Privacy Policy

Last updated: June 17, 2026

1. Information We Collect

Account Information

Name, email address, and OAuth provider ID (Google or GitHub) from your sign-in.

Usage Data

Workflow definitions, task inputs/outputs, execution logs, credit/point transaction history, reward claim events, team-role and membership activity, and optional public-share metadata (for links or publicly visible tasks).

Payment Information

Billing records and subscription details. Payment card information is processed and stored by Stripe, not by DoumAI.

Technical Data

IP address, browser type, operating system, and access logs.

2. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process payments and manage your credit balance
  • To enforce team access roles, visibility settings, and workspace permissions
  • To send service-related notifications (task results, billing alerts, security updates)
  • To detect, prevent, and address fraud or security issues
  • To comply with legal obligations and law enforcement requests
  • To analyze usage patterns and improve platform features

3. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

  • Stripe — for payment processing (subject to Stripe's Privacy Policy)
  • AI Service Providers — your task inputs are sent to external AI APIs (OpenAI, Anthropic, Replicate, Runpod, etc.) to generate outputs
  • Team Members in Your Workspace — team-related logs, task resources, and billing/consent settings may be visible to teammates according to your role and permissions
  • Law Enforcement — when legally required via valid court orders or subpoenas
  • Service Providers — hosting providers, analytics services, and other vendors who assist in platform operation

4. Data Retention

  • Account data is retained while your account is active.
  • Task execution logs are retained for 90 days.
  • Public-share metadata may remain available until you disable sharing or delete the related resource.
  • Billing records are retained for 7 years (tax compliance).
  • Upon account deletion, personal data is deleted within 30 days (except as required by law).

5. Security

  • All data in transit is encrypted using TLS 1.3.
  • Sensitive data at rest (API keys, secrets) is encrypted using AES-256.
  • API keys and credentials are never logged or visible to support staff.
  • Access is controlled via role-based permissions.
  • No system is 100% secure. Use a strong, unique password for your OAuth provider.

6. Cookies & Tracking

  • Essential cookies are used for authentication and security, and cannot be disabled.
  • Cookie preferences are stored in your browser (localStorage) after consent.
  • Analytics (Google Analytics) is optional and only enabled when you opt in.
  • Marketing cookies are optional via consent controls; they may be used in future campaign features.

7. Public Content & Visibility Settings

  • Tasks and workflows are private by default unless you explicitly set a public visibility option.
  • If you enable public visibility or share links, content metadata and selected artifacts may be accessible to other users.
  • You can remove public visibility or disable sharing in product settings, though previously accessed copies may continue to exist in third-party environments.

8. Your Rights

Depending on your location, you may have rights to:

  • Access — request a copy of your personal data
  • Correction — update or correct inaccurate data
  • Deletion — request deletion of your data (right to be forgotten)
  • Portability — export your data in a machine-readable format
  • Opt-out — opt out of certain data processing

To exercise these rights, contact us.

9. AI Training & Data Usage

Your workflow definitions, prompts, and task outputs are never used to train any AI models—ours or third parties'. We do not retain or analyze your outputs for model improvement.

10. International Data Transfers

If you are located outside the United States, your data may be transferred to, stored in, and processed in the US or other countries. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted here with an updated "Last updated" date. Continued use of the Service indicates acceptance of the revised policy.

Questions or Concerns?

If you have privacy questions or concerns, please contact us.