Privacy Policy

1. Information We Collect

• ·Account data: name, email address, hashed password, profile information
• ·Subscription data: billing plan, payment method (tokenised via Stripe), billing history
• ·Usage data: AI agent interactions, project activity, session logs, token consumption
• ·Technical data: IP address, browser/device info, cookies, log files
• ·Communications: support requests, feedback submitted through the platform
• ·Slack integration data: messages, channel activity if you connect a workspace

2. Legal Basis for Processing

• ·Contract performance: to provide the Dave service you have subscribed to
• ·Legitimate interests: to improve our service, detect fraud, maintain platform security
• ·Legal obligation: to comply with financial, tax, and regulatory requirements
• ·Consent: for optional marketing communications (withdrawable at any time)

3. How We Use Your Data

• ·Provide, maintain, and improve the Dave AI Operating System
• ·Process subscription payments and send billing communications
• ·Respond to support requests and resolve technical issues
• ·Send transactional emails (account verification, invoices, deployment notifications)
• ·Monitor platform security and prevent fraudulent activity
• ·Comply with legal and regulatory obligations

4. Data Processors

• ·Stripe — payment processing (UK/US). stripe.com/privacy
• ·Supabase — database hosting (EU/EEA). supabase.com/privacy
• ·Vercel — application hosting (EU/US). vercel.com/legal/privacy-policy
• ·Brevo (Sendinblue) — transactional email (EU). brevo.com/privacy-policy
• ·Anthropic — AI model inference (US). anthropic.com/privacy
• ·Cloudflare — CDN and domain services (US). cloudflare.com/privacypolicy

We do not sell your personal data to third parties.

5. International Transfers

Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) approved by the UK ICO or the EU Commission, or adequacy decisions where applicable.

6. Data Retention

• ·Account data: subscription duration plus 2 years
• ·Project and conversation data: subscription duration plus 90 days after project close
• ·Billing records: 7 years (legal requirement)
• ·Support communications: 2 years from resolution
• ·Slack messages (if synced): duration of your subscription

7. Cookies

• ·Strictly necessary: authentication session cookies required for the platform to function
• ·Performance: anonymous analytics to understand and improve the service
• ·Preferences: storing your settings and configuration choices

You can manage cookie preferences through your browser settings.

8. Data Security

We implement industry-standard security measures: TLS encryption in transit, AES-256 encryption at rest, row-level security on database tables, role-based access control, and regular security audits.

9. Your Rights Under UK GDPR

• ·Right of access: request a copy of data we hold about you
• ·Right to rectification: request correction of inaccurate data
• ·Right to erasure: request deletion (subject to legal retention obligations)
• ·Right to restriction: limit processing of your data
• ·Right to data portability: receive your data in machine-readable format
• ·Right to object: object to processing based on legitimate interests
• ·Right to withdraw consent: for any consent-based processing

Contact us at hello@imdave.ai to exercise your rights. We respond within 30 days. You may also complain to the ICO at ico.org.uk.

10. Children's Privacy

The Dave platform is for business use only. We do not knowingly collect personal data from individuals under 18.

11. Changes to This Policy

We will notify you of material changes at least 14 days before they take effect via email or in-app notification.

12. Contact

MVT Management, 1 Allied Business Centre, Coldharbour Lane, Harpenden, England, AL5 4UT
Email: hello@imdave.ai