Privacy Policy

Don't AI Me acts as the Data Controller responsible for the processing of your personal data.

• Name: Don't AI Me
• Email: privacy@dontaime.com

For data protection inquiries and to exercise your GDPR rights, please contact the Data Controller using the contact information above.

The Application and related services acquire the information you supply when you download, access, or register for the service. Registration with the Service Provider is not mandatory. However, you might not be able to use some of the features offered by the service unless you register.

The Service Provider may also use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

When you register, the Service Provider keeps your name, verified email address, how you sign in, your onboarding answers (job title, and optionally company size, country, and how you heard about us), and the reply line you write.

The Service Provider never stores the text of messages. For each check it keeps:

• When the message was sent.
• Who sent it: their user ID, and the name and picture shown on your People page.
• The direct-message channel ID and the message timestamp.
• Whether it looked AI-written.

It also keeps:

• Your messaging connection: your user / application token, stored encrypted.
• The display names and pictures of the people you guard.
• How many messages were checked each month.

Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:

• Contract performance: processing necessary to provide the Application or fulfil a contract with you.
• Consent: where you have given explicit consent to processing, including for marketing, analytics, or optional features. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
• Legitimate interests: where processing is necessary for the Service Provider's specific legitimate interests, such as maintaining network and information security, preventing fraud and abuse, or improving the Application's core functionality through analytics, provided those interests are not overridden by your data protection rights or fundamental freedoms.
• Legal obligation: to comply with laws or government requests.

If the Application uses automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, you have the right to request human review, express your point of view, and contest the decision. Information about the logic involved and the likely consequences of that processing will be provided where required by law.

In addition, the Application may collect certain information automatically, including, but not limited to, the type of computer you use, your device's unique identifier (e.g., IP address or browser fingerprint), the IP address of your computer, your operating system, the type of web browser you use, and information about the way you use the Application.

This Application does not gather precise information about the location of your computer.

The Application uses Artificial Intelligence (AI) technologies to provide certain features. The AI components may process user data in the following ways:

• Automated Functionalities: Certain features may be powered by AI to automate tasks or improve efficiency.
• Data Protection: All AI processing is performed in accordance with this privacy policy and applicable laws, ensuring your data is handled securely and responsibly.

Yes. The Service Provider uses the service providers below to run the Application. Each receives only the personal data it needs for the purpose listed. The Service Provider does not sell personal data.

• WorkOS: sign-in, email verification, two-step verification, and organization membership. Location: United States.
• PostHog: product analytics linked to your account, error reports, and service logs; never message text. Location: United States.
• Google Analytics: marketing analytics, only if you accept analytics cookies. Location: United States.

The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by GDPR Chapter V.

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted

Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

Where the GDPR applies, the Service Provider enters into Data Processing Agreements (DPAs) with third-party service providers that process personal data on its behalf, as required by Article 28 of the GDPR. These DPAs impose the same data protection obligations on those service providers as described in this Privacy Policy.

You can stop further collection of information from your device by ceasing to use the website. Ceasing to use will stop the website from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, withdraw consent, or exercise any of your rights, contact the Service Provider at privacy@dontaime.com.

The Service Provider keeps your data for as long as your account exists. There is no automatic deletion schedule.

• Deleting your account removes your profile, your connections, the people you guard, and your check history.
• Monthly usage counts are kept after you delete your account. They are tied to your integrations account ID, hold no message content, and are needed to enforce usage limits.
• Data we must keep by law, such as payment records, is kept as long as the law requires.

You have the right to request deletion of your personal data at any time, except where retention is required by law. For any request about your data, contact support@dontaime.com.

You can delete your account with "Delete profile" on the Profile page, or ask for deletion by contacting support@dontaime.com. The Service Provider will process your request within the timeframes required by applicable law.

Deleting your account removes your profile, connections, guarded people, and check history. Monthly usage counts, your signup contact record, and analytics events are kept, as described above. Copies held by the service providers listed above are handled under their own retention terms.

The Application is not intended for children under 16 years of age, or where a higher age of digital consent is established under applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourages parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider so that they will be able to take the necessary actions. If you are under 16 years of age, or where a higher age of digital consent is established by applicable law, your parent or guardian must provide consent on your behalf where permitted by law.

The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes and maintains. For example, access is limited to authorized employees and contractors who need to know that information to operate, develop, or improve the Application. However, no security system can prevent all potential security breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law. Where the breach is likely to result in a high risk to your rights and freedoms, the Service Provider will also notify you without undue delay, providing information about the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at privacy@dontaime.com.

This privacy policy is effective as of 27 September 2026.

Under the GDPR, you have the following rights:

• Right of Access: You can request access to your personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your personal data (the "right to be forgotten").
• Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. Withdrawal is as simple as toggling preferences in the Application's settings or contacting the Data Controller.
• Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for each country's Data Protection Authority can be found at https://edpb.ec.europa.eu/about-edpb/members_en.

If you are located in the United Kingdom, you may contact the Information Commissioner's Office at https://ico.org.uk.

If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to Know: You can request disclosure of the categories and specific pieces of personal information the Service Provider has collected about you.
• Right to Delete: You can request deletion of personal information the Service Provider has collected from you, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information to essential purposes.
• Right to Non-Discrimination: The Service Provider will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact the Service Provider at privacy@dontaime.com. The Service Provider will verify your request using the information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, including contract performance, legitimate interests, or legal obligations, is carried out as described above.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at privacy@dontaime.com.

To request deletion of your personal data or to exercise any of your rights, contact the Service Provider using the details provided above. The Service Provider will respond within one month of receiving your request, extendable by up to two months where necessary due to the complexity or volume of requests, as permitted by applicable law.