Privacy Policy for Dapols

At Dapols, your privacy is important to us. This Privacy Policy outlines the types of personal information we collect, how we use and protect it, and your rights regarding your data when you use our software products and services.

1. Information We Collect

We may collect the following types of information when you interact with our website or use our products:

• Personal Information: Name, email address, phone number, and information you choose to submit. Full payment card details are handled by our payment provider rather than stored by Dapols.
• Technical Information: IP address, browser type, device information, and usage data.
• Product analytics: Structured events such as a quiz starting, a plan opening, or a checkout button being clicked. Our PostHog integration is configured without autocapture, session replay, automatic pageviews, persistent browser storage, full URLs, referrers, or user identification.
• Questions asked in our pre-sale chat: What you type into the “Ask a question” assistant on our marketing pages, the answers it gave, your language, and an email address only if you choose to leave one. We store this so a person can follow up on anything the assistant could not answer. Your IP address is used only to rate-limit the chat and is not stored with the conversation.
• UI prompt library: When you copy a prompt, we add one to that prompt's copy count. To stop one person being counted repeatedly, we keep a one-way hash of your IP address and browser type together with the prompt and the time. Your IP address itself is never stored, and the hash is used only to ignore repeat copies of the same prompt within an hour; these records are cleared out regularly and used for nothing else. We also record an analytics event with the prompt and the AI tool you picked, with nothing that identifies you. If you enter your email to hear about new prompts, we store it for that purpose only, and you can unsubscribe at any time.

2. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our SaaS products and services.
• To process payments and manage customer relationships.
• To communicate updates, support requests, and marketing offers.
• To improve the functionality and user experience of our products.

3. Data Sharing and Disclosure

We do not sell or rent your personal information. However, we may share data with trusted third parties in the following scenarios:

• With service providers who assist in operating our business (e.g., payment processors, cloud services).
• To comply with legal obligations or in response to lawful requests by public authorities.
• If Dapols undergoes a merger, acquisition, or asset sale.

Enquiries sent through websites built with Dapols. When a visitor submits the contact form on a website a customer built with our AI website builder, we store what they send (name, contact details and message) and show it to that business owner, acting on the owner's behalf as a processor. We keep a salted hash of the sender's IP address for abuse prevention, never the address itself. Enquiries are deleted after 24 months, or earlier when the business owner deletes them or closes their account. To have an enquiry removed, contact the business you wrote to or email us.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

5. Security

We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access, update, or delete your data.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at support@dapols.com.

7. Third-Party Services

We use service providers including Supabase for application data and authentication, Polar for checkout and subscription processing, Vercel for hosting and aggregate analytics, and PostHog for privacy-restricted product analytics. These providers process data under their own terms and privacy notices. Our products may also link to third-party websites that Dapols does not control.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

9. Business documents and your profile

After you unlock your plan, you can upload business documents and write a short business profile.

• Documents are stored in a private bucket that only you and our servers can reach. We read the text out of each file so it can be searched.
• For each document you can switch on "Dapols chat can read this". Only then are short excerpts that match your question sent to our AI provider, DeepSeek, to write an answer. Documents with that switch off are never sent.
• A separate switch controls whether the apps you connected can read a document. An app can only read documents switched on for apps.
• When you delete a document, the file and its text are removed right away. If you ask us to delete your account, your documents are deleted with it.
• Your business profile is yours to edit. It is used to answer your questions and by the apps you connect.

Connected apps and the activity log

When you connect an app, Dapols records what it read or changed, with counts and names but never the text of your documents. This log is kept for 90 days. You can switch off any app or token at any time, and access stops immediately.

If you have any questions about this Privacy Policy, contact us at support@dapols.com.