Privacy Policy

Dutiful ("we", "our", or "us") operates the Dutiful platform, including the Assist product and API services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our website, products, or services.

By using Dutiful, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

We collect information in the following ways:

Information You Provide

• Account registration details (name, email address, organisation name)
• Billing and payment information (processed securely via our payment provider)
• Queries submitted through Assist or the API
• Communications with our support team
• Feedback and survey responses

Information Collected Automatically

• Device and browser information (type, version, operating system)
• IP address and approximate location
• Usage data (pages visited, features used, session duration)
• API request metadata (endpoints called, response times, error rates)

We use the information we collect to:

• Provide, operate, and maintain our services
• Process your account registration and manage your subscription
• Respond to your enquiries and provide customer support
• Improve and personalise your experience with our products
• Send service-related communications (updates, security alerts, billing notices)
• Monitor and analyse usage patterns to improve our platform
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

We use cookies and similar tracking technologies to enhance your experience. These include:

• Essential cookies: Required for the platform to function (authentication, security, preferences)
• Analytics cookies: Help us understand how visitors interact with our website so we can improve it
• Functional cookies: Remember your settings and preferences across sessions

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our services.

We may share your information with third-party service providers who assist us in operating our platform, including:

• Payment processing providers
• Cloud hosting and infrastructure providers
• Analytics and monitoring services
• Email delivery services

These providers are contractually obligated to protect your information and may only use it to perform services on our behalf. We do not sell your personal information to third parties.

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain information as required by law, to resolve disputes, or to enforce our agreements.

When you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required by law to retain it for a longer period.

API query logs and usage data are retained for 90 days for operational purposes and then automatically purged.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements for our team
• Monitoring and logging of access to sensitive systems

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is completely secure.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to our processing of your personal information in certain circumstances
• Restriction: Request that we restrict the processing of your information

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: [email protected]