Legal

Privacy Policy

Last updated August 20, 2026

Dorinda is a personal assistant operating system. This policy explains what we collect, how we use it, and the choices you have. Our guiding principle: your assistant state belongs to you, and Dorinda works through the AI you already use rather than harvesting your data.

Who we are

“Dorinda,” “we,” “us,” and “our” refer to the operator of the Dorinda service at dorinda.ai and app.dorinda.ai. For privacy questions or to exercise your rights, contact us at legal@dorinda.ai.

Information we collect

Account and household data

When you create an account we collect basic profile information such as your name and email address, and authentication data (for example, if you sign in with Google). If you are on a Family plan, we store household membership and roles (Owner, Adult, Teen, Assistant) so the shared Household and shared-vs-private scoping can work.

Data you store in Dorinda

Dorinda holds the content you and your connected AI create: delegations, notes, decisions, people and relationships, reminders, projects, calendar entries you add, and the timeline of activity on each item. This is your operating record — the memory your AI reads from.

Technical and usage data

Like most services, we collect limited technical information needed to run and secure the product — for example, log data, device and browser information, and diagnostics. We use this to operate, secure, and improve the service, not to build advertising profiles.

Your own AI (ChatGPT / Claude) and MCP

Dorinda makes no AI calls on the server. You connect the ChatGPT or Claude you already use to Dorinda through a remote MCP connector. When you use that AI, the AI receives the Dorinda data you direct it to — for example, the delegations and notes it reads to answer you. That AI provider’s use of that data is governed by your agreement with them (Anthropic or OpenAI), not by Dorinda. Connections are least-privilege and revocable at any time in Settings → Integrations.

Google user data (Gmail and Calendar)

If you connect your Gmail and/or Google Calendar, Dorinda accesses that data only to provide the features you asked for — for example, sending an email from your own account (with your approval) and reading your calendar for prep and risk. Dorinda’s use of Google user data adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

  • We use Google user data only to provide and improve the connected features.
  • We do not sell Google user data.
  • We do not use Google user data for advertising, and we do not use it to train generalized AI/ML models.
  • We do not transfer Google user data except as needed to provide the feature, to comply with law, or as part of a merger where we notify you.
  • Access is least-privilege, and you can revoke it at any time from Dorinda or from your Google Account permissions.

Microsoft user data (Outlook and Calendar)

If you connect your Outlook mail and/or Microsoft Calendar, Dorinda accesses that data only to provide the features you asked for — for example, sending an email from your own account (with your approval) and reading your calendar for prep and risk. Specifically:

  • We use Microsoft user data only to provide and improve the connected features.
  • We do not sell Microsoft user data.
  • We do not use Microsoft user data for advertising, and we do not use it to train generalized AI/ML models.
  • We do not transfer Microsoft user data except as needed to provide the feature, to comply with law, or as part of a merger where we notify you.
  • Access is least-privilege, and you can revoke it at any time from Dorinda or from your Microsoft account permissions.

Payments

Paid plans are processed by Stripe. Dorinda does not store your full card number or other sensitive payment credentials — those are handled by Stripe as our payment processor. We retain limited billing records (such as plan, status, and invoices) needed to run subscriptions and meet legal and tax obligations. Applicable taxes are calculated at checkout.

How we use information

  • To provide the service — your delegations, reminders, approvals, and connections.
  • To operate governance and approvals so high-risk actions wait for your consent.
  • To secure the service and prevent abuse.
  • To communicate with you about your account and service changes.
  • To comply with legal obligations.

We do not sell your personal data, and we do not use your content to train AI models.

How we share information

We share data only as needed to run the service:

  • Service providers — such as our hosting/infrastructure provider, Stripe (payments), Google (only when you connect Gmail/Calendar), Microsoft (only when you connect Outlook/Calendar), and PostHog (product analytics on our public marketing site), acting on our instructions.
  • Your connected AI — Claude or ChatGPT, which receives the data you direct to it over MCP.
  • Legal and safety — when required by law or to protect rights, safety, and the integrity of the service.
  • Business transfers — in connection with a merger or acquisition, with notice to you.

Subprocessors

The following third-party subprocessors process personal data on our behalf. We keep this list current and will update it when subprocessors change.

  • Google Cloud / GCP — hosting and infrastructure.
  • Stripe — payment processing and subscription billing.
  • Google (Gmail / Calendar APIs) — when you explicitly connect Gmail or Google Calendar; your data is used only for the features you activate.
  • Microsoft (Outlook / Calendar APIs) — when you explicitly connect Outlook mail or Microsoft Calendar; your data is used only for the features you activate.
  • PostHog — product analytics on our public marketing site (dorinda.ai). PostHog receives anonymized page-visit and CTA-click events with UTM/source metadata; no account data, no message content, and no data from the authenticated app (app.dorinda.ai) is sent to PostHog. Sessions flagged as automated tests are suppressed entirely. See PostHog's Privacy Policy.

Data retention

We keep your data for as long as your account is active or as needed to provide the service. If you close your account, your data is purged immediately after you confirm (see "Deletion" below) — there is no soft-delete or waiting period. We retain only the minimum billing records required by law or tax and audit obligations; those records do not include your assistant data or content.

Your rights and controls

  • Access and export — you can view and export your data.
  • Deletion — you can delete individual items or your entire account. Account deletion requires re-authentication and a typed confirmation, then immediately and permanently purges your operating record from Dorinda. There is no 30-day pause, soft-delete, or recovery window — the purge is final.
  • Revoke connections — disconnect your AI, Gmail, Outlook, or Calendar at any time.
  • Depending on where you live, you may have additional rights (for example, under GDPR or CCPA), and we will honor applicable requests as required by law.

Security

We use technical and organizational measures to protect your data, and connections are least-privilege by design. No system is perfectly secure, but accountability is built in: every action is recorded in a timeline you can audit.

Children and teens

Dorinda is intended for adults. On a Family plan, an Owner may add a member with a Teen role; the Owner is responsible for that member’s use in line with applicable law. Dorinda is not directed to children under 13.

International users

We may process and store data in countries other than your own. Where required, we put appropriate safeguards in place for such transfers.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the service or by email, and the “last updated” date above will change.

Contact

For privacy questions, or to make a data access, export, or deletion request, contact us at legal@dorinda.ai. You can also manage, export, and delete your data directly from within your Dorinda account at any time.