Privacy notice

Scope and controller

This Notice explains how Dawdlo, Inc. ("Dawdlo", "we", "us") processes personal information through its websites, advertising marketplace, APIs, extensions, command-line tools, agent integrations, and related services. It does not govern Microsoft, Anthropic, OpenAI, Stripe, Supabase, Resend, advertisers, employers, workspace administrators, or other third parties, which process information under their own notices.

Information we collect

Account information includes email address, authentication records, account role, profile details, support messages, consent and policy acknowledgements. Advertiser information includes campaign settings, creative text, destination URLs, targeting choices, bids, budgets, billing activity, and campaign performance. Developer information includes integration settings, earnings, payout status, fraud-review status, and payment-provider identifiers.

Device and integration information may include a pseudonymous installation or terminal identifier, operating system, integration type, host or harness name, extension or client version, remote-environment type, coarse region, configuration state, IP address, and request metadata. Activity and measurement information may include genuine wait start and finish times, placement type, whether the relevant window was focused, proof challenges and responses, impression duration, clicks, frequency-cap events, error logs, abuse signals, and marketplace transactions.

Information we do not need

Dawdlo's integrations are not intended to collect source-code contents, file contents, raw prompts, full model conversations or transcripts, passwords, API keys, precise location, or sensitive personal information for advertising. Activity detection may observe limited metadata, such as that a compatible task, terminal command, debug session, or agent transcript file changed, without needing its substantive content. Do not submit unnecessary confidential or personal information to Dawdlo.

Sources

We receive information directly from users and advertisers, automatically from Dawdlo software and devices on which it is authorised, from payment and authentication providers, from campaign interactions, and from administrators or organisations that manage an account or workspace. Advertisers generally provide campaign criteria rather than personal information about individual viewers.

How we use information

We use information to authenticate accounts; provide and secure the Service; select and display eligible sponsored content; apply contextual targeting and frequency caps; verify that an impression was genuinely visible; record clicks; calculate advertiser charges and developer earnings; process deposits and payouts; provide dashboards and support; detect fraud, automation, malware, and policy violations; debug and improve integrations; comply with law; and establish, exercise, or defend legal claims.

Advertising and targeting

Campaign selection may use contextual signals such as host application, operating system, broad project or workflow category, placement, coarse region, and other campaign tags. Dawdlo does not intend to expose a viewer's direct identity, source code, prompts, or conversation contents to advertisers. Advertisers may receive campaign-level or aggregated reporting such as impressions, clicks, spend, placement, broad context, and fraud-adjusted performance.

Depending on the jurisdiction and future product configuration, some advertising or measurement activity may be treated as targeted advertising, sharing, or access to information stored on a device. Where consent or an opt-out is legally required, we will provide the relevant control. Disabling Dawdlo or its advertising surfaces stops future ad requests from that integration, subject to limited processing needed for security, accounting, disputes, and legal compliance.

Legal bases

Where laws such as the UK GDPR or EU GDPR apply, we process information to perform our contract with users and advertisers, pursue legitimate interests in operating and securing the marketplace, comply with legal obligations, and establish or defend claims. We rely on consent where required, including for non-essential device storage or access, certain advertising technologies, or optional processing. You may withdraw consent at any time without affecting earlier lawful processing.

Cookies, local storage, and device access

Our websites and integrations may use cookies, browser storage, extension storage, local configuration files, caches, and pseudonymous identifiers for authentication, preferences, ad delivery, frequency limits, impression verification, fraud prevention, and security. Strictly necessary technologies support requested functionality. We will seek consent before using non-essential technologies where required by law. Browser, operating-system, host-application, and Dawdlo settings may provide additional controls.

When we share information

We share information with service providers that help operate Dawdlo, including Supabase for identity and database services, Resend for authentication and service email, Stripe for payments and identity checks, and hosting, security, analytics, and support providers used by the Service. We may also share information with an organisation that administers your workspace or account, with professional advisers, during a corporate transaction, to protect rights and safety, or where law or valid legal process requires it.

Third-party host applications may observe that a Dawdlo integration is installed or making requests according to their own architecture. Clicking an ad sends you to the advertiser's destination, where the advertiser and its providers may collect information under their own privacy notices. We do not sell direct identifiers such as your email address to advertisers.

International transfers

Dawdlo and its providers may process information in countries other than your own. Where required, we use recognised safeguards for restricted international transfers, such as adequacy regulations, approved contractual clauses, or another lawful transfer mechanism.

Retention

We retain information only as long as reasonably necessary for the purposes described above. Retention depends on account status, transaction and tax requirements, payout and chargeback windows, fraud and security needs, dispute limitation periods, provider requirements, and legal obligations. We may retain aggregated or de-identified information that no longer reasonably identifies an individual.

Security

We use administrative, technical, and organisational safeguards designed to protect information, including access controls, credential separation, transport encryption, pseudonymous device identifiers, and server-side verification. No system is completely secure, and users remain responsible for securing their devices, accounts, API keys, and integration permissions.

Your choices and rights

You can disable advertising surfaces, remove an integration, sign out, change available configuration settings, and decline optional processing. Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information; withdraw consent; opt out of targeted advertising, sale, or sharing as legally defined; and complain to a data-protection authority. We may verify your identity and retain information where an exception applies.

Submit privacy requests to hello@dawdlo.com. Authorised agents may submit requests where local law permits. We will not unlawfully discriminate against you for exercising a privacy right.

Children

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from children through the marketplace. Contact us if you believe a child has provided information.

Changes and contact

We may update this Notice as our products, providers, or legal obligations change. Material changes will be communicated through the Service or another reasonable channel and will take effect on the stated date. Contact hello@dawdlo.com with questions or requests.