1. Introduction
Welcome to DataDisco (the "Company"). This Privacy Policy explains how we collect, use, and safeguard the information you provide to us. By accepting this Privacy Policy and our Terms of Service, you consent to our collection, storage, use, and disclosure of your personal information as described below.
2. Information We Collect
We collect both "Non-Personal Information" (data that cannot personally identify you) and "Personal Information" (data that can identify you).
- Personal Information: This includes your first name, last name, email address, and billing address. If you use social networking sites or integrated services (like Google) to log in, we may collect your User ID and email address associated with that service.
- Payment Information: Financial transactions are handled by our payment provider, Stripe. We do not hold or process credit card information; we store only a Stripe Customer ID.
- Technical Information: When you use our Website, we automatically track information provided by your browser, such as your IP address, device type, browser type, and the date and time of access. We track this information using cookies (small text files) to improve the quality of our Website and remember your preferences.
- User Content: Content you contribute to the Website for marketing (such as a testimonial) is publicly viewable along with your name.
3. How We Use and Share Information
We use your Personal Information to provide our services, identify users, and offer customer support.
- Third Parties: We do not sell, trade, or rent your Personal Information for marketing purposes without your consent. We share information with vendors who perform services for us, such as AI providers and payment processors, provided they agree to keep your information confidential. By using our service, you agree that your submitted data may be processed by these third parties. DataDisco makes no guarantees as to the accuracy of the AI-generated data or recommendations.
- Legal Requirements: We may disclose your information if required by law, such as in response to a criminal investigation or fraud complaint.
- Business Transfers: If the Company undergoes a merger or acquisition, your Personal Information may be transferred as part of the business assets.
4. AI Assistant Connections (MCP)
DataDisco lets you connect third-party AI assistants, such as Claude, to your workspace through the Model Context Protocol (MCP). These connections let a connected assistant read content in your workspace and, where you grant permission, create new content on your behalf.
- Authorization (OAuth 2.0): You explicitly authorize each connection through a standard OAuth 2.0 sign-in. We never share your password with the assistant, which receives only a scoped, revocable access token. You can review and revoke connected assistants at any time from your account settings.
- Data Accessed: Once connected, an assistant can access the workspace data you request through it, including your personas, prototypes, and feedback, limited to the read or write permissions you granted.
- Third-Party Processing: When you use a connected assistant, the workspace data it retrieves is transmitted to and processed by the provider of that assistant (for example, Anthropic), under the terms and privacy policy of that provider. DataDisco does not control how a connected assistant or its provider uses data once it has been retrieved at your direction.
- Revoking Access: Revoking a connection in your account settings immediately prevents the assistant from accessing your workspace going forward. Data retrieved before revocation remains subject to the policies of that provider.
5. Data Retention and Security
We retain your Personal Information until you explicitly delete your account. We implement security measures, including encryption and secure socket layer (SSL) technology, to protect your data. However, these measures do not guarantee that your information will not be accessed or disclosed due to a breach of our security safeguards.
6. Your Rights
You have the right to access, correct, export, or delete your Personal Information directly within your account settings. You also have the right to withdraw your consent for data processing or object to specific processing by contacting us.
7. Cookies and Advertising
We use cookies and third-party tools to analyze user behavior and optimize advertising campaigns. Third-party ad networks may serve advertisements on the Website and automatically receive your IP address.
8. Changes and Contact
We reserve the right to change this Privacy Policy at any time, and such changes will take effect immediately. If our information practices change, we will post the changes to the Site.
If you have questions regarding this policy or wish to exercise your rights, please contact us at support@datadisco.com.