Privacy Policy

Dalumat is operated by Nico Ravanilla, who acts as the data controller for the personal data described in this policy. For any privacy question or request, you can reach us at nico@dalumat.ai.

We collect the following categories of personal data:

Information you provide

• Account details: your email address and password when you create an account.
• Profile and inputs: the answers, text, and documents you enter into our tools, for example quiz responses, resume content, or details about your study or program.
• Communications: messages you send us, including by email.
• Marketing preferences: whether you have opted in to receive marketing emails.

Information collected automatically

• Usage and device data: basic technical information such as your browser type, device, and how you interact with the Service, used to operate and secure it.
• Cookies: small files used to keep you signed in and to make the Service work. See the section on cookies below.

Payment information

When you buy credits, your payment is processed by Stripe. We do not collect or store your full card number. We receive limited information from Stripe, such as a record that a purchase succeeded.

We process your personal data for the following purposes, relying on the legal bases set out under the GDPR:

• To provide the Service and your account, including running the agents you choose (legal basis: performance of a contract).
• To process your credit purchases and maintain your balance (legal basis: performance of a contract).
• To send you service messages, such as account and transactional emails (legal basis: performance of a contract, or our legitimate interest in operating the Service).
• To send you marketing emails, where you have opted in (legal basis: your consent, which you may withdraw at any time).
• To secure, maintain, and improve the Service and to prevent abuse (legal basis: our legitimate interests).
• To comply with legal obligations (legal basis: legal obligation).

When you use an agent, the content you submit is sent to our AI provider, Anthropic, to generate your result. Anthropic processes this content as our service provider and, under its commercial terms, does not use inputs or outputs submitted through its API to train its models.

We use cookies that are strictly necessary to operate the Service, such as keeping you signed in. These do not require your consent. If we introduce analytics or other non-essential cookies in the future, we will ask for your consent first through a cookie banner and update this policy.

We do not sell your personal data. We share it only with service providers (processors) who help us run the Service, and only as needed:

• Supabase: database hosting and authentication.
• Vercel: website and application hosting.
• Stripe: payment processing.
• Anthropic: AI processing of your inputs to generate outputs.
• Our email provider: sending account emails and, where you have opted in, marketing emails.

We may also disclose data where required by law, to protect our rights, or in connection with a business transfer. Each provider is bound by a data processing agreement and may use your data only on our instructions.

Some of our providers are based in the United States, so your personal data may be transferred outside the European Economic Area and the United Kingdom. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your data.

We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account or ask us to erase your data, we will delete it within a reasonable period, except where we must retain certain records to comply with legal obligations, such as tax records for purchases.

If you are in the EEA or the UK, you have the following rights over your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data, also known as the right to be forgotten.
• Restriction: ask us to limit how we use your data.
• Portability: receive your data in a portable format, or have it sent to another provider where technically feasible.
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent: withdraw any consent you have given, such as for marketing, at any time.

To exercise any of these rights, email us at nico@dalumat.ai. You also have the right to lodge a complaint with your local data protection supervisory authority.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Our tools generate suggestions and drafts that you review and act on yourself.

We take reasonable technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not intended for children. You must be at least 16 years old to use it, or older if required by the laws of your country. We do not knowingly collect data from children below this age.

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you.

For any privacy question or request, contact us at nico@dalumat.ai.