Privacy Policy

Duqky ("we," "us," or "our") operates the duqky.com website and the Duqky platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

1. Information We Collect

Account Information

When you create an account, we collect information you provide directly, including your name, email address, company name, and website URL. Account authentication is handled through Clerk, our third-party authentication provider.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, credit usage, agent configurations, and timestamps of activity.

Website Data You Provide

When you connect your website to duqky, we collect and analyze publicly available data from your site, including page content, meta tags, site structure, and performance metrics. This data is used exclusively to provide SEO analysis and recommendations.

Analytics Data

We collect standard analytics data including IP address (anonymized), browser type and version, operating system, referring URLs, device information, and general geographic location (country/region level).

Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how you use our Service. See Section 8 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your requests and deliver AI-generated SEO analysis, content, and recommendations
• Track credit usage and process billing
• Send transactional communications (account confirmations, credit alerts, agent task completions, security notifications)
• Send product updates and announcements (you can opt out at any time)
• Detect, prevent, and address technical issues and abuse
• Analyze usage patterns to improve our agents and platform performance
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We work with third-party services that help us operate the platform. These providers only access data necessary to perform their functions and are contractually obligated to protect it:

• Clerk — authentication and user management
• Vercel — frontend hosting and edge delivery
• Railway — backend infrastructure hosting
• Stripe — payment processing (we never store your full credit card details)
• Cloudflare — CDN, DNS, and file storage (R2)
• Sentry — error tracking and monitoring
• Resend — transactional email delivery

AI Service Providers

To power our AI agents, we send relevant data to AI model providers (such as Anthropic) for processing. This data may include your website content, keywords, and SEO context. We do not send personally identifiable information to AI providers unless necessary for the specific task you requested.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS encryption for all data in transit
• AES-256-GCM encryption for sensitive stored credentials
• Row-Level Security (RLS) at the database level to ensure tenant isolation
• Application-level credential redaction in all logging
• Regular security audits and dependency updates
• Parameterized queries to prevent SQL injection
• Access controls limited to authorized personnel

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (such as resolving disputes or enforcing our agreements).

Usage logs and analytics data are retained in anonymized form for up to 24 months to improve our Service.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data
• Data Portability — request your data in a structured, machine-readable format
• Opt-Out — unsubscribe from marketing communications at any time

European Economic Area (GDPR)

If you are in the EEA, you additionally have the right to restrict processing, object to processing based on legitimate interests, and lodge a complaint with your local data protection authority. Our legal bases for processing include consent, contract performance, and legitimate interests.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. You may designate an authorized agent to make requests on your behalf.

To exercise any of these rights, contact us at hello@duqky.com. We will respond within 30 days (or sooner where required by law).

7. International Data Transfers

Our Service is hosted in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

8. Cookies

We use the following types of cookies:

• Essential Cookies — required for the Service to function (authentication, session management, security). These cannot be disabled.
• Analytics Cookies — help us understand how visitors interact with the Service. You can opt out of analytics cookies through your browser settings.
• Preference Cookies — remember your settings and preferences (such as theme, language, and dashboard layout).

Most browsers allow you to control cookies through their settings. Blocking essential cookies may prevent you from using certain features of the Service.

9. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@duqky.com.

10. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send a notification to the email address associated with your account.

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: hello@duqky.com
• Website: duqky.com/contact