1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Personal Information: Name, email address, phone number, and other contact information you provide.

Usage Information: Information about how you use our services, including analytics data, workflow data, and service interactions.

Connected Account Data: If you connect a third-party account or data source (such as an Etsy shop, Google Analytics property, or database), the data you authorize us to access from it.

Technical Information: IP address, browser type, device information, and other technical data collected automatically.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Run the AI agents, scheduled tasks, and integrations you configure
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends and usage
• Detect, investigate, and prevent security incidents
• Comply with legal obligations

3. Information Sharing

We do not sell or trade your personal information. We share it only in the following circumstances:

• With the service providers listed in Section 9, only as needed to operate our services
• With a third-party service you connect, when you or an agent you authorize acts through that connection
• When required by law or to protect our rights
• In connection with a business transfer or acquisition
• With your explicit consent

4. Data Security

We protect personal information with the following measures:

• Encryption in transit: All traffic to DigitalMachine.ai is served over HTTPS using TLS 1.2 or 1.3, with HTTP Strict Transport Security enforced.
• Encrypted credentials: OAuth tokens for connected services (such as Etsy) and database connection credentials are encrypted before they are stored, using keys kept separately from the database.
• Encryption at rest: Files you upload are stored in Google Cloud Storage, which encrypts data at rest.
• Authentication: Account sign-in is handled by Google Firebase Authentication.
• Access controls: Data is scoped to your organization, and every request is checked against your organization membership. AI agents have no access to tools or connected accounts until an organization member enables each capability.
• Audit records: We log actions taken through connected marketplace accounts, including which user or agent performed them.

If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and the appropriate privacy regulator as required by law. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie settings through your browser preferences.

6. Third-Party Services

Our services may integrate with third-party services (such as Google Analytics, Stripe, Firebase, and Etsy). These services have their own privacy policies, and we encourage you to review them. If you connect an Etsy shop, we access shop and listing data through the Etsy API to create and manage draft listings on your behalf.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

8. Your Rights

You have the right to:

• Access and update your personal information
• Request deletion of your personal information
• Opt out of certain communications
• Request a copy of your data
• Withdraw consent where applicable

If you are not satisfied with our response to a privacy request, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

9. Service Providers Outside Canada

We do not move your personal information outside Canada except to the service providers below, and only for the purposes listed. These providers store or process data primarily in the United States:

• Google (Firebase Authentication, Google Cloud Storage, Google Analytics): account sign-in, file storage, and website analytics
• Vercel: website traffic analytics
• Stripe: payment processing
• OpenAI and other AI model providers: processing the prompts, files, and data you send to AI agents
• Twilio SendGrid: delivering emails that you or your authorized agents send
• Etsy: only if you connect an Etsy shop

We require these providers by contract to protect personal information and use it only to provide their services to us. Information stored or processed in another country is subject to that country's laws and may be accessible to its courts, law enforcement, and national security authorities. To ask about our use of service providers outside Canada, contact us using the details below.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. If we add a new service provider outside Canada, we will update Section 9 before sending it any personal information.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@digitalmachine.ai or our contact page.