How we handle your data
This text is not published yet.
Draft for legal review. The operator details marked "to be confirmed" are not final.
What changed in this version: First version for every socialDNA product.
In plain words: what AI Lab keeps about you, why, who else touches it, for how long, and how you see, download or delete it. The formal version is the Privacy Policy.
What we keep
- Account: name, e-mail, phone (if you use it), language, and how you sign in (password, code, passkey, Google, Apple).
- Teams: the groups you belong to (your personal group, your company, your family) and your role in each.
- Devices and security: IP address, device and app version, push-notification token (if you allow notifications), sign-in times, active sessions, a log of every request to our servers, and anonymous first-party counters of which screens are used.
- Plan and payments: your plan, usage counts (including AI usage metered to your plan), amounts, and the subscription identifiers Apple or Stripe give us (the card itself stays with Stripe or Apple).
- Identity check, only in products that require it: the result of a face check (pass or fail, scores, device) done on our own servers and, for some functions, name, state, expiry and last four digits of an ID document.
- On your device only: your language, the team you selected and the e-mail you typed for a sign-in link stay in the browser or app storage; your session token is in a protected cookie or the app's secure storage, never in page storage.
- In AI Lab: Agent session · Agent memory · TO DO · Golden rule · Lesson (black book) · Decision · Book proposal · Agent · MCP server · Skill · Prompt template · Battle method (type of battle) · Lab chat · Lab chat message · AI usage (series) · Market study · Roadmap item · Memory version · TO DO version · Lab worker job · Voice memo · Token saving (resume_study) · Agent key · Agent identity · R&D feature (registry item) · R&D week (weekly close) · Lab worker (machine that runs lab jobs) · AI Lab profile (language, time zone, notices, pins) · Agent request (cloud · local · gemini) · Chat pendency · Approval card (GO) · AI Lab notice · Model price (with source) · AI budget (monthly cap) · AI Lab console settings · Chat invite (waiting for the first sign-in) · Saved command · Scheduled request · AI Lab file (image, video, audio, document) · AI Lab phone (SMS to the agents) · Vertex AI daily report · Battle (submission) · YouTube BI ingest · Lab report (measured) · DB bake-off question · Model connection (customer key, BYOK) · Handbook (apostila) · AI cost/knowledge center (AICCR) · Connected app (MCP consent) · Support attachment · Booking page · Appointment · Booking offer · Agent board session · Agent board file claim · Agent board event log (one session, one day) · Market study draft (written by an agent, published by the owner)
What we use it for
- To sign you in and show you only what you are allowed to see.
- To do what the product does: store, read and organize your records, send the codes and notices you asked for, and take payments.
- To keep the service safe: every request to our servers is checked against the permissions of each record and written to a log.
- Never for advertising, never sold, never used to train AI.
Who else touches it
These companies work for us and receive only what they need for their part:
| Who | What for | What they receive | Where |
|---|---|---|---|
| Google Cloud (Cloud Run, Cloud Storage, Vertex AI — Gemini models) | Runs our servers and stores your files (encrypted at rest by Google). Where a product says so, Gemini models in our own project read the files you add (receipts, bank and card statements, documents, received faxes with the OCR add-on), analyse house photos and aerial images for measurements, translate job-site messages and transcribe voice notes sent to the AI Lab line. The models do not train on your data and no "data sharing" option is enabled. | What you store in the product; the files, photos, messages and voice notes a feature sends for reading | United States |
| Google Firebase (Authentication, Cloud Messaging) | Signs you in with password, e-mail link, Google or Apple, and delivers notifications to your devices. | E-mail, name, sign-in identifiers, device tokens | United States |
| MongoDB Atlas | Our main database. | Account and product records | United States |
| Redis Cloud | A fast copy of permissions and sessions, so each request is checked in milliseconds. | Identifiers, permissions, session state | United States |
| Postmark (ActiveCampaign) — our e-mail relay (SMTP) | Sends our e-mails: sign-in codes, account notices, and the e-mails a product sends for you (appointment confirmations and reminders, estimates and invoices to your clients, signature requests, payment reminders, fax forwards). | E-mail addresses (yours and your recipients') and the message | United States |
| Twilio | Sends and receives text messages (SMS/MMS): sign-in codes you ask for; appointment confirmations and reminders to people who gave their number for that; and the AI Lab two-way line (+1 888 844 5864) for people who texted JOIN from their own phone. Reply STOP to stop, HELP for help. Message and data rates may apply. | Phone numbers, the messages, and any audio you send to the AI Lab line | United States |
| Stripe | Takes card payments on the web when you pay for a plan or credit (today only where a product shows a Stripe checkout). Your card number is typed on Stripe's page and stays with Stripe; we never see it. | E-mail, amount, your team identifier, and the card details you type on Stripe's page | United States |
| Anthropic (Claude) — AI Lab, AI Studio and COWORK agents | Runs the AI agents you ask for in AI Lab, AI Studio and COWORK (requests you queue are executed by our dispatcher with Claude; the claude.ai connector reads what you authorise). Only what you send to an agent is processed; usage is metered to your plan; no data-sharing or model-training option is enabled with the provider. | The text, files and tool results you send to an agent | United States |
Inside your team, the team's owner or administrator decides who sees each record. Records you share with someone outside are visible only to that person, until you stop sharing.
