Privacy Policy
This notice explains how DAD TECHNOLOGIES handles information when you use AUTO DADY AI at autodady.cloud.
1. Who is responsible
AUTO DADY AI is owned and operated by DAD TECHNOLOGIES, Pakistan. For account, billing and website information, DAD TECHNOLOGIES acts as the controller where that term applies. Business customers determine the purposes of processing the customer conversations and contact records they upload; we process that information on their instructions. Contact mushtaq@dadtechnologies.com for privacy questions.
2. Information we collect
We process account names, email addresses, business profiles, hashed passwords or Google account identifiers, verification records, session information, customer phone numbers, conversations, CRM records, integration credentials, product and order metadata, consent records, support requests, payment references and uploaded payment evidence. Please crop payment screenshots to remove unrelated financial information. We do not need your payment-card details, account PINs or OTPs.
3. How information is used
We use information to create and verify accounts, provide the CRM and messaging features, connect stores, process subscription approvals, deliver service emails, prevent abuse and respond to support or rights requests. Where applicable, legal bases may include performance of a contract, legal obligations, legitimate interests in securing the service, or consent for activities that require it. A business customer is responsible for establishing a lawful basis for its own contacts and messages.
4. AI and connected services
WhatsApp messages pass through Meta. If you enable the optional unofficial linked-device connector, this server also stores encrypted session credentials to maintain that connection. You can revoke it from the workspace and your phone’s Linked devices screen. Store integrations exchange data with the connected Shopify or WooCommerce store. When a workspace enables Live Call AI, its selected voice provider processes phone numbers, call audio and provider-returned transcripts or summaries according to that provider account and applicable consent/recording rules. Google sign-in is optional. Gemini receives selected business information and conversation context only when the workspace enables it. Google’s free AI tier may use submitted content to improve its products, subject to Google’s current terms. The included FAQ engine does not send text to an AI provider. Avoid sending sensitive personal information to an AI provider without an appropriate basis and contractual safeguards.
5. Sharing and international processing
Hosting, email, authentication and integration providers may process information in countries other than your own. The actual providers and hosting regions must be identified in your service agreement and subprocessor schedule. Where international transfer restrictions apply, the parties must establish the required safeguards, such as suitable contractual clauses, before the transfer. This notice itself is not a transfer mechanism or a claim of worldwide legal compliance. We do not sell personal information or use this app to serve behavioral advertising.
6. Retention and security
Workspace records remain available while your account is active unless you delete them or request deletion. Account closure, backup expiry and any legally required financial retention are handled under an agreed retention schedule. Sessions expire after seven days, email verification links after 24 hours and password reset links after 30 minutes. Passwords are hashed and integration secrets are encrypted at rest. Security also depends on the deployed hosting, access controls and backup procedures; no service can promise absolute security.
7. Your choices and rights
You can update your business details, disconnect integrations, change marketing consent, export your workspace and request deletion. Depending on the law that applies, you may have rights of access, correction, deletion, restriction, objection, portability, withdrawal of consent and complaint to a regulator. Email mushtaq@dadtechnologies.com. We verify identity and handle requests within applicable legal deadlines. End customers should ordinarily contact the business that collected their data; we will assist that business with its obligations.
8. Children and changes
The service is intended for business users who can enter a valid contract, not for children. Do not upload children’s information without a lawful and appropriate business purpose. Material policy changes will be described on this page and, where required, notified to account holders.