Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains what data Dossier (the "Service") collects, how it's used, and who it's shared with.

1. What we collect

Account data: your email address and a securely hashed password (we never store your password in plain text).
Content you create: the research topics you submit and the dossiers generated from them, saved to your account archive.
Usage data: basic analytics (pages viewed, general device/browser info) via Google Analytics.
Billing data: subscription status and payment history. Your card details are collected and stored directly by Creem — we never see or store your full card number.

2. Cookies

We use a session cookie to keep you signed in, and Google Analytics cookies to understand aggregate usage. We don't use cookies for third-party advertising.

3. How we use your data

To operate and improve the Service.
To generate the dossiers you request.
To process subscription payments and manage your account tier.
To respond to support requests.

4. Who we share it with

Generating a dossier and running the Service involves sending relevant data to these processors, each governed by their own privacy policy:

Google — your research topic is sent to the Gemini API to generate content, and to Google Search for grounding; Google Analytics receives anonymized usage data.
Tavily — receives search queries derived from your research topic.
Pexels / Unsplash — receive image search terms to find a matching header photo.
Creem — receives your billing details to process subscription payments as our merchant of record.

We do not sell your personal data.

5. Data retention

Your account, generated dossiers, and usage history are retained until you delete your account. You can request full deletion of your data at any time by contacting us.

6. Security

Passwords are hashed with bcrypt before storage. All traffic to the Service is encrypted with HTTPS.

7. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us. If you're in the EU/EEA or UK, these rights are provided under GDPR/UK GDPR; if you're in another jurisdiction with its own data protection law, we'll honor equivalent requests.

8. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time; material changes will be reflected by the date above.

10. Contact

Questions or data requests: support@dossier-inteligence.com.

This is a general-purpose template reflecting how the Service currently operates. It is not a substitute for legal advice — consider having it reviewed by a lawyer, particularly if you serve users in the EU/UK (GDPR) or California (CCPA), before relying on it.