Privacy Policy

1. Introduction

Doug AI lets a business hire an AI agent. Faires Technologies, Inc. ("Doug AI," "we," "our," or "us") operates it at doug.so and app.doug.so. You train Doug on your website and documents and put him on your site. He answers the people who contact your business, captures leads, books appointments, and hands conversations to your team. With your permission he can also run your website and help your business get found in search and AI assistants.

This Privacy Policy explains how we collect, use, share, and protect information when you use our websites, platform, AI features, and related services (the "Services"). Doug handles data about our customers and about the people who talk to our customers' agents, so this policy covers both.

2. Information We Collect

a. Account and Billing Information

Your name, email address, phone number, business name, and sign-in credentials. When you sign in with Google we receive your name, email address, and profile picture. For billing we collect your billing contact, address, and tax details. Stripe handles card numbers, and we never store them.

b. Your Sources and Agent Settings

This covers the material you train your agent on: pages from your website, uploaded files, pasted text, and question-and-answer pairs. It also covers your business profile (services, hours, pricing, location, service area), agent instructions, actions, widget settings, and booking settings.

c. Conversations With Your Agent

When someone talks to your agent, we process the messages, anything the agent is set up to collect (such as a name, email address, phone number, or the details of a booking), and technical details such as the page the chat started on, approximate location from IP address, and browser type. See Section 7.

d. Connected Accounts

When you connect another service, we access only what the features you turn on need:

• Google Calendar or Microsoft Outlook Calendar: your free and busy times, and the events Doug creates for bookings.
• Google Search Console: read-only search performance for the sites you choose, such as queries, clicks, and impressions.
• Google Business Profile: your business listing details and reviews, so Doug can keep your listing accurate and reply to reviews.
• WordPress: an application password you create, used to publish the pages and changes you approve.
• Stripe: your connected account's status, so booking deposits can be paid to you.
• Slack: the messages Doug answers in your workspace and the handoffs he posts for your team.

Section 3 covers Google data in more detail. You can disconnect any account at any time in your settings.

e. Your Website and Online Presence

If Doug runs your website, we store its content, pages, and settings, and we check its health and speed. To track how your business shows up online, we look at public information: your website, your public listings and reviews, and the answers search engines and AI assistants give to questions about businesses like yours.

f. Automatically Collected Information

• Device and browser information
• IP address and access logs
• Usage data, such as pages visited and features used
• Cookies and similar technologies (see Section 15)

3. Google User Data

If you connect a Google account, here is exactly what we request and why:

• Sign in with Google (name, email address, profile picture): to create and secure your account.
• Google Calendar (free/busy and events): to offer times you are actually free and to put confirmed bookings on your calendar. We do not read the contents of your other events.
• Google Search Console (read-only): to show which searches bring people to your site and to suggest pages that answer them.
• Google Business Profile: to keep your listing's details (such as hours, website, and phone) accurate, and to read and reply to your reviews.

We use this data only to provide the features you see and use in Doug AI. We do not sell it, and we do not use it for advertising or to develop, train, or improve generalized AI or machine-learning models. People at Doug AI do not read it unless you ask us to for support, or unless security or the law requires it.

Doug AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google in your settings, or revoke access at myaccount.google.com/permissions. When you disconnect, we delete the stored access tokens.

4. How We Use Your Information

• Provide, operate, secure, and improve the Services
• Train your agent on your sources and answer questions from them
• Run your agent's conversations and the actions you set up, such as capturing leads and booking appointments
• Publish and maintain your website, and track and improve how your business shows up online, when you turn those features on
• Send you conversations, leads, bookings, and alerts
• Bill for your plan and usage
• Communicate with you about your account, product updates, and support
• Detect and prevent security incidents, abuse, and fraud
• Comply with the law

5. Legal Bases (EEA and UK)

Where GDPR or UK GDPR applies, we process your account and billing data to perform our contract with you, and your usage and security data for our legitimate interest in running and protecting the Services. We send marketing email based on your consent or our legitimate interest, and you can opt out at any time. We process some data because the law requires it. For data we process for our customers (Section 11), the customer decides the legal basis.

6. AI Processing

Doug uses AI models to read your sources, answer questions, summarize conversations, and draft content for your website and listings. Relevant content is sent to the AI model providers listed in Section 10. They process it under contract, may not use it to train their models, and delete it on a short, fixed schedule.

We do not use your sources, your conversations, or data from your connected accounts to train generalized or shared AI models.

AI output can be wrong. You choose what your agent learns from and are responsible for what it tells your customers. See our Terms of Service.

7. If You Talked to a Business's Agent

If you chatted with a Doug agent on a business's website, that business decides what the agent collects and how long it is kept. We process the conversation on their behalf, to run the chat and to give them the history and analytics in their dashboard. We do not sell it, use it for advertising, or use it to train generalized AI models.

