Privacy Policy

Effective date: September 27, 2026 · Dipole ML, Inc. ("Dipole ML", "we", "us")

This policy explains how we handle personal data across the dipoleml.com website (the "Website"), the DCode development environment (the "App"), the Raven API (the "API"), and Dipole ML accounts (together, the "Services"). If you use the Services on behalf of an organization, you confirm you are authorized to act for it.

1. Data we collect

• Account data. When you sign in with Google or Apple, we receive your name, email address, and profile identifier (and profile photo, if you choose to share it) from that provider. We do not see your provider password.
• Service data. Prompts, code, files, and other content you submit through DCode or the API ("User Content"), which is processed to generate responses and to operate the Services.
• Usage and diagnostics. Request counts, token consumption, model tier, timestamps, error and performance logs, and billing status. This is how we enforce plan quotas and detect abuse.
• Billing data. If you subscribe to a paid plan, Stripe Processes your payment; we receive your subscription status and a customer reference, not your full card details.
• Website data. Basic request data (IP address, user agent) handled automatically by our hosting provider for security and delivery. The Website does not use advertising or cross-site tracking cookies.

2. How we use data

• To create and operate your account and authenticate you;
• To provide the Services — including generating responses to your prompts and operating the App;
• To meter usage, enforce plan limits, prevent abuse, and keep the Services secure;
• To bill subscriptions and manage your plan;
• To comply with law and enforce our Terms of Service.

We do not sell your personal data, and we do not use your User Content to advertise to you.

3. Model processing

Requests you send through DCode and the API are processed by AI models operated by us and by third-party inference providers we engage (which may include, currently, NVIDIA and OpenRouter-connected providers, and others as we add or change providers). Provider names may change over time as we operate the Raven model family. Your User Content is transmitted to these providers solely to generate responses for you. We do not permit providers to use your content to advertise to you.

4. Sharing with third parties

• Authentication providers — Google LLC and Apple Inc., for "Sign in with Google/Apple";
• Payments — Stripe, Inc., for subscription billing;
• Infrastructure — Cloudflare, Inc., for hosting, networking, and model gateway services;
• Model inference providers — as described in Section 3;
• Authorities — where required by law.

5. Retention

Account data is retained while your account is active. Usage and billing records are retained as required for accounting and fraud prevention (typically up to 7 years where required by law). Diagnostic logs are retained for a limited operational period. You can request deletion of your account and associated personal data at any time (Section 8); residual backups may persist for a short window.

6. Security

We use HTTPS in transit, encrypted storage, access controls, and secret management on our infrastructure. No method of transmission or storage is perfectly secure; please use the Services accordingly and report any suspected issue to us.

7. International transfers

We operate from Canada and use providers that may process data in Canada, the United States, and other countries. Where required, we rely on appropriate safeguards for such transfers.

8. Your rights and choices

You may access, correct, export, or delete your personal data, and object to or restrict certain processing, subject to applicable law (including PIPEDA in Canada and, where applicable, the GDPR). To exercise these rights, contact us at privacy@dipoleml.com. You can also remove our access at any time via your Google or Apple account settings. We will not discriminate against you for exercising your rights.

9. Children

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data.

10. Changes

We may update this policy as the Services evolve. Material changes will be announced on the Website or by email before they take effect.

11. Contact

Dipole ML, Inc. — privacy@dipoleml.com