Privacy Policy

1. Scope and Who We Are

This Privacy Policy applies to Dopamine.so and related services provided by Dopamine Global ("Dopamine.so," "Company," "we," "our," or "us").

Contact: [email protected]

2. Personal Data We Collect

We may collect the following categories of data:

• Account data: name, email address, account credentials, and account preferences.
• Usage and log data: IP address, timestamps, device/browser metadata, pages or features used, and diagnostic events.
• Billing data: subscription status, billing events, and transaction records processed through Creem (we do not store full payment card numbers).
• User Content: prompts, text, images, and files you submit to generate outputs and use product features.
• Support data: information you provide when contacting support.

We do not intentionally collect special categories of sensitive personal data.

3. Sources of Data

We collect personal data from:

• You directly (for example, account creation, prompts, uploads, and support).
• Automatic technologies (for example, cookies, logs, and analytics tools).
• Service providers (for example, Creem for billing events).

4. How We Use Personal Data

We use personal data to:

• Provide and operate the Service.
• Authenticate users and secure accounts.
• Process subscriptions, payments, and billing administration.
• Monitor performance, debug issues, and improve reliability.
• Respond to support requests and user communications.
• Enforce our Terms, prevent abuse, and comply with legal obligations.

5. AI and Model Training

1. We do not use your content to train our own AI models.
2. We use third-party AI providers to process requests and generate outputs.
3. We may apply automated scanning and safety checks to content for abuse prevention, policy enforcement, and service integrity.

6. Legal Bases for Processing (GDPR/UK GDPR)

If you are in the EEA, UK, or similar jurisdictions, we process personal data under one or more of these legal bases:

• Contract: to provide the Service you requested.
• Legitimate interests: to secure and improve the Service and prevent fraud.
• Legal obligation: to comply with applicable laws, tax, accounting, and regulatory obligations.
• Consent: where required (for example, non-essential cookies in certain regions).

7. How We Share Personal Data

We may share data with:

• Payment processor: Creem, for billing and transaction management.
• Analytics provider: GA4, for product analytics and measurement.
• Infrastructure and operations vendors: hosting, logging, email, and support tooling.
• AI providers: to process model requests and deliver outputs.
• Legal/compliance recipients: regulators, courts, or law enforcement when required by law.
• Corporate transaction recipients: in connection with merger, acquisition, financing, or sale of assets, subject to confidentiality safeguards.

8. Cookies and Analytics

We use cookies and similar technologies for authentication, session continuity, security, and analytics. We currently use GA4. We do not currently run interest-based advertising.

You can control cookies through your browser settings and, where required, through consent tools presented in the Service.

9. International Data Transfers

Because we serve users worldwide, personal data may be processed in countries other than your own. Where required, we use legally recognized transfer mechanisms and safeguards.

10. Data Retention

We retain personal data only as long as needed for the purposes described in this Policy, including legal, accounting, fraud prevention, and enforcement needs.

Account-related personal data is deleted within 30 days after account deletion unless a longer retention period is required or permitted by law.

11. Security

We use reasonable technical and organizational safeguards designed to protect personal data, including encryption in transit, access controls, and operational monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your location, you may have rights including access, correction, deletion, portability, restriction, objection, and withdrawal of consent.

To submit a rights request, contact [email protected]. We may verify your identity before processing a request.

13. California Privacy Notice (CCPA/CPRA)

California residents may have rights to know, access, correct, and delete personal information, and to limit certain uses of sensitive personal information where applicable. We do not sell personal information for money and do not share personal information for cross-context behavioral advertising as currently configured.

You may exercise rights by emailing [email protected]. You may designate an authorized agent as permitted by law.

14. Children's Privacy

Dopamine.so is not intended for individuals under 18, and we do not knowingly collect personal data from children. If we learn that personal data from someone under 18 has been collected, we will take reasonable steps to delete it.

15. Changes to This Privacy Policy

We may update this Policy from time to time. If we make material changes, we will post the updated version and revise the Last Updated date. Where required by law, we will provide additional notice or obtain consent.

16. Contact Us

Dopamine Global

General privacy contact: [email protected]