Privacy Policy

1. Introduction

Doppel ("we," "our," or "us") is an AI-powered messaging assistant that learns your communication style to help craft replies. This Privacy Policy explains how we collect, use, store, and protect your information.

Our commitment: we collect only what the service needs, encrypt what your bot keeps, and tell you exactly which outside services see which data.

2. Information We Collect

2.1 Information You Provide

• Account: a username and password. The password itself is never stored — only a scrypt hash used to check it.
• Telegram connection: the login session for the Telegram account you connect (encrypted).
• Payments: handled by the payment provider you choose (section 5). We never see card numbers.
• Plan: which plan you are on and until when.

2.2 Messages and Media

• Messages: Doppel reads your Telegram chats to learn your style and to answer. To write a reply, the recent conversation is processed by an AI model on Doppel's own server, not sent to an AI company (section 5).
• Notes about people: if "remember" is on, your bot keeps short notes about what each person tells you, so later replies make sense. You can turn this off.
• Photos: photos you receive can be sent to an image-capable AI model so the reply fits. You can turn this off.
• Voice messages: transcribed on Doppel's own server (Whisper). Audio is not sent to outside services.
• Videos and documents: not sent to AI models.

2.3 What Your Bot Keeps

• Your style profile, notes about people, settings, activity log and reply history — encrypted with a key derived from your password.
• After the server reboots, this data stays locked until you log in again.

2.4 Technical Information

• Server logs: requests to our server, including IP addresses, are logged for security and troubleshooting.
• Usage counts: how many AI replies your account used, to apply your plan's limits.
• No analytics trackers: the website and dashboard use no analytics, advertising or tracking cookies.

3. How We Use Your Information

3.1 To Provide the Service

• Style learning: analyse your outgoing messages to learn how you write
• Reply generation: draft replies in your style, sent or held for your approval depending on your settings
• Messaging: connect to Telegram on your behalf
• Billing: process subscription payments

3.2 To Keep Doppel Working

• Fixing bugs and errors
• Preventing abuse and fraud
• We do not train AI models on your messages

3.3 Legal Basis (GDPR)

• Contract: providing the service you signed up for
• Consent: optional features you turn on (e.g. photos sent to AI models)
• Legitimate interest: security, troubleshooting and fraud prevention

4. Data Storage & Security

4.1 Security Measures

• At rest: AES-256-GCM encryption of your bot's data
• In transit: HTTPS
• Key derivation: scrypt
• Your password: never stored; if you lose it, only your recovery code can reopen your data

5. Data Sharing & Third Parties

5.1 Subprocessors

We do not sell your data or share it for advertising.

5.2 Legal Requirements

We may share information if required by law (court orders, subpoenas). We will notify you unless legally prohibited.

6. Your Rights (GDPR/CCPA)

6.1 Access & Portability

• See your account, plan and your bot's activity log in the dashboard
• See payments and invoices in the payment provider's portal (for Stripe: Billing → Manage)
• Ask for a copy of the data your bot keeps: write to [email protected] and we will send it within 30 days

6.2 Deletion

• In the dashboard: Account → Delete account, then confirm with your password
• This stops your bot, ends its Telegram login, and deletes your account and your bot's data from the server immediately
• Copies inside our encrypted backups disappear as those backups are replaced (we keep the 14 most recent)

6.3 Choices

• Turn off photos sent to AI models, notes about people, or automatic sending in your bot's settings
• Turn on "Approve before sending" to review every reply first
• The website and dashboard set no tracking cookies

7. Children's Privacy

Doppel is not intended for users under 16. Signing up requires confirming you are 16 or older.

• We do not knowingly collect data from children
• If we learn an account belongs to a child, we delete it
• Parents can request deletion: [email protected]

8. Data Retention

9. International Data Transfers

Doppel's server is in Uzbekistan. Encrypted backups are stored in Apple iCloud, which may be outside your country. Web lookups (section 5) go to DuckDuckGo and Wikipedia. If you need processing limited to one region, contact us first.

10. Security Incidents

If we discover a breach that affects your data, we will:

• Investigate and contain it immediately
• Notify the relevant authority within 72 hours where the law requires it
• Tell affected users without undue delay, through the dashboard and Telegram

11. Changes to This Policy

We will announce material changes in the dashboard before they take effect and update the date at the top of this page.

12. Contact

13. Summary