DDoodrio

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Doodrio collects, uses, and protects your personal information when you use our Service.

1. Information We Collect

Account data

When you register, we collect your name, email address, and (if applicable) your Google profile information via OAuth. We store a hashed password — we never store your plain-text password.

Usage data

We log video jobs, credit transactions, support tickets, and admin actions. This data is used to operate the Service and resolve disputes.

Payment data

Payments are processed by Stripe. We store only a Stripe customer ID — no card numbers, CVVs, or bank details ever touch our servers.

Script content

Scripts you submit are sent to OpenAI for voice synthesis and rewriting. OpenAI's data usage policy applies. We do not sell your script content or use it to train our own models.

2. How We Use Your Information

  • To provide and operate the Service
  • To send transactional emails (email verification, password reset, support replies)
  • To process payments and manage your subscription
  • To detect and prevent fraud or abuse
  • To improve the Service (aggregated, anonymised usage data only)

3. Data Sharing

We share your data with:

  • OpenAI — to process your scripts for voice, rewriting, and image generation
  • Stripe — to process payments
  • Google — if you use Google OAuth login

We do not sell, rent, or share your personal data with any other third parties.

4. Cookies and Tokens

We use a single HttpOnly cookie to store your authentication refresh token. This cookie is domain-scoped and cannot be accessed by JavaScript. We do not use third-party tracking cookies.

5. Data Retention

We retain account data for as long as your account is active. You may request account deletion at any time by contacting support. Deleted accounts have their personal data purged within 30 days, except where retention is required by law.

6. Security

Sensitive credentials (API keys) are AES-256 encrypted in our database. All data is transmitted over HTTPS. Access to production systems is restricted to authorised personnel.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at support@doodrio.com.

8. Changes to This Policy

We may update this policy from time to time. We will notify you by email of material changes.

9. Contact

Questions? Email us at support@doodrio.com.