Privacy Policy for Daeda AI

Effective Date: 23rd April 2026

Daeda AI (“the App”) is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in connection with Daeda AI, including the Automation Suite, Human-Approved Write Plans, Ask AI workflow action, AutoFill CRM card, multi-portal access, and optional connected AI tools.

1. Information We Collect

We collect the following data:

• HubSpot Portal IDs: Used to identify HubSpot accounts using the App.
• Primary Email Addresses: Used for communication, account administration, support, and billing.
• Account and Subscription Information: Used to manage trials, paid plans, portal allowances, connected users, and billing state.
• Connection Keys and Session Metadata: Used to authorize Daeda AI clients and connected tools.
• HubSpot Portal Mirror Data: Used to provide real-time data access, portal analysis, bulk analysis, and MCP-connected features.
• HubSpot Export Artifacts: Used to retrieve and process HubSpot data exports and smaller supplementary exports needed to build or refresh portal mirrors.
• Support Information: Used when you contact us for help, troubleshooting, or account administration.

2. How We Collect Information

We collect your information when you install Daeda AI via the HubSpot Marketplace, connect HubSpot portals, configure Daeda AI settings, generate connection keys, use Daeda AI features, submit Write Plans, or contact us for support.

3. HubSpot CRM Data

Daeda AI uses HubSpot access authorized by your HubSpot account and configured inside Daeda AI settings.

When connecting a HubSpot portal, users explicitly choose the data types and scopes Daeda AI may access. Depending on the settings and scopes selected, this may include HubSpot records, properties, schema, metadata, workflows, lists, forms, owners, associations, custom objects, and other selected portal assets.

To change the HubSpot object permissions available to Daeda AI, users can uninstall Daeda AI from the portal, reinstall it with the revised access selection, and rebuild the connected portal from Daeda AI settings.

Daeda AI may retrieve data through HubSpot exports, HubSpot APIs, and supplementary exports for smaller objects stored in Supabase Storage. We use this data to build a portal mirror on Daeda AI infrastructure so the App can provide real-time data access, fast analysis, portal audits, Human-Approved Write Plans, bulk analysis tools, MCP-connected features, and multi-portal operations.

Daeda AI may store synced portal context, mirrored portal data, schema, metadata, export artifacts, and generated analysis artifacts. Daeda AI may also store draft Write Plans, plan operations, validation results, warnings, scope gaps, approval status, execution metadata, and related HubSpot resource references.

Write Plans are reviewed inside Daeda AI in HubSpot before execution. Daeda AI does not require users to approve a plan until they have reviewed it in the HubSpot-side approval flow.

4. AI-Assisted Portal Operations

Daeda AI includes AI-assisted portal operations such as portal audits, troubleshooting, dependency mapping, and Human-Approved Write Plans.

These features may use HubSpot record data, workflow inputs, selected properties, CRM context, prompts, and generated outputs as needed to provide the feature. Optional connected AI tools may process connector interactions under their own terms and privacy policies when you enable those tools.

5. Connected AI Tools

Connected AI tools are optional. When enabled, a supported AI client or connector connects to Daeda AI and Daeda AI uses the HubSpot access already authorized inside your Daeda AI settings.

Connected AI tools may receive authorized portal context, schema information, query results, draft-plan details, validation results, plan status, prompts, and responses through Daeda AI connector tools. Draft plans submitted through connected AI tools still appear in Daeda AI inside HubSpot for review and approval before execution.

Third-party AI providers may process connector interactions under their own terms and privacy policies when you enable those tools.

6. Sensitive Data

We do not intentionally collect sensitive data such as:

• Payment details (these are handled securely by Stripe).
• Government-issued identifiers.
• Special categories of data under GDPR, unless such data is already present in the HubSpot records you choose to make available to Daeda AI.

