DoodyDesk

Privacy Policy

Last updated: July 22, 2026

This Privacy Policy describes how DoodyDesk ("we," "us") collects and uses information in connection with DoodyDesk Agent and DoodyDesk CRM (the "Services").

1. Information We Collect

  • Account information you provide at signup: name, business name, email, phone number, and password (stored as a hash).
  • Subscriber content you or your connected systems provide to operate the Services: your customers' contact details, service notes, messages, templates, and connected-account data (for example CRM records, calendar events, and inbound notifications you route to the Services).
  • Usage and log data generated by operating the Services: activity logs, message delivery status, and technical diagnostics.
  • Billing information is handled by Stripe; we never see or store full card numbers.

2. How We Use Information

We use information solely to provide, secure, support, and improve the Services: sending the communications you direct, classifying and drafting messages (including through AI model providers acting as our processors), showing delivery status, billing, and troubleshooting. We do not sell personal information, and we do not use your customers' contact information to market to them.

3. Your Customers' Information and SMS Consent

For general data about your customers, you are the data controller and we process it on your instructions to operate the Services. Text-message consent works differently: DoodyDesk collects and manages SMS consent directly, through our own opt-in flows — a recipient signs up on our hosted opt-in page or confirms by reply text, and DoodyDesk keeps the record of when and how that consent was given. Recipients can withdraw consent at any time by replying STOP to any message, and DoodyDesk honors those requests automatically (see the Terms of Service). If your customer contacts us directly about their data, we will refer them to you or assist you in responding.

4. Sharing

We share information only with service providers needed to run the Services — hosting, telephony and SMS delivery, email delivery, payment processing, AI model providers, and analytics — each bound to use it only to provide their service to us; and where required by law. We may share aggregated or de-identified information that cannot reasonably identify anyone.

5. Retention and Security

We retain account and subscriber content while your account is active and for a reasonable period afterward for backup, legal, and billing purposes, after which it is deleted or de-identified. Data is encrypted in transit, access is limited to what operating the Services requires, and passwords are stored only as salted hashes.

6. Your Choices

You can access and update your account information in the dashboard, export your data by contacting us, and delete your account by cancelling and requesting deletion. Message recipients can opt out of texts at any time by replying STOP.

7. Changes and Contact

We may update this Policy by posting a revised version with a new "Last updated" date. Questions or requests: support@doodydeskai.com.