Privacy Policy

Version 1.0 Last updated: February 1, 2026 Effective: February 1, 2026

Privacy Policy

At Dryade, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you register, we collect your email address, name, and password.
  • Profile Information: Display name, avatar, bio, company, and job title.
  • Payment Information: When you subscribe, we collect payment details through our payment processor (Stripe). We do not store full credit card numbers.
  • Publisher Information: If you become a publisher, we collect additional details like tax ID and payout information.
  • Communications: When you contact us, we collect the content of your messages.

1.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type, and unique device identifiers.
  • Usage Information: Pages visited, features used, time spent on the platform, and interaction patterns.
  • Log Data: IP address, access times, and referring URLs.
  • Cookie Data: As described in our Cookie Policy.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Process payments and manage subscriptions.
  • Send transactional emails (confirmations, receipts, security alerts).
  • Respond to your inquiries and provide customer support.
  • Analyze usage patterns to improve user experience.
  • Detect, prevent, and address fraud and security issues.
  • Comply with legal obligations.
  • Send marketing communications (with your consent).

3. Data Sharing & Third Parties

We share your information with the following categories of third parties:

3.1 Service Providers

  • Stripe: Payment processing. See Stripe’s Privacy Policy.
  • Supabase: Database and authentication services. See Supabase’s Privacy Policy.
  • Analytics Providers: Usage analytics to improve the Service.
  • Email Services: Transactional and marketing email delivery.

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

  • Active Accounts: Data retained while your account is active.
  • Closed Accounts: Data retained for 90 days after account closure, then deleted.
  • Payment Records: Retained for 7 years for tax and legal compliance.
  • Audit Logs: Retained for 2 years for security purposes.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

5.1 GDPR Rights (EEA Residents)

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing of your data for certain purposes.
  • Right to Restrict Processing: Request limitation of data processing.

5.2 CCPA Rights (California Residents)

  • Right to Know: Request disclosure of personal information collected.
  • Right to Delete: Request deletion of personal information.
  • Right to Opt-Out: Opt out of the “sale” of personal information (we do not sell personal information).
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights.

To exercise any of these rights, please contact us at privacy@dryade.ai.

6. Cookies & Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about our cookie practices, please see our Cookie Policy.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the European Union and the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Children’s Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

9. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

For EU residents: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.