Privacy Policy
Last updated: February 26, 2026
This Privacy Policy describes how DBY - Done Before You(“we,” “us,” “our”) collects, uses, stores, and protects personal data across our AI productivity and automation platform.
1. Data we collect
- Account data: name, email, authentication data, workspace membership.
- Knowledge data: uploaded files, extracted text, indexed chunks, and metadata.
- Interaction data: prompts, workflow triggers, chat context, and automation events.
- Integration data: external service connection identifiers and tokens where configured.
- Technical data: IP address, browser/device details, and security logs.
2. How we use data
- Provide core features such as search, agents, workflows, and automation.
- Secure user sessions and support OAuth-based authentication.
- Maintain reliability, debug incidents, and improve product quality.
- Detect abuse, fraud, and unauthorized access attempts.
- Comply with legal and contractual obligations.
3. Legal bases
Where required, processing is based on contract necessity, legitimate interests, legal obligations, and consent (for optional processing when applicable).
4. Sharing and processors
We use subprocessors required to run the platform (infrastructure, authentication, storage, communications, and analytics). We do not sell personal data.
5. International transfers
If data is transferred across borders, we apply safeguards required by applicable law.
6. Retention
Data is retained for as long as needed for service operations, security, legal compliance, and legitimate business purposes, then deleted or anonymized.
7. Security
We implement controls including encryption in transit, access controls, audit logging, and least-privilege authorization.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correction, deletion, portability, objection, and consent withdrawal (including rights under GDPR, CCPA/CPRA, LGPD, PIPEDA, and DPDP frameworks).
9. Contact
Privacy requests: privacy@donebeforeyou.com