🛡 The dAutomata Zero-Training Guarantee: We never train, fine-tune, or calibrate any AI or machine learning models on your company data, prompts, API structures, or execution logs. Your data remains 100% your intellectual property.
1. Introduction & Scope
This Privacy Policy describes how dAutomata Inc. ("dAutomata", "we", "us", or "our") processes, protects, and respects personal data and business information when you use our verified AI coworker platform, website (dautomata.com), and related enterprise services.
In accordance with global privacy frameworks including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and the UK Data Protection Act, dAutomata functions as a Data Processor on behalf of our enterprise customers (the Data Controllers).
2. Categories of Information We Collect
A. Customer Account & Administrative Data
When you register for an enterprise account, book an architecture review, or request a Private Cloud deployment, we collect:
- Contact details (name, work email, job title, company name).
- Single Sign-On authentication tokens (Okta, Azure AD / Entra ID, Google Workspace).
- Commercial billing details processed via our PCI-DSS compliant payment provider (Stripe).
B. Operational Health & Speed Metrics
To guarantee 99.99% platform availability and verify our speed commitments, we collect anonymized health metrics:
- Response time metrics for alert capture, Instant Company Memory lookups, and safety rule checks.
- Error status codes, private cloud worker status pings, and resource usage statistics.
- Digitally signed audit receipt IDs (which verify that every workflow step followed your safety rules without containing your raw business data).
C. Information We Explicitly DO NOT Collect
- Raw Database Records: Customer databases connected inside your private cloud are accessed only in temporary memory during automated tasks and are never copied to dAutomata storage.
- Plaintext Passwords or API Keys: Credentials stored in AWS Secrets Manager or HashiCorp Vault are used directly by your private cloud workers; dAutomata staff never have access to your raw keys.
3. How We Use and Process Information
dAutomata processes information strictly for the following purposes:
- To provision, maintain, and secure your private cloud or dedicated AI coworker workers.
- To run the verified step-by-step playbooks authorized by your organization.
- To enforce your locked safety rules and generate tamper-proof audit logs for your compliance team.
- To manage billing based on your active plan and workspace count.
4. Data Retention & Automatic Memory Wiping
Our platform is built around temporary in-memory processing:
- Working Task Data: Exists in temporary memory (RAM) only while an automated task is running (typically under half a second). As soon as the task finishes, memory buffers are immediately wiped clean.
- Account Records: Kept for the duration of your active customer agreement plus 30 days for billing reconciliation.
- Audit Logs: In Private Cloud mode, all execution logs stream directly into your own Amazon CloudWatch, Datadog, or Splunk account and follow your company's retention rules.
5. Authorized Infrastructure Providers
dAutomata maintains strict Data Processing Addendums (DPAs) with our vetted infrastructure providers:
- Amazon Web Services (AWS): Cloud hosting for the central management dashboard (US and EU regions).
- Google Cloud Platform (GCP): Safety rule verification services and global DNS routing.
- Cloudflare: Edge network routing, DDoS protection, and TLS encryption.
- Stripe, Inc.: Enterprise billing and PCI-DSS compliant payment processing.
6. Your Rights Under GDPR & CCPA/CPRA
Depending on your location, you have statutory data protection rights, including:
- Right of Access & Portability: Request confirmation of whether we process your personal data and receive a copy.
- Right to Correction: Request correction of incomplete or inaccurate account records.
- Right to Deletion ("Right to be Forgotten"): Request immediate deletion of administrative personal data.
- Right to Restrict Processing: Restrict certain administrative processing activities.
- Non-Discrimination: Exercise your privacy rights without penalty or service changes.
7. Privacy Contact & Data Protection Officer (DPO)
To exercise your privacy rights or contact our privacy team, please reach out to:
- Data Protection Officer:
dpo@dautomata.com - General Privacy Requests:
privacy@dautomata.com - Corporate Headquarters: dAutomata Inc., 548 Market St, Suite 94000, San Francisco, CA 94104