Privacy Policy

1. Introduction

Welcome to Damian ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Excel Add-in and related services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Payment Information: Payment details processed securely through Stripe (we do not store your full payment card details)
• Excel Data: Content you choose to share with our AI assistant for processing
• Communications: Information in your messages to our support team

2.2 Automatically Collected Information

• Usage Data: Features you use, actions you take, and time spent in the application
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and error logs
• Cookies: Authentication tokens and session data

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our Excel Add-in services
• Process your AI requests and generate responses
• Manage your account and subscriptions
• Process payments and billing
• Send service updates and security alerts
• Improve our services through analytics and research
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. AI Processing and Data

When you use our AI-powered features:

• Your Excel data and queries are processed by third-party AI providers (OpenAI, Anthropic, Google)
• We do not use your data to train AI models without explicit consent
• AI interactions are encrypted in transit and at rest
• You can request deletion of your conversation history at any time

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Clerk (authentication), Stripe (payments), AI providers (OpenAI, Anthropic, Google)
• Business Transfers: In connection with mergers, acquisitions, or sale of assets
• Legal Requirements: When required by law or to protect rights and safety
• With Your Consent: When you explicitly authorize sharing

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through Clerk
• Regular security audits and updates
• Access controls and monitoring
• Secure cloud infrastructure (Supabase, Vercel)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@trydamian.com

9. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Security and fraud prevention
• Analytics and performance monitoring
• Preferences and settings

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

10. Third-Party Services

Our service integrates with third-party providers:

• Clerk: Authentication and user management
• Stripe: Payment processing
• OpenAI: AI processing (GPT models)
• Anthropic: AI processing (Claude models)
• Google AI: AI processing (Gemini models)
• Supabase: Database and file storage
• Vercel: Hosting and deployment

These third parties have their own privacy policies. We encourage you to review them.

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Continued use of our services after changes constitute acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: