Privacy Policy

Last updated: March 2026

1. Introduction

Dopl AI Companion (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI companion platform (“Service”). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

Account Information

Name, email address, and authentication credentials (including OAuth tokens from Google or GitHub) when you create an account.

Conversation & Agent Data

Messages, conversation history, agent memory entries, workflows, tasks, and activity logs generated through your use of the Service.

Integration Data

When you connect third-party accounts (Gmail, Google Calendar, LinkedIn, etc.), we access and process data from those services solely to provide agent functionality. We store OAuth credentials securely and only access the minimum scopes necessary.

Technical Data

IP addresses, browser type, device identifiers, operating system, and access timestamps collected for security, diagnostics, and service improvement.

Payment Information

Billing details are processed exclusively by Stripe. We do not store full payment card numbers on our servers.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service and your AI agent
  • Authenticate your account and ensure security
  • Process payments and manage subscriptions
  • Execute agent actions on your behalf (sending emails, managing calendar, etc.)
  • Maintain agent memory and conversation context across sessions
  • Send transactional communications (account activity, billing, security alerts)
  • Respond to support requests
  • Improve and develop new features
  • Comply with legal obligations

We do not sell your personal information. We do not use your conversations or data to train AI models without your explicit opt-in consent.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted on secure infrastructure in the United States. Agent instances run on isolated cloud servers with encrypted storage. We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, and strict access controls. Access to your data is restricted to authorized systems and personnel on a need-to-know basis.

5. Third-Party Services

The Service relies on the following third-party providers, each governed by their own privacy policies:

  • Supabase — database, authentication, and real-time infrastructure
  • Stripe — payment processing and subscription management
  • Anthropic — AI model inference (Claude)
  • OpenAI — AI model inference (when selected by user)
  • Vercel — web application hosting and deployment
  • DigitalOcean — agent instance hosting
  • Google — OAuth authentication and workspace integrations
  • GitHub — OAuth authentication

6. Data Sharing

We do not share your personal information with third parties except: (a) with service providers strictly necessary to operate the Service, under contractual data protection obligations; (b) when required by law, subpoena, or valid legal process; (c) to protect the rights, safety, and property of our users, Company, or the public; or (d) with your explicit consent.

7. Your Rights

You have the following rights regarding your data:

  • Access — download your data at any time via the Export feature in Settings
  • Correction — update inaccurate account information through your profile
  • Deletion — delete your account and all associated data from Settings
  • Portability — export your conversations, memory, and agent data in standard formats
  • Objection — opt out of non-essential data processing
  • Complaint — lodge a complaint with a supervisory authority (EU/UK/CA users)

To exercise any of these rights, contact us at build@usedopl.com.

8. Cookies and Local Storage

We use essential cookies and browser local storage for authentication, session management, and user preferences. We do not use tracking cookies, advertising pixels, or third-party analytics. You may disable cookies in your browser settings, but this may impair core Service functionality.

9. Data Retention

We retain your data for as long as your account remains active. If you delete your account, your data remains available for export for 30 days, after which it is permanently and irreversibly deleted from our systems. Anonymized, aggregated usage statistics may be retained indefinitely for service improvement purposes.

10. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

11. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers. We take reasonable steps to ensure your data receives an adequate level of protection in accordance with applicable data protection laws.

12. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your California privacy rights, contact us at the address below.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through an in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or your data, contact us at build@usedopl.com

Dopl AI Companion
2603 California Street
San Francisco, CA