Privacy Policy

Effective Date: February 27, 2026

1. Introduction

DUTO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform and related services.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

We collect information in several ways.

Information You Provide

  • Account Information: email address, name, and profile information when you create an account
  • Content: prompts, images, videos, and other content you upload or create using the Service
  • Payment Information: billing details processed securely through Stripe
  • Communications: messages you send to us for support or feedback

Information Collected Automatically

  • Usage Data: features used, actions taken, and interactions with the Service
  • Device Information: browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and pages viewed
  • Cookies: session and preference data

3. How We Use Information

We use collected information to:

  • Provide, operate, and maintain the Service
  • Process your transactions and manage your account
  • Generate AI content based on your inputs and prompts
  • Improve and personalize your experience
  • Communicate with you about updates, support, and marketing with consent
  • Detect and prevent fraud, abuse, and security issues
  • Comply with legal obligations
  • Analyze usage patterns to improve the Service

4. AI and Your Data

When you use our AI features, your inputs such as prompts and images are sent to third-party AI model providers such as OpenRouter, WaveSpeed, and Kie.ai to generate outputs.

We retain your inputs and outputs to provide the Service and enable you to access your content library. DUTO does not use your uploaded images or data to train our own AI models. Our sub-processor WaveSpeed may process your inputs to develop and improve derivative AI models per its own Terms of Service.

5. Information Sharing

We may share your information with service providers that help us operate the Service, including Supabase for infrastructure, Stripe for payments, and AI providers for content generation.

We may also disclose information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, secure authentication mechanisms, access controls, monitoring, and regular security assessments.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may also retain information as required by law or for legitimate business purposes such as dispute resolution.

Upon account deletion, your personal information and content will be removed from active storage within 30 days, and backup systems will be purged within 90 days unless retention is required by law.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, opt out of, or restrict processing of your personal data. To exercise these rights, contact us at info@duto.ai.

9. Cookies and Tracking

We use essential cookies for authentication and security, preference cookies to remember settings, and analytics cookies to understand how the Service is used. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those external sites and encourage you to review their policies before providing information.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

12. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" above. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at info@duto.ai.