7. How We Use Your Information

We use the information we collect for the following purposes:

• Communication: Sending important updates, support replies, marketing, and administrative emails.
• Billing: Managing subscriptions, trials, usage-based records, invoices, and account status.
• Product Functionality: Providing portal analysis, AI-assisted workflows, AutoFill recommendations, Write Plans, approvals, and connected-tool access.
• Security and Support: Troubleshooting issues, monitoring reliability, preventing misuse, and responding to support requests.

We do not use your data for any purpose not explicitly outlined in this Privacy Policy.

8. Data Anonymization

We do not sell your data. We do not aggregate, anonymize, or analyse user data for unrelated analytics or third-party advertising purposes.

9. Data Sharing

We share your data only as required to deliver our services:

• HubSpot: For platform integration and core functionality.
• Supabase: For secure data storage.
• Stripe: For payment processing and subscription management.
• Connected AI providers: Only when you enable optional connected AI tools.

We do not sell or share your information with other third parties for their independent use.

10. Legal Compliance

We may disclose your data only to the extent required to:

• Comply with legal obligations or lawful requests.
• Protect our rights, property, or safety, or that of others.

11. Data Storage and Security

• Storage: Account data, portal configuration, selected synced HubSpot context, Write Plans, approval records, and support records are securely stored using Supabase and other service infrastructure required to operate Daeda AI.
• Location: Daeda AI stores portal mirror data, export artifacts, and related application data within Germany.
• Security Measures: We implement TLS encryption for data transmission, access controls, hardened server infrastructure, operational monitoring, and scoped authorization to protect your information.
• Infrastructure Access: Access to Supabase and Daeda AI server infrastructure is restricted to authorized Daeda Tech operators.
• License-Key Access: Access to mirrored portal databases is protected with bearer authentication using the Daeda AI license key. You can revoke license keys from Daeda AI settings to sever connected-tool access to the mirrored database.
• Access Control: HubSpot data access is based on the scopes and data types selected in Daeda AI settings and authorized through HubSpot. Current HubSpot access selection is object-level, so users can allow or deny whole object types such as contacts, companies, deals, tickets, or custom objects.

12. Data Retention and Deletion

You can purge Daeda AI database data at any time using the purge button in Daeda AI settings inside HubSpot, or by contacting us at contact@daeda.tech.

Following a purge or deletion request, we delete the relevant Daeda AI database data unless retention is required to comply with legal, regulatory, contractual, billing, security, or fraud-prevention obligations. This includes deleting the relevant portal mirror data from Daeda AI systems. Backup, log, export-reference, and operational data may persist for a limited period as part of normal security, audit, and disaster recovery processes.

Deleting Daeda AI data is separate from changing HubSpot object permissions. To revise the object permissions granted to Daeda AI, users can use Daeda AI settings to uninstall the App, reinstall it with the selected access, and rebuild the connected portal.

We are continuing to improve deletion tooling, data visibility, and access controls, including clearer metadata about what is stored for each portal and finer-grained control over which HubSpot data is mirrored.

13. Your Rights

If applicable under GDPR or other relevant laws, you have the right to:

• Access: Request access to your personal data.
• Correction: Request corrections to inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Obtain a copy of your data in a structured, machine-readable format.

To exercise your rights, use Daeda AI settings where available or contact us at contact@daeda.tech.

14. Third-Party Services

Daeda AI relies on the following third-party services:

• HubSpot: For platform integration and HubSpot account functionality.
• Supabase: For secure data storage.
• Stripe: For payment processing and subscription management.
• Connected AI providers: For optional connected AI tool usage when enabled by the user.

These services may process your data independently under their respective privacy policies.

15. Cookies and Tracking

The App does not use cookies or other tracking technologies for advertising. Daeda AI may use necessary session, authentication, security, or operational mechanisms required to provide the App.

16. Minors

Daeda AI is not intended for individuals under 18 years of age. Users must have a valid HubSpot account to access our services.

17. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices or for legal, regulatory, or operational reasons. Significant updates will be communicated via email or in-product notice where appropriate.

18. Contact Us

If you have questions, concerns, or feedback regarding this Privacy Policy, please contact us at: contact@daeda.tech