Privacy Policy

• We collect what we need to run the Services: your account details, the content you create, usage needed for plans and billing, and basic technical data.
• Your chats are saved so they work across your devices, and you can delete any of them at any time.
• We do not sell your personal information, we do not run advertising or cross-site tracking on our sites or apps, and your content is encrypted at rest and used only by us. We retain your content and use it to develop, improve and train our own models, and the providers that run our models keep nothing.
• Our marketing websites (dipoleml.com, docs.dipoleml.com, tryraven.app and trydcode.app) use Google Analytics cookies to count visits. You can accept or decline them in the cookie banner, and change your choice at any time with the Cookie settings link.
• We use your name and email to operate your account and to keep in touch about Dipole ML Inc.. You can opt out of marketing at any time.
• You can delete chats, disconnect accounts, revoke keys, and delete your account at any time.

This Privacy Policy explains how Dipole ML Inc. ("Dipole ML Inc.", "we", "us"), a federally incorporated Canadian company based in Ontario, handles personal information when you use the Raven app (web, desktop and mobile), DCode (desktop app and command line tool), the DipoleML API, and our websites at dipoleml.com, docs.dipoleml.com, chat.dipoleml.com, dashboard.dipoleml.com, dcode.dipoleml.com, tryraven.app and trydcode.app (together, the "Services"). It covers the information we control. It does not cover what independent third parties do with their own services when you connect to them or sign in with them.

1. Information we handle

1.1 Your account. When you sign in with Google or Apple, we receive the name, email address and profile photo your provider shares, and we link them to your Dipole ML Inc. account. If you use Apple's private email relay, we handle the relay address the same way as any other email. We keep your name and email while your account exists, to operate it, to enforce our Terms fairly, and to stay in touch as described in Section 2.

1.2 Your chats and files. The messages, prompts, images and documents you create or upload in the Raven app, the chats you share, and the code and files DCode works with, are content you create through the Services. When you are signed in, your Raven chats are saved so they are available on your other devices and when you come back; when you are not signed in, chats stay on your device. You can delete any chat at any time, and deleting your account removes your saved chats as described in Section 6. DCode reads and edits files on your machine under your direction, and what it sends us is limited to what your requests need.

1.3 Usage and billing. To run plans, quotas, credits and billing we keep records of activity: request and token counts, model choice, timestamps, plan and renewal status, and payment records. These records describe activity, not content. They do not include the words of your conversations.

1.4 Sharing. When you share a chat, you can invite people to it. An email address you enter for a share is used only to carry out that share. It is never added to marketing lists and never used to contact that person on our initiative. People who join Dipole ML Inc. through a share get an account governed by this policy like anyone else.

1.5 Connected accounts. If you connect a third-party account, such as a Google, GitHub, Vercel or Cloudflare account, we store what is needed to act on it at your direction: the provider, the permissions you granted, a label for the account, and its access credentials, which we store securely. Disconnecting an account removes our ability to act on it.

1.6 Technical basics. Our apps send basic technical data, like the app version and platform. Our desktop apps check our servers for updates, sending the app version, the platform and an install identifier so we can offer the right update. Our websites are delivered through standard web infrastructure that processes ordinary request data for delivery and security. Our marketing websites, dipoleml.com, docs.dipoleml.com, tryraven.app and trydcode.app, use Google Analytics to count visits and see which pages are popular. Depending on the choice you make in our cookie banner, Google Analytics may set cookies on your device for this, as Section 4 explains. We look at the results only in aggregate, and they are never used for advertising. We do not run advertising on our sites or apps, and we do not track you across the web.

1.7 Safety records. To keep the Services fair and safe, we keep small per-account records related to security, fair-use enforcement and abuse prevention. These records describe events, never conversation content, and are kept only as long as needed to protect the Services.

2. How we use it

We use personal information to:

2.1 create and operate your account and provide the features you ask for, like chats, sharing, connectors, image understanding and web search;

2.2 meter usage, run plans and credits, and process billing;

2.3 keep the Services secure, prevent and investigate abuse, and enforce our Terms;

2.4 respond when you contact us;

2.5 improve our products and our models, including by training them on the content you create through the Services, as described in Section 3;

2.6 send you occasional news and offers about Dipole ML Inc.. Every marketing message carries an unsubscribe link, and you can opt out at any time by following it or by writing to privacy@dipoleml.com.

Where privacy law asks for a legal basis, we rely on our relationship with you to provide the Services, on safeguards and fairness as legitimate interests, on choices you make as consent, and on what the law requires as legal obligation.

We do not sell personal information, we do not share it for cross-site advertising, and we do not use it for automated decisions with legal or similarly significant effects.

3. Your content and our models

3.1 To answer your requests, your prompts and any attached images are sent to the inference providers that run our models.

3.2 Your prompts and responses are retained by us, encrypted at rest, and are used to develop, improve and train our own models. Access to stored content is limited to the small team that operates and improves the Services. We do not sell your content, we do not use it for advertising, and we do not use it to train models for anyone else. The providers that run our models process your content only to answer your request and do not keep it afterwards.

3.3 When you ask Raven to search the web, the search query is sent to the search provider that performs the search. Connector features send requests only within the permissions you granted for the connected service.

