How Doily handles your data
Doily is opening soon. These articles describe how the product works at launch.
Quick answer
Doily encrypts data in transit and at rest, does not sell personal data, and does not use your content to train AI models. Access is role-based and logged, and two-factor authentication is available to all users. The privacy policy, subprocessors page, and data processing addendum have the full detail.
Before you start
- A few minutes to read the privacy policy if you need the full detail
Steps
-
Know what is collected
Doily collects account data, the workspace content you create, and data from the tools you connect, only to run the features you use.
-
Know how it is protected
Data is encrypted in transit and at rest. Credentials for connected tools are stored encrypted, and access is role-based and logged.
-
Know how AI is used
Features such as Ask Doily send relevant workspace data and your question to AI providers to produce an answer. Doily configures zero data retention or no-training options with every provider where offered, and AI providers do not use it to train generalized models.
-
Know about Google data
Data received from Google follows the Google API Services Limited Use policy, and Google connections are read-only.
-
Find the legal documents
The subprocessors page lists every company that processes data for Doily. The data processing addendum describes the technical and organizational measures in full.
Tips
- Read the data processing addendum if your company requires one for vendors.
- Turn on two-factor authentication and require it for your workspace.
- Report a security concern to [email protected].
- Agencies hold their clients' data in the agency workspace. Privacy requests about client data are routed to the agency.
Troubleshooting
Does Doily sell my data?
No. Doily does not sell personal data.
Where can I see which companies process my data?
The subprocessors page lists them, and Doily gives notice of changes.
What happens if there is a breach?
Doily notifies affected workspaces without undue delay and within 72 hours of becoming aware of a breach that affects personal data.
Still stuck? Email [email protected] and a person will help.
