Privacy Policy

1. Introduction

Dottie ("we," "us," or "our") operates Dottie (the "Service"), an AI-powered executive assistant application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

• Email address (required for account creation)
• Name (optional)
• Payment information (when you subscribe to paid features - processed by Stripe)

Connected Accounts

• Google account credentials (for Gmail and Google Calendar access)
• OAuth tokens for service authentication

2.2 Information Collected Automatically

Usage Analytics (planned for future implementation)

• Features used within the app
• Frequency and duration of use
• Performance metrics and error reports
• Device information (device type, operating system, app version)

Log Data

• IP address
• Access times
• App features accessed
• System activity
• Error logs and diagnostics

2.3 Information from Integrated Services

Gmail Data

• Email metadata (sender, recipient, subject, timestamps)
• Email content (only as necessary to provide assistant functionality)
• Contact information from your email communications

Google Calendar Data

• Calendar events and appointments
• Event details (title, time, location, attendees)
• Calendar settings and preferences

3. How We Use Your Information

3.1 Provide and Maintain the Service

• Create and manage your account
• Provide AI-powered executive assistant functionality
• Process and organize your emails and calendar events
• Generate intelligent suggestions and automations

3.2 Improve the Service

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features and functionality

3.3 Communications

• Send service-related emails (account verification, security alerts, updates)
• Respond to your support requests
• Send promotional communications (with your consent)

3.4 Legal and Security

• Comply with legal obligations
• Protect against fraudulent or illegal activities
• Enforce our Terms of Service

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

4.2 Service Providers

We may share your information with:

• Stripe: For payment processing (subject to Stripe's privacy policy)
• Cloud Infrastructure Providers: For hosting and data storage
• Analytics Providers: For service improvement (when implemented)

4.3 Legal Requirements

We may disclose your information if required by:

• Law or legal process
• Government authorities
• To protect our rights, privacy, safety, or property

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security audits and updates
• Limited access to personal information (need-to-know basis)
• Secure OAuth implementation for third-party service connections

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

7.1 Access and Portability

You can access and export your data through your account settings.

7.2 Correction

You can update your account information at any time through the Service.

7.3 Deletion

You can request deletion of your account and associated data at any time.

7.4 Marketing Communications

You can opt-out of marketing communications at any time via the unsubscribe link in our emails or through your account settings.

7.5 California Residents (CCPA)

California residents have additional rights under CCPA, including:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed (we do not sell personal information)
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Data Storage and Location

Your information is stored and processed in the United States. By using our Service, you consent to the transfer and processing of your information in the United States.

10. Third-Party Links and Services

Our Service integrates with Google services (Gmail and Google Calendar). Your use of these services is governed by Google's privacy policy. We are not responsible for the privacy practices of third-party services.

11. Cookies and Tracking

We use minimal cookies necessary for:

• Authentication and security
• Session management
• Preference settings

You can control cookies through your browser settings, but disabling them may limit Service functionality.

12. AI and Machine Learning

12.1 How AI Processes Your Data

Our AI assistant processes your emails and calendar data to provide intelligent assistance. This processing occurs in real-time and is designed to respect your privacy.

12.2 AI Training

We do not use your personal data to train our AI models without your explicit consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

• Email notification
• Prominent notice within the Service
• Requiring acknowledgment for continued use