility audit tool. For Everfound, Digital Bar acts solely as a Controller. We collect only limited personal information — your account and payment details and the URLs you submit — and we analyze publicly available website content. Everfound does not require you to upload your own customers' personal data.

16. Customer Data We Process on Behalf of Customers (Platform Products Only)

This Section 16 applies only to our platform products — the Momentum CRM web application, the Momentum CRM mobile native application, Momentum Energy, and Acquisition Engine. It does NOT apply to Everfound, for which Digital Bar acts solely as a Controller.

16.1 Processor Role

For the platform products, Digital Bar acts as a Processor / Service Provider for Customer Data, meaning:

• The Customer controls the data;
• The Customer is responsible for providing notices, obtaining required consents, and defining lawful use;
• Digital Bar processes Customer Data only as instructed in the governing agreement (such as our Agreement or a Data Processing Agreement);
• Digital Bar does not use Customer Data for advertising, public-model training, or our own purposes other than providing the Services (except security, fraud prevention, and platform maintenance).

16.2 Categories of Customer Data

• Contact and prospect data: names, emails, phone numbers, company information, and related metadata for individuals the Customer chooses to contact or research
• Communications content: call recordings, transcripts, SMS/MMS messages, email content, and related metadata generated through Customer-configured workflows
• Portfolio and operational data: energy portfolio data, site data, meter and usage data, and related operational records
• Procurement and acquisition data: RFPs, proposals, submissions, evaluation inputs, scores, and related records uploaded or generated by acquisition Customers
• Proprietary business logic: custom configurations, workflows, prompts, rules, rubrics, and strategies defined by the Customer
• Ingested data: information retrieved from public or Customer-authorized sources at the Customer's direction
• User-generated content: notes, comments, and annotations
• AI-generated outputs: research summaries, drafted communications, recommended actions, named risks, scores, and other generated analysis
• System configuration data: workflow and configuration data and API payloads exchanged with Customer-connected systems
• Tenant audit logs: End User account identifiers and activity within the Customer's account
• General inputs: any other data a Customer inputs, uploads, or generates within the Services

16.3 How We Process Customer Data

Digital Bar processes Customer Data as a Data Processor only to perform the following on behalf of, and as instructed by, the Customer:

• Deliver the Services as configured by the Customer
• Process, analyze, and generate AI outputs against Customer-configured workflows, rules, rubrics, and prompts
• Send, receive, record, and transcribe communications (voice, SMS/MMS, email) where the Customer enables and configures such features
• Store and retrieve Customer Data
• Process configured workflows and API integrations
• Maintain platform stability and security
• Prevent fraud and abuse within the Customer's account
• Provide usage analytics to the Customer

We do NOT:

• Sell Customer Data
• Share Customer Data with advertisers or for cross-contextual behavioral advertising
• Use Customer Data to train public AI models
• Use Customer Data for our own marketing or competitive purposes
• Disclose or share one Customer's data, configurations, or content with any other Customer

16.5 Retention of Customer Data

We retain Customer Data only as long as the Customer account remains active, unless otherwise required by applicable law or the governing Agreement. Upon termination or expiration of the Agreement, Digital Bar will delete or return the Customer Data in accordance with the Agreement.

16.6 Government and Regulated Customers

For government and other regulated Customers (for example, Acquisition Engine), additional contractual terms, data-handling requirements, or security frameworks may apply and will control to the extent they conflict with this Policy.

17. Limitation of Liability

Digital Bar's liability is limited as described in the Agreement. This Privacy Policy does not expand or modify those liability limitations.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Services or by email.

19. Contact Us

Digital Bar LLC

Security: security@digitalbar.ai

General inquiries: hello@digitalbar.ai

© 2026 Digital Bar LLC