Privacy Policy.
Your privacy matters. Learn how DaddyAI collects, uses and protects your data. Last updated September 2026.
1. Information We Collect
We collect information you provide directly:
- Account information: Name, email address, phone number, business name
- Billing information: Payment method details (processed by our payment provider)
- Training data: Product catalogs, sales scripts, conversation templates you upload
- Conversation data: Customer messages processed through the Service
- Usage data: How you interact with the dashboard, features used, API calls
2. How We Use Information
We use your information to:
- Provide, maintain and improve the Service
- Process your AI training data and generate responses
- Send transactional emails (account notifications, billing receipts)
- Respond to support requests and communications
- Analyze usage patterns to improve the platform
- Comply with legal obligations
3. Data Sharing
We do not sell your personal data. We share data only with:
- Service providers: Hosting (Supabase), payment processing, email delivery — bound by data processing agreements
- Messaging platforms: Facebook, Instagram, WhatsApp, Telegram — only message content required for bot responses
- Legal requirements: When required by law, court order or government request
4. Data Security
We implement industry-standard security measures:
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- Tenant data isolation — your data is logically separated from other customers
- Regular security audits and penetration testing
- Access controls and authentication for all internal systems
- Automated backups with point-in-time recovery
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Account data is deleted within 30 days
- Conversation logs are retained for 90 days for compliance, then deleted
- Backup copies are purged within 90 days
6. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Export your data in a machine-readable format
- Objection: Object to processing of your personal data
- Restriction: Request restricted processing
To exercise these rights, email privacy@daddyai.online. We respond within 30 days.
8. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.
9. Changes to Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or dashboard notification at least 30 days before they take effect.
10. Contact
For privacy inquiries or to exercise your rights: