Privacy Policy

1. Information We Collect

We keep data collection to a minimum. Here is what we collect:

Account Information

When you create a WithDave account, we collect your email address, name (if provided), and authentication credentials. If you sign in with Google, we receive your name and email from Google's OAuth service.

Conversation Content

When you interact with our AI guidance modules, your questions and AI responses are stored in our database to provide conversation history and enable the briefing review feature. You can delete your conversations at any time.

Automatically Collected Information

Like most websites, our hosting infrastructure may automatically collect certain technical information, including your IP address, browser type, device information, and general usage patterns (such as pages visited and time spent). This data is collected through standard server logs and product analytics (see PostHog below).

2. How We Use Your Information

We use the limited information we collect for the following purposes:

• To provide and operate our AI guidance services
• To validate invite codes and manage platform access
• To monitor and improve the performance and reliability of our platform
• To detect and prevent abuse, fraud, or technical issues
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your conversation data to train AI models.

3. AI and Data Processing

WithDave is powered by Anthropic's Claude AI. When you submit a question or interact with any of our guidance modules, your input is sent to Anthropic's API for processing in real time. Here is what that means for your data:

• Your questions are transmitted to Anthropic's servers to generate responses. This processing happens in real time and is not stored by WithDave after your session.
• Anthropic has its own privacy policy and data handling practices. We encourage you to review Anthropic's Privacy Policy for details on how they handle data received through their API.
• We use Anthropic's API service, which means your data is processed under Anthropic's API terms. Anthropic states that API inputs and outputs are not used to train their models.

4. Third-Party Services

We rely on the following third-party services to operate WithDave:

Anthropic (Claude AI)

Provides the AI language model that powers all WithDave guidance modules. Your questions are sent to Anthropic's API for processing. See their privacy policy at anthropic.com/privacy.

Vercel (Hosting)

Our platform is hosted on Vercel's infrastructure. Vercel may collect standard server logs and technical data as part of hosting operations. See their privacy policy at vercel.com/legal/privacy-policy.

PostHog (Product Analytics)

We use PostHog to understand how people use WithDave so we can improve the product. PostHog collects anonymous usage events such as page views, button clicks, and feature usage. If you are signed in, your usage data is associated with your user ID so we can provide a better experience. PostHog does not sell your data or use it for advertising. See their privacy policy at posthog.com/privacy.

Supabase (Database & Authentication)

We use Supabase for user authentication and data storage. Your account information, conversations, and briefings are stored in Supabase's PostgreSQL database. See their privacy policy at supabase.com/privacy.

Stripe (Payment Processing)

If you upgrade to a paid subscription, payment processing is handled by Stripe. We do not store your credit card information — it is handled entirely by Stripe. See their privacy policy at stripe.com/privacy.

Resend (Email)

We use Resend to send transactional emails such as account confirmation, password reset, and welcome emails. See their privacy policy at resend.com/legal/privacy-policy.

Sentry (Error Monitoring)

We use Sentry to monitor and fix application errors. Sentry may collect technical data about errors including browser type, device info, and the page where the error occurred. No conversation content is sent to Sentry. See their privacy policy at sentry.io/privacy.

We do not integrate with advertising networks or social media tracking pixels.

5. Data Retention

We retain as little data as possible:

• Conversation data: Your conversations and AI responses are stored in our database for as long as your account is active. You can delete individual conversations at any time.
• Account data: Your email, name, and account settings are retained for as long as your account exists. You can request account deletion by contacting us.
• Payment data: Stripe retains payment records as required by financial regulations. We store only your subscription status and tier, not payment card details.
• Server logs: Standard technical logs may be retained by our hosting provider for a limited period consistent with industry practices, typically no more than 90 days.

6. Cookies and Local Storage

WithDave uses minimal cookies and browser storage:

• Session cookies: We use cookies to maintain your authentication session so you don't need to sign in on every visit.
• Analytics cookies: PostHog uses a cookie and localStorage to track anonymous usage events and, if you are signed in, associate them with your account. This data is used solely to improve WithDave and is never shared with advertisers.
• No advertising cookies: We do not use tracking cookies or third-party cookies for profiling or marketing purposes.

7. Your Rights

Because we collect very limited personal information and do not store conversation data, many traditional data rights (such as data access, correction, or deletion requests) may not apply in the usual sense. However, you have the right to:

• Ask us what information, if any, we hold about you
• Request deletion of any personal data we may have collected
• Opt out of any future data collection by discontinuing use of the platform
• Contact us with any privacy-related questions or concerns

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or CCPA respectively. Please contact us to exercise any applicable rights.

8. Children's Privacy

WithDave is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to remove that information.

9. Security

We take reasonable measures to protect the information transmitted through our platform. All data in transit between your browser and our servers is encrypted using HTTPS/TLS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of WithDave after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: