Who we are
Doozy is operated by FlowRipple, a company based in India (“we”, “us”). This policy covers askdoozy.com, the Doozy web app at app.askdoozy.com, and the Doozy app in Slack (together, “the service”).
When a business adds Doozy to its workspace, that business decides what Doozy is asked to do and which of its systems Doozy can reach. For the content the business and its people put into the service, the business is the controller and we act as its processor. For the account and billing details we need to run the service, we are the controller.
Questions about this policy go to [email protected].
What we collect
Account details. Your name, email address and profile picture when you sign in, whether with an emailed link or with Google. We do not use passwords.
Workspace details. Your Slack workspace’s name, and the names, email addresses, titles and profile pictures of its members as Slack shares them, so Doozy knows who is asking.
What you ask Doozy to do. The messages in which someone mentions Doozy, the thread they are in, files shared there, and the work Doozy does in reply: its answers, the files it produces and a record of the actions it took.
What Doozy remembers. Notes Doozy keeps about your business so it does not need to be told twice. It learns these only from public channels, or when someone asks it to remember something.
Things you set up. Skills, schedules, workspace instructions, and the tools you connect, including the credentials for them.
Billing details. Your plan, usage and invoices. Card and payment details go straight to our payment provider; we never see or store them.
Security records. When people sign in or change settings, we record who did it, when, and from which IP address and browser.
We do not collect data from Slack conversations Doozy is not mentioned in, except that it learns from public channels it has been added to, as described above.
How we use it
- To run the service: answer requests, carry out the tasks you give Doozy, and show your team what it has done.
- To bill you, enforce your plan’s allowance and tell owners when usage runs low.
- To keep the service and your account secure, and to investigate misuse.
- To send the emails the service needs, such as sign-in links and usage notices. We do not send marketing email without your consent.
- To meet legal obligations.
We do not use your content to train AI models, and we do not sell personal data. More on how Doozy’s AI handles your work is in AI & Data Use.
Who we share it with
We share data only with the companies that help us run the service, and only what each needs for its part. They are listed, with what they do and where, on our sub-processors page.
When you connect a tool to Doozy (GitHub, Linear, Notion and the like), Doozy sends that tool the requests your team asks it to make. Those tools handle the data under your own agreement with them.
We may also disclose data where the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
Where it is processed
We and some of our providers are outside your country, including in India, the United States and, for AI processing, China. Where data protection law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.
How long we keep it
- Account and workspace data is kept while your workspace is active.
- Files Doozy works with in a thread are deleted after 30 days without activity in that thread.
- When a trial ends or a plan is cancelled, Doozy pauses and nothing is deleted, so you can pick up where you left off.
- When you ask us to delete your workspace, we delete its data within 30 days, except records we must keep by law (such as invoices) and security records, which we keep for as long as they are needed for that purpose.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw consent you have given. Write to [email protected] and we will reply within 30 days.
If your data is in a workspace a business controls, we may refer your request to that business, since it decides how its content is used. You may also complain to your local data protection authority.
Security
We protect data with encryption in transit, encrypted storage for credentials, isolation between customers, and access limited to the people who need it. Our Security page has more. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you without undue delay.
Children
The service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.
Cookies
We use only the cookies the service needs to work. Our Cookie Policy lists them.
Changes to this policy
When we make a material change, we will update the date at the top and tell workspace owners by email before it takes effect.