Privacy Policy

Two kinds of people this policy covers

• Customers and their users: people who create or use a DoubleAgent account.
• Authors of public posts: people whose publicly available posts (for example on Reddit, Hacker News, or public social media groups) appear in the signals we surface to customers.

Information we collect from customers

• Account data: name, work email address, password (stored only as a cryptographic hash), organization name, and role.
• Content you create: contacts you add, notes, follow-ups, feedback you submit, and configuration choices.
• Usage and device data: log data, pages viewed, and actions taken in the product, used for security and to operate the service.
• Billing data: plan and billing status. Payment card details, where collected, are handled by our payment processor and never stored on our servers.

Information we process about authors of public posts

Our collection service gathers content that is already publicly available: posts and comments in public forums, public groups, and public feeds. For each post we may process the public username or display name of the author, the text of the post, the venue it was posted in, and a link back to the original. We do not collect content from private accounts, private groups, or anything behind a login wall that restricts access, and we do not attempt to bypass access controls. We do not enrich this data with sensitive categories of information.

We process this information on the basis of our legitimate interest (and that of our customers) in identifying publicly expressed commercial intent. If your public post appears in our service and you would like it removed, email support@godoubleagent.ai with a link to the post and we will remove it from our systems within 30 days.

How we use information

• Provide, operate, secure, and improve the service.
• Score and summarize public posts using artificial intelligence so customers can find relevant demand.
• Send service communications (account, security, and, where enabled, signal notifications).
• Enforce our terms, comply with law, and protect our rights and the rights of others.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use customer content to train artificial intelligence models, and our AI provider processes data under commercial terms that prohibit training on it.

How information is shared

• Within your organization: content you create in the product is visible to your organization according to its roles and permissions.
• Service providers: the subprocessors listed in our Data Handling document (hosting, database, AI processing, collection infrastructure, email delivery), bound by contract to process data only on our instructions.
• Legal: where required by law, subpoena, or to protect safety, rights, or property.
• Business transfers: as part of a merger, acquisition, or sale of assets, with notice where required.

Retention

Customer account data is retained while the account is active and deleted or anonymized within 90 days of a verified deletion request or account closure, except where longer retention is required by law. Collected public-post data is retained while it remains relevant to the service and is deleted on verified request by its author.

Your rights

Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or export personal information we hold about you, to object to or restrict certain processing, and to not be discriminated against for exercising those rights. To exercise any of these rights, email support@godoubleagent.ai. We verify requests and respond within the time required by applicable law. California residents: we do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months.

Security

Data is encrypted in transit and at rest. Access is restricted by role-based permissions and database-level row security, and administrative access is limited to personnel who need it. No system is perfectly secure; we will notify affected parties of a breach as required by applicable law. Details are in our Data Handling document.

Cookies

We use only essential cookies: session authentication and security. We do not run third-party advertising or analytics cookies on the application.

Children

The service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children.

International transfers

We are based in the United States and process data there. Where we transfer personal information from other jurisdictions, we rely on appropriate safeguards such as standard contractual clauses with our subprocessors.

Changes

We may update this policy from time to time. Material changes will be announced in the product or by email, and the date above always reflects the current version.