Privacy Policy for Daeda AI

Effective Date: 3 August 2026

Daeda Technologies Ltd (“Daeda”, “we”, “us”, or “our”) is a company registered in England and Wales under company number 17360943, with its registered office at 85 Great Portland Street, London, W1W 7LT, United Kingdom. This Privacy Policy explains how we collect, use, store, and protect information in connection with Daeda AI (the “App”), including the Automation Suite, Human-Approved Write Plans, Ask AI workflow action, AutoFill CRM card, multi-portal access, and optional connected AI tools.

For Customer Personal Data processed through the App, the Customer is generally the controller and Daeda acts as its processor. Our Daeda AI Data Processing Agreement applies where agreed. Daeda acts as controller for its own account administration, billing, support, security, and legal-compliance data.

1. Information We Collect

We collect the following data:

• HubSpot Portal IDs: Used to identify HubSpot accounts using the App.
• Primary Email Addresses: Used for communication, account administration, support, and billing.
• Account and Subscription Information: Used to manage trials, paid plans, portal allowances, connected users, and billing state.
• Connection Keys and Session Metadata: Used to authorize Daeda AI clients and connected tools.
• HubSpot Portal Mirror Data: Used to provide real-time data access, portal analysis, bulk analysis, and MCP-connected features.
• HubSpot Export Artifacts: Used to retrieve and process HubSpot data exports and smaller supplementary exports needed to build or refresh portal mirrors.
• Support Information: Used when you contact us for help, troubleshooting, or account administration.
• Product and Operational Information: Used to secure and operate the App, including authentication events, service status, and error diagnostics. External operational alerts are designed not to contain Customer Personal Data or customer-linked identifiers.

2. How We Collect Information

We collect your information when you install Daeda AI via the HubSpot Marketplace, connect HubSpot portals, configure Daeda AI settings, generate connection keys, use Daeda AI features, submit Write Plans, or contact us for support.

3. HubSpot CRM Data

Daeda AI uses HubSpot access authorized by your HubSpot account and configured inside Daeda AI settings.

When connecting a HubSpot portal, users explicitly choose the data types and scopes Daeda AI may access. Depending on the settings and scopes selected, this may include HubSpot records, properties, schema, metadata, workflows, lists, forms, owners, associations, custom objects, and other selected portal assets.

To change the HubSpot object permissions available to Daeda AI, users can uninstall Daeda AI from the portal, reinstall it with the revised access selection, and rebuild the connected portal from Daeda AI settings.

Daeda AI may retrieve data through HubSpot exports, HubSpot APIs, and supplementary exports for smaller objects stored in Supabase Storage. We use this data to build a portal mirror on Daeda AI infrastructure so the App can provide real-time data access, fast analysis, portal audits, Human-Approved Write Plans, bulk analysis tools, MCP-connected features, and multi-portal operations.

Daeda AI may store synced portal context, mirrored portal data, schema, metadata, export artifacts, and generated analysis artifacts. Daeda AI may also store draft Write Plans, plan operations, validation results, warnings, scope gaps, approval status, execution metadata, and related HubSpot resource references.

Write Plans are reviewed inside Daeda AI in HubSpot before execution. Daeda AI does not require users to approve a plan until they have reviewed it in the HubSpot-side approval flow.

4. AI-Assisted Portal Operations

Daeda AI includes AI-assisted portal operations such as portal audits, troubleshooting, dependency mapping, and Human-Approved Write Plans.

These features may use HubSpot record data, workflow inputs, selected properties, CRM context, prompts, and generated outputs as needed to provide the feature. Optional connected AI tools may process connector interactions under their own terms and privacy policies when you enable those tools.

5. Connected AI Tools

Connected AI tools are optional. When enabled, a supported AI client or connector connects to Daeda AI and Daeda AI uses the HubSpot access already authorized inside your Daeda AI settings.

Connected AI tools may receive authorized portal context, schema information, query results, draft-plan details, validation results, plan status, prompts, and responses through Daeda AI connector tools. Draft plans submitted through connected AI tools still appear in Daeda AI inside HubSpot for review and approval before execution.

Third-party AI providers may process connector interactions under their own terms and privacy policies when you enable those tools.

6. Sensitive Data

We do not intentionally collect sensitive data such as:

• Payment details (these are handled securely by Stripe).
• Government-issued identifiers.
• Special categories of data under GDPR, unless such data is already present in the HubSpot records you choose to make available to Daeda AI.

7. How We Use Your Information

We use the information we collect for the following purposes:

• Communication: Sending important updates, support replies, marketing, and administrative emails.
• Billing: Managing subscriptions, trials, usage-based records, invoices, and account status.
• Product Functionality: Providing portal analysis, AI-assisted workflows, AutoFill recommendations, Write Plans, approvals, and connected-tool access.
• Security and Support: Troubleshooting issues, monitoring reliability, preventing misuse, and responding to support requests.