The chat widget stores a small identifier in your browser so the conversation can continue if you reload the page.

To access or delete what you shared, contact that business. They control the data. If you cannot reach them, email hello@donebydoug.com with the business's name and we will pass your request along and help them handle it.

8. Requests and Bookings Placed Through an Assistant

Doug offers a connector for AI assistants such as Muse, ChatGPT, and Claude. When you ask your assistant to find, book, or contact a local business through Doug, your assistant sends us the details you chose to share: your name, an email address or phone number, the service you need, your preferred times, a service address when the business comes to you, and any notes. Nothing is sent until your assistant confirms it with you.

We pass those details to the one business you picked, or to the businesses you asked for quotes from, so they can answer you. We email you when a business answers, and a business may reply to you directly at the email you gave.

Deposits are paid to the business through Stripe. Your assistant's wallet gives Doug a payment token scoped to that booking's amount, or you pay by card on a Stripe checkout page. Doug never receives your card number.

We keep requests and bookings so you and the business can refer back to them, and we log each connector call (which assistant, which tool, whether it succeeded) to operate and secure the service. To have a request removed, email hello@donebydoug.com with the reference from your confirmation email.

9. Business Listings in Our Directory

Our directory includes businesses that claimed and verified their listing, and businesses we compiled from public sources such as open map data and the business's own website. Compiled listings contain only public business information and are marked as unclaimed. If you own a listed business, you can claim the listing to manage it, or email hello@donebydoug.com to have it corrected or removed.

10. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With subprocessors that help us run the Services, under contracts that limit them to providing those services to us.
• With the services you connect, to carry out what you set up.
• With the businesses you contact through an agent or an assistant.
• For legal reasons, when required by law or legal process, or to protect the rights and safety of our users, the public, or Doug AI.
• In a business transfer, such as a merger or acquisition, subject to this policy.

Subprocessors

• Supabase: Database, file storage, and sign-in (United States)
• Vercel: Application hosting, hosting for websites Doug runs, and routing to AI models
• Anthropic, OpenAI, and Google: AI models that read your sources and write your agent's replies
• Exa: Web search and crawling of the websites you ask Doug to learn from
• Stripe: Subscription billing and booking deposits
• Resend: Transactional email, such as notifications, booking confirmations, and follow-ups
• GitHub: Storage and version history for websites Doug runs
• Deepgram: Speech-to-text when you dictate into the dashboard
• Upstash: Rate limiting and abuse prevention
• Sentry: Error monitoring

We update this list when it changes, and we notify customers of material changes by email.

11. Data Roles

We are the controller of your account data, our website data, and the data we use to secure and operate the platform. For your sources and your agent's conversations with the people who contact you, we act as your processor or service provider, and you are the controller.

As controller of that data, you are responsible for having a lawful basis to process it. You must tell the people who talk to your agent what you collect and why, and disclose that they are talking to an AI where the law requires it. You also obtain any required consents and answer their requests. We will help you meet these obligations. A Data Processing Agreement is available on request.

12. Your Rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy
• Correct inaccurate information
• Delete your information
• Receive your information in a portable format
• Object to or restrict certain processing, and withdraw consent
• Opt out of marketing email at any time

Email hello@donebydoug.com to make a request. We will verify your identity and respond within 30 days, or within the time your local law allows. You can use an authorized agent. We will not treat you differently for exercising your rights. If we deny your request, you can appeal by replying to our decision. You can also complain to your local data protection authority.

If your request concerns a conversation with a business's agent, see Section 7.

13. Data Retention

We keep your data while your account is active. You can delete sources, conversations, and connected accounts at any time. When you delete something or close your account, we delete it from our live systems within 30 days. Backup copies expire on their normal cycle within 30 days after that.

We keep billing records, and information we need for legal obligations, disputes, or security, for as long as the law requires.

14. Data Security

Data is encrypted in transit and at rest. Tokens and passwords for connected accounts are encrypted separately. Each business's data is isolated from every other's, and staff access is limited to what support and security require. No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.

15. Cookies and Similar Technologies

• Essential: to keep you signed in and secure your session in the app.
• Analytics: our marketing site (doug.so) uses Google Tag Manager and analytics cookies to understand how visitors use it.
• Chat widget: stores a conversation identifier in the visitor's browser (see Section 7). It does not track visitors across other sites.

You can block or delete cookies in your browser settings. Some features, such as staying signed in, will not work without essential cookies.

16. International Data Transfers

We and our subprocessors store and process data in the United States. When we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

17. Children

The Services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information. If we learn that we have, we will delete it.

18. Third-Party Services

The provider's own terms and privacy policy govern your use of any service you connect. Please review them.

19. Changes to This Policy

When we update this policy, we post the new version here with a new "Last Updated" date. For material changes, we notify customers by email or in the app before they take effect.

20. Contact Us

For questions about this policy or to exercise your rights: