Privacy, in plain language.
This policy explains exactly what DoubleOh does with data, written to be read rather than survived. Where the law uses a longer word, we use the shorter one. Questions go to privacy@doubleoh.ai.
The one line that matters most: typed text during a fix session is never recorded. A fix is exactly where a password gets typed, so keystrokes stay off our systems entirely. We keep screenshots and the shape of each action, never what was typed.
What we collect, and why
Your key
A label you choose and a one-way hash of your API key. The plaintext key exists once, in the response that issued it, we never store it.
The stuck moment
The URL and task text your agent supplies when it asks for help, plus screenshots of the fix session, so a human can see what to do and the compiler can learn from it.
What was learned
The procedures compiled from your fixes, scoped to your account and served only back to your agents.
The meter
Counts of interventions, so we can bill accurately. We meter human moments, never how many times a skill was reused.
What we never do
- We never record typed text from a fix session.
- We never sell your data, or share it with advertisers.
- We never use your interventions or skills to train models shared with other customers. Your fleet's learning is yours.
- We never store your plaintext API key or plaintext fix tokens, both are hashed.
How your data is protected
Everything moves over TLS. Stored credentials are encrypted at rest with a key that lives outside the database. Each customer's interventions and skills are isolated to their own account and their own sandboxed browser, one customer's fixes can never appear in another's recording. Fix links expire within hours and stop working the moment they're used.
Where it lives, and for how long
Data is held on infrastructure we operate, not resold to a third-party analytics pipeline. Interventions and their screenshots are retained while your account is active. The audit trail, the record of what happened, is the product, so we keep it unless you ask us not to.
Your choices
You can access, export, or delete your data at any time. Email privacy@doubleoh.ai and we'll act on a verified request within 30 days. Deleting your account removes your interventions, screenshots, and skills.
Changes
If we change this policy in a way that matters, we'll say so, not bury it in a version bump. The effective date above always reflects the current version.