Privacy Policy

1. Who controls your data

Tetriz s.r.o. is the data controller for account and service data. Contact us at team@dativue.com.

2. Data we process

• Account data: email, name, profile image, login provider, sessions, and connected MCP clients.
• Billing data: plan, customer and subscription identifiers, invoices, and credit activity. Stripe handles full payment-card data.
• Service data: tool inputs, source URLs, jobs, result metadata, usage, errors, security events, and support messages.
• Product analytics data: page views, interactions, referrers, browser and device information, analytics identifiers, and signed-in account details used to understand and improve Dativue.
• Public social data: public profiles, posts, comments, metrics, media, and transcripts requested through the service. We do not ask for social-network passwords, cookies, or private-account access.
• Research data: keyword and domain inputs, search metrics and trends, public search results, reviews, business details, app and product listings, web mentions, backlinks, technology signals, website crawl data, screenshots, and AI-generated benchmark responses and citations.

3. Why we use it

We process data to provide and secure the service, authenticate users, meter credits, process payments, answer support requests, prevent abuse, comply with law, and improve reliability. Our legal bases are performance of a contract, legitimate interests in operating and protecting Dativue, legal obligations, and consent where required.

4. Providers and transfers

We use Cloudflare for hosting, storage, queues, security, and AI transcription; Stripe for billing; Resend for email delivery; Google for optional sign-in; Plausible and PostHog for product analytics; Apify and selected actors for public social data retrieval; and DataForSEO for search, business, review, app, product, backlink, website, technology, and AI visibility research. These providers may process data outside Slovakia or the EEA under their applicable safeguards, including adequacy decisions or standard contractual clauses.

5. Retention

Magic-link tokens expire after 15 minutes. Raw provider responses are used only for temporary normalization and are not intentionally retained. Full normalized research results and purchased cursor pages are normally deleted within 7 days. Caches may expire sooner depending on the data type. Account, session, subscription, security, cost, and ledger records are retained while needed to provide the service, resolve disputes, prevent fraud, and meet legal or accounting duties. Account deletion removes active connections and saved results, subject to records we must legally retain.

6. Cookies and local storage

We use essential secure session cookies and security technologies, including Cloudflare Turnstile. Plausible provides cookieless traffic analytics. PostHog uses browser storage and analytics identifiers to measure product usage and connect activity to a signed-in account. We do not use advertising cookies in this beta.

7. Your GDPR rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier processing. Email team@dativue.com to exercise a right. You may also complain to the Slovak Office for Personal Data Protection or your local supervisory authority.

8. Public-data subjects

Dativue retrieves public social and search content in response to user requests. If public content about you appears in a result and you have a privacy concern, contact us with the source URL so we can review the request and our legal obligations.

9. Security, children, and changes

We use access controls, encryption in transit, limited scopes, short-lived tokens, and retention controls, but no system is completely secure. Dativue is not directed to children under 16. We may update this policy and will publish the latest version on this page.