3.4 The playground and the apps run on your own account, so this policy treats them the same.

4. Cookies and on-device storage

4.1 When you sign in, we set a session cookie so you stay signed in across our sites. It lasts about 30 days, and signing out ends it.

4.2 Short-lived cookies, about 30 minutes, hold sign-in flows together, for example when a desktop app opens a sign-in window. They disappear when the flow completes.

4.3 Your device stores what the apps need to work: a sign-in token, your preferences and, in the Raven app, your chats, so the app opens fast and keeps working where designed. Temporary chats stay on your device. Clearing app or browser storage removes what is stored there.

4.4 Analytics cookies. Our marketing websites (dipoleml.com, docs.dipoleml.com, tryraven.app and trydcode.app) show a cookie banner with two equal choices, Accept and Decline. When analytics cookies are on, Google Analytics stores two cookies on that website, named _ga and _ga_ followed by a code. They hold a random identifier, not your name or email, so visits can be counted and returning visitors told apart. They last up to two years after your last visit unless you delete them.

4.5 Before you choose. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay off until you choose Accept. Everywhere else, they are on from your first visit until you choose Decline. Google Analytics works out the region from your connection. If your browser sends a Global Privacy Control signal, analytics cookies also stay off until you choose Accept, wherever you are.

4.6 When analytics cookies are off. Nothing is stored on your device for analytics. The page still sends Google Analytics a basic signal that it was viewed, without cookies and without an identifier. Google uses these signals only to estimate overall totals.

4.7 Changing your choice. Use the Cookie settings link at the bottom of any page on these websites to bring the banner back and change your choice at any time. Each website remembers your choice in your browser's local storage, which is not a cookie and is not sent to us. If you decline after accepting, analytics cookies stop being used, and you can delete them in your browser settings. Clearing your browser's data for a website removes your choice there, and the banner shows again.

4.8 We do not use advertising cookies or cross-site tracking cookies. The advertising features of Google Analytics are always off on our websites.

5. Sharing with others

We share personal information only in these ways:

5.1 Providers that help us operate: the companies that run our web infrastructure and delivery, our payment processor, the sign-in providers (Google and Apple), the provider of the analytics on our marketing websites (Google, through Google Analytics), the inference providers that run our models, and the search provider used when you ask Raven to search. Each processes information only to perform its role for us, and we can provide the current list on request.

5.2 Legal process: where the law requires, we may disclose information in response to valid legal process, and we notify affected users where the law allows.

5.3 Protecting rights: we may disclose information to investigate or address suspected abuse, fraud, security incidents or violations of our Terms.

5.4 Business changes: in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, with notice where required.

6. How long we keep it

6.1 Account details are kept while your account exists.

6.2 Chats are kept until you delete them, and are removed from the Services within 30 days after you delete your account.

6.3 Usage and safety records are kept while needed to run and protect the Services; fair-use records may be kept after account deletion where needed to prevent repeat abuse.

6.4 Billing records are kept for the period Canadian accounting law requires, about seven years.

6.5 Google Analytics visit data for our websites is deleted by Google after 14 months. Aggregate totals, which do not identify anyone, are kept longer.

6.6 You can ask us to delete specific records sooner, subject to what the law requires us to keep.

7. Security

7.1 We use safeguards appropriate to the information we hold, including encryption in transit and encryption at rest by our storage provider, strict access controls, and limiting who can see personal information and stored content to the small number of team members who need it: primarily engineering and support to operate and improve the Services and train our models, and marketing for permitted communications.

7.2 No system is perfectly secure. If we learn of an incident affecting your personal information, we will tell you and the regulators we must inform, as Canadian law requires.

8. Where it is processed

8.1 We are a Canadian company, and our Services run on global infrastructure. Personal information may be processed in Canada, the United States and other countries by the providers described in Section 5, under the safeguards Canadian privacy law requires for transfers.

9. Your rights and choices

9.1 You can see and update your account details in the dashboard, review and delete your chats in the Raven app, disconnect connectors, revoke keys, and delete your account at any time.

9.2 You can ask us to access, correct, export or delete your personal information by writing to privacy@dipoleml.com. We may need to verify your request, for example by asking you to sign in, and we respond within the timelines Canadian law requires.

9.3 Canada (PIPEDA). You can ask to see the personal information we hold about you and ask us to correct it. If we do not resolve your concern, you can complain to the Office of the Privacy Commissioner of Canada.

9.4 EEA, UK and similar. Where GDPR-like law applies to you, you also have rights of erasure, portability, restriction and objection, and rights around automated decision-making, which we honor as described above.

9.5 California and similar. Where CCPA-like law applies to you: we do not sell personal information and do not share it for cross-site behavioral advertising, and we honor requests to know, delete and correct.

9.6 We never treat you differently for exercising your rights.

10. Children

10.1 The Services are not for anyone under 13, or under the higher minimum age where you live. We do not knowingly collect personal information from children below that age. If you believe a child has an account, write to privacy@dipoleml.com and we will delete it.

11. Changes to this policy

11.1 We may update this policy. The current version always lives on this page with its effective date, and material changes are posted in advance. The updated version applies from its effective date.

12. Contact

Dipole ML Inc., a federally incorporated Canadian company. privacy@dipoleml.com (privacy) · legal@dipoleml.com (legal)