How long we keep it
| What | How long |
|---|---|
| Your account (name, e-mail, phone, sign-in methods) | While the account is open. After you close it: 30 days to change your mind, then erased. |
| What you store in the product (files, records, photos) | Until you or your team delete it. What belongs to a team stays with that team when you leave it. |
| Backups | Deleted data leaves our backups within 35 days. |
| Security and access logs (who did what, when, from which address) | 12 months. |
| Billing records | 7 years, as tax law requires. |
| Your consents (which version you accepted, when and from where) | While the account is open and 5 years after, to prove what was agreed. |
| Sign-in codes | 10 minutes. |
| Face check (only in products that require it) | The check runs on our own servers; no image goes to an AI vendor. We keep the result (pass or fail, scores, device) with your account. The straight-on frame is kept only until the ID-document step is completed, and at most 30 days; the document step keeps the state, expiry and last four digits of the ID, and your name for the verified level. |
| Work location pings (MyTeamDay) | 12 months (365 days), then deleted automatically. |
| Time cards, shifts and pay records kept for a company (MyTeamDay) | By the company, for the period labor and tax laws require (in the US at least 3 years for payroll records, 2 years for time cards and 4 years for employment-tax records), even after you leave the company or close your account. |
| Signed documents and their certificates (MyESign) | Kept by the sender and the sender's team as long as their account or team exists. A signer can download the signed copy from the signing link for 30 days and afterwards by asking the sender. |
| Faxes (myefax) | While your account is open; releasing a fax number does not delete the faxes. |
| Public links you create (client portal, photo portfolio) | Until the expiry you set (client portal: 60 days by default). A portfolio link created without an expiry lasts 1 year and the public copy of each photo has no location or camera data. Each visit is logged (IP address, browser, referrer; the last 500 visits). |
| Your data export file | 7 days after it is ready. |
| Your STOP (text-message opt-out) | Kept indefinitely, by phone number, so that we never text that number again — even after the account is deleted. |
What you can do, and how
- See and download everything: in the product, "Download your data". We prepare a package with your records and files and tell you when it is ready.
- Correct: edit in the product, or write to privacy@socialdna.app.
- Delete: "Delete your account" closes the account in every product at once. You have 30 days to change your mind; then what is only yours is erased.
- Change your consents: marketing, partners, work location and the face check are separate choices, never pre-checked. Turn them on or off at any time in "Your consents and choices"; reply STOP to any text message to stop texts.
- Ask us anything, appeal a refusal, or exercise a right the law gives you (Virginia, California and other US states, Brazil's LGPD, the GDPR): privacy@socialdna.app. We answer within the legal time and never charge for it.
- If you are not our user but someone stored your information with us (as their client, worker, signer or contact), write to the same address: we will forward your request to them and help them answer, or answer ourselves for public-record data.
All versions
- Version 1 · 2026-11-07 · current — First version for every socialDNA product.