1. Information We Collect
We collect the following types of information:
- Account information: Email address, name, and authentication credentials when you create an account.
- Training data: Voice recordings, text inputs, product information, and conversation histories you provide to train your AI agents.
- Usage data: API request logs, feature usage patterns, and performance metrics to improve service quality.
- Integration data: Inventory data, catalog information, and webhook payloads from connected systems.
2. How We Use Your Data
Your data is used exclusively to:
- Train and operate your AI sales agents.
- Process voice transcriptions and extract structured training information.
- Sync inventory and catalog data across your connected platforms.
- Provide analytics and performance insights for your account.
- Ensure platform security, detect abuse, and enforce rate limits.
We never sell your data to third parties or use your training data to train models for other customers.
3. Data Security
We implement industry-standard security measures:
- 256-bit AES encryption for data at rest.
- TLS 1.3 encryption for data in transit.
- Regular security audits and penetration testing.
- Role-based access controls and API key authentication.
- Automated threat detection and monitoring.
4. Data Retention
Your data is retained as long as your account is active. Upon account deletion, all personal data and training data are permanently removed within 30 days. Anonymized usage analytics may be retained for service improvement.
5. Third-Party Services
We use the following third-party services to operate our platform:
- Supabase: Database and authentication infrastructure.
- Vercel: Application hosting and deployment.
- AI Model Providers: For voice transcription and language processing.
These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.
6. GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: Request a copy of all data we hold about you.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure: Request deletion of your personal data.
- Right to restrict processing: Request limitation of data processing.
- Right to data portability: Receive your data in a machine-readable format.
- Right to object: Object to processing based on legitimate interests.
7. CCPA Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or dashboard notification at least 30 days before they take effect.
10. Contact Us
For privacy-related inquiries or to exercise your rights, submit a request through our Privacy Request Portal or contact our Data Protection Officer at privacy@daddyai.com.