Privacy Policy

1. Introduction

Dopl ("we," "us," or "our") operates Dopl Intelligence ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, search queries, canvas configurations, and workspace activity.

Conversations and AI Interactions

When you use AI-powered features such as the solution builder, search, or chat functionality, your queries, prompts, and the resulting AI-generated responses are stored. This data is used to provide the Service and to improve the quality, accuracy, and reliability of our AI features over time.

Technical Data

We automatically collect technical information including IP address, browser type, device information, and operating system for security and analytics purposes.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Process and respond to your queries and requests
• Improve AI model quality, accuracy, and relevance using stored interaction data
• Analyze usage patterns to enhance features and user experience
• Communicate service updates, security alerts, and support messages
• Detect, prevent, and address technical issues or abuse

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) infrastructure hosted in the United States. We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews to protect your information.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Conversation and interaction data used for improvement purposes is retained in anonymized or aggregated form. Upon account deletion, your personal data will be permanently removed within 30 days. You may request data export prior to deletion.

6. Third-Party Services

We use the following third-party services to operate the Service:

• Supabase — database, authentication, and real-time infrastructure
• OpenAI — AI model provider
• Vercel — hosting and deployment
• Google — OAuth authentication

Each third-party service operates under its own privacy policy. We only share the minimum data necessary for these services to function.

7. Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

• With third-party service providers as described above
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of Dopl, our users, or others
• In connection with a merger, acquisition, or sale of assets (with notice)

8. Your Rights

You have the right to:

• Access and export your personal data
• Correct inaccurate information
• Delete your account and associated data
• Object to certain processing of your data
• Request restriction of processing

To exercise any of these rights, contact us at the address below.

9. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics data is collected in aggregate form to improve the Service.

11. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy or your data, contact us at: