1. Introduction

Doeric AI ("Doeric AI," "we," "us," or "our") respects your privacy and is committed to protecting personal data and other information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process information when you visit our website, register for or use our platform, communicate with us, interact with AI agents or automations made available through our services, connect third-party channels, applications, or data sources, or otherwise engage with us in connection with our business.

This Privacy Policy applies to the Doeric AI website, platform, and related services currently operated under dinesQL Pte. Ltd., unless a separate privacy notice, contract, or data processing agreement applies to a particular service or relationship.

2. Scope and Roles

Depending on the circumstances, Doeric AI may act as a data controller for information we collect and use for our own operational purposes, such as running our website, managing accounts, securing our services, providing support, improving our platform, and complying with legal obligations. We may also act as a data processor or service provider when we process customer data, conversation data, uploads, and related content on behalf of our customers under their instructions.

Where we process information on behalf of a customer, that customer typically determines the purposes of processing, service configuration, retention settings, and access permissions. In those cases, the customer remains responsible for its own privacy obligations to its users, employees, prospects, and customers.

3. Information We Collect

We may collect or process the following categories of information:

• Account and contact information, such as name, company name, job title, business email address, phone number, and account credentials or identity-related details.
• Website and usage information, such as IP address, browser type, device information, operating system, pages viewed, session data, timestamps, and technical logs.
• Customer configuration and business information