Depending on the context, we process this information to perform our contract with you, pursue legitimate interests in operating and securing the App, comply with legal obligations, or act on consent where consent is required. We do not use your data for unrelated purposes.

8. Data Anonymization

We do not sell your data. We do not aggregate, anonymize, or analyse user data for unrelated analytics or third-party advertising purposes.

9. Data Sharing

We share your data only as required to deliver our services:

• HubSpot: For platform integration and core functionality.
• Supabase: For secure data storage.
• Hetzner: For application hosting and infrastructure in Germany.
• Stripe: For payment processing and subscription management.
• Connected AI providers: Only when you enable optional connected AI tools.

We do not sell personal data or share it for third-party advertising. Customer-selected AI providers process data according to the Customer’s configuration and their applicable terms.

10. Legal Compliance

We may disclose your data only to the extent required to:

• Comply with legal obligations or lawful requests.
• Protect our rights, property, or safety, or that of others.

11. Data Storage and Security

• Storage: Account data, portal configuration, selected synced HubSpot context, Write Plans, approval records, and support records are securely stored using Supabase and other service infrastructure required to operate Daeda AI.
• Location: Daeda AI stores portal mirror data, export artifacts, and related application data within Germany.
• Security Measures: We implement TLS encryption for data transmission, access controls, hardened server infrastructure, operational monitoring, and scoped authorization to protect your information.
• Infrastructure Access: Access to Supabase and Daeda AI server infrastructure is restricted to authorised Daeda personnel who require it to operate and support the App.
• License-Key Access: Access to mirrored portal databases is protected with bearer authentication using the Daeda AI license key. You can revoke license keys from Daeda AI settings to sever connected-tool access to the mirrored database.
• Access Control: HubSpot data access is based on the scopes and data types selected in Daeda AI settings and authorized through HubSpot. Current HubSpot access selection is object-level, so users can allow or deny whole object types such as contacts, companies, deals, tickets, or custom objects.

12. Data Retention and Deletion

You can purge Daeda AI database data at any time using the purge button in Daeda AI settings inside HubSpot, or by contacting us at contact@daeda.tech.

Following uninstallation, the relevant portal data becomes eligible for deletion after approximately 24 hours and is removed by a daily purge process, ordinarily within 24 to 48 hours. Transient export files used to build portal mirrors are ordinarily removed within approximately one hour. Other account, billing, support, security, log, and backup records are retained only for as long as reasonably necessary for their purpose or to comply with legal, regulatory, contractual, billing, security, or fraud-prevention obligations.

Deleting Daeda AI data is separate from changing HubSpot object permissions. To revise the object permissions granted to Daeda AI, users can use Daeda AI settings to uninstall the App, reinstall it with the selected access, and rebuild the connected portal.

We are continuing to improve deletion tooling, data visibility, and access controls, including clearer metadata about what is stored for each portal and finer-grained control over which HubSpot data is mirrored.

13. Your Rights

If applicable under GDPR or other relevant laws, you have the right to:

• Access: Request access to your personal data.
• Correction: Request corrections to inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Obtain a copy of your data in a structured, machine-readable format.
• Restriction and Objection: Ask us to restrict processing or object where applicable.
• Complaint: Complain to the UK Information Commissioner’s Office or another competent supervisory authority.

To exercise your rights, use Daeda AI settings where available or contact us at contact@daeda.tech.

14. Third-Party Services

Daeda AI relies on the following third-party services:

• HubSpot: For platform integration and HubSpot account functionality.
• Supabase: For secure data storage.
• Hetzner: For application hosting and infrastructure in Germany.
• Stripe: For payment processing and subscription management.
• Connected AI providers: For optional connected AI tool usage when enabled by the user.

These services may process data as our processors or, depending on the service and Customer configuration, as independent controllers under their own terms. Where personal data is transferred internationally, we use the safeguards described in the DPA or otherwise required by applicable law.

15. Cookies and Tracking

The App does not use cookies or other tracking technologies for advertising. Daeda AI may use necessary session, authentication, security, or operational mechanisms required to provide the App.

16. Minors

Daeda AI is not intended for individuals under 18 years of age. Users must have a valid HubSpot account to access our services.

17. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices or for legal, regulatory, or operational reasons. Significant updates will be communicated via email or in-product notice where appropriate.

18. Contact Us

If you have questions, concerns, or want to exercise your rights, contact Jack Tolley, Director, at contact@daeda.tech or write to Daeda Technologies Ltd, 85 Great Portland Street, London, W1W 7LT, United Kingdom.