Privacy Policy

Last updated: March 18, 2026

Introduction

ddot ("we", "us", "our") operates the ddot Agent service across messaging platforms including WhatsApp, Telegram, and Discord. This Privacy Policy explains how we collect, use, and protect your information when you interact with ddot Agent.

Information We Collect

Messages: When you send a message to ddot Agent, we process the text content to route it to the appropriate skill and generate a response. Messages are processed in real-time and are not stored permanently unless you use a skill that explicitly provides data persistence (such as reminders or bookmarks).

User Identifiers: We receive your platform-specific user ID (e.g., phone number hash for WhatsApp, user ID for Telegram/Discord) solely to deliver responses back to you. We do not link these identifiers across platforms.

Skill Data: Some skills store data you explicitly provide (e.g., reminders, saved links). This data is isolated per-skill and per-user in a sandboxed key-value store. No skill can access another skill's data.

Information We Do Not Collect

  • We do not collect your name, email, or contact information
  • We do not read or store message history beyond active processing
  • We do not use cookies or tracking technologies
  • We do not sell, rent, or share your data with third parties
  • We do not use your data for advertising or profiling
  • We do not train AI models on your messages

How We Use Your Information

Your information is used exclusively to:

  • Route your message to the correct skill for processing
  • Generate and deliver a response to your message
  • Maintain skill-specific data you explicitly create (e.g., reminders)

Data Security

ddot uses a Three Rings security architecture. All skills run in WebAssembly sandboxes with declared capability gates. Messages pass through a 5-layer prompt firewall. Skill integrity is verified via Ed25519 cryptographic signatures before every execution.

Data Retention

Messages are processed transiently and discarded after response delivery. Skill-specific stored data (reminders, bookmarks) is retained until you explicitly delete it or request account deletion.

Your Rights

You have the right to:

  • Request deletion of all your stored data at any time
  • Stop using the service by simply not messaging ddot Agent
  • Request information about what data we hold for your user ID

To exercise these rights, see our Data Deletion page or contact us at the email below.

Third-Party Platforms

ddot Agent operates on third-party messaging platforms (WhatsApp, Telegram, Discord). Your use of those platforms is governed by their respective privacy policies. We only receive the data these platforms transmit to us via their official APIs.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated revision date.

Contact

For privacy-related inquiries: privacy@ddot.build