Draft — pending legal review. This policy is a working draft prepared alongside the product and has not yet been reviewed by counsel. Do not rely on it as a final statement of our practices.

This Privacy Policy explains what information TeamDuo ("TeamDuo", "we", "us") collects when you use our website and services, how we use it, and the choices you have. It applies to www.teamduo.ai and to the TeamDuo application.

1. The short version

TeamDuo is a governed gateway between your database and your AI agents. Queries run against your database. We do not copy, replicate, or warehouse the contents of your connected data sources. What we store is the configuration you create (connection settings, your semantic layer, and access rules) and a log of the queries made through the gateway.

2. Information we collect

Information you provide

Account information — name, work email address, and organization name when you create an account.
Connection credentials — the database connection details you configure. These are encrypted at rest and used only to execute queries you or your agents initiate.
Configuration content — your semantic layer: metric definitions, table and column descriptions, masking rules, and access policies.
Communications — messages you send us for support, sales, or feedback.

Information collected automatically

Query audit records — for every request an agent makes through the gateway, we record who made it, which agent, when, which resources were touched, and whether it was allowed or denied. These records exist so that you can audit access; they are visible to your organization's administrators.
Service logs — IP address, browser type, and pages visited, used to operate and secure the service.

Information we do not collect

We do not retain the row-level results returned by your queries beyond what is needed to serve the response to the requesting agent.
We do not collect data from columns you have masked or denied.
We do not sell personal information, and we do not share it with data brokers.

3. How we use information

To provide, operate, and secure the service.
To authenticate users and enforce the access rules you configure.
To produce the audit history we make available to you.
To diagnose problems, prevent abuse, and improve reliability.
To communicate with you about the service, including security and availability notices. Product marketing email is opt-in and you can unsubscribe at any time.

We do not use the contents of your database, or your queries against it, to train machine learning models.

4. Sharing and subprocessors

We share information only with service providers who help us run TeamDuo, and only to the extent they need it. We may also disclose information where required by law, or to protect the rights and safety of our users. If TeamDuo is involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.

A current list of subprocessors is available on request at privacy@teamduo.ai.

5. Security

Data is encrypted in transit (TLS) and at rest.
Database credentials are stored encrypted and are never displayed back to you in full.
Access is read-only by default; write access requires explicit, scoped opt-in.
Internal access to production systems is limited and logged.

No system is perfectly secure. If you believe you have found a vulnerability, please contact us at privacy@teamduo.ai.

6. Retention

We keep account and configuration data for as long as your account is active. Audit records are retained according to your plan's retention period. When you delete your account, we delete or anonymize your data within 30 days, except where we are required to retain it by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, contact privacy@teamduo.ai. We will respond within the time required by applicable law.

8. Cookies

Our marketing site uses only what is necessary to serve the page. The application uses cookies that are strictly necessary to keep you signed in. We do not use advertising cookies or third-party tracking pixels.

9. International transfers

We operate in the United States. If you access TeamDuo from outside the U.S., your information may be transferred to and processed in the U.S. under appropriate safeguards.

10. Children

TeamDuo is a business product and is not directed to anyone under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and notify account administrators.

12. Contact

Questions about this policy? Email privacy@teamduo.ai.