1. Controller
DD Tech, [CONFIRM: registered business address] ("we") is the controller for personal data processed via dodo. Contact: lamine@etera.tech.
2. What we process
- Account data — email, password hash, login events (legal basis: contract).
- Brand inputs — website URLs you submit and publicly available brand signals we fetch from them (logos, colours, reviews, public social posts) to build your content (contract).
- Generated content — scripts, images, clips and the prompts used to create them (contract).
- Usage & billing data — credit balance, generation events, subscription status (contract / legitimate interest in metering and abuse prevention).
- Payment data — handled by Stripe; we never store card numbers, only your Stripe customer reference and invoice status (contract).
- Diagnostics — error logs and, where enabled, product analytics (legitimate interest).
3. Processors & recipients
We share data with processors only as needed to run the service:
- Supabase — database, authentication, file storage.
- Stripe — payments, subscriptions, invoices.
- Resend — transactional email.
- AI providers — fal.ai, Anthropic, OpenAI, Google (Gemini), Higgsfield: your brand inputs and prompts are sent to them to generate scripts, images and video. They process this data to provide the generation service.
- Data enrichment — context.dev (brand logo/colour lookup), Apify (public profile scraping you request), Google Places (public reviews).
- Diagnostics — Sentry (errors) and, where enabled, PostHog (analytics).
Some providers process data outside the EU/EEA; where they do, transfers rely on adequacy decisions or EU Standard Contractual Clauses.
4. Retention
Account and content data are kept while your account exists. Deleting your account permanently removes your data and files from our systems (invoices are retained by Stripe as required by tax law). Logs and diagnostics are kept for a limited period.
5. Your rights
- Export — download all your data from Account settings at any time.
- Delete — delete your account (and cancel billing) from Account settings; this is immediate and permanent.
- Under the GDPR you also have rights of access, rectification, restriction, objection and portability, and the right to complain to a supervisory authority.
6. Cookies
The app uses strictly necessary cookies for authentication and session state. The marketing site sets no tracking cookies without consent.
7. Changes
We will notify you of material changes to this policy by email or in-app before they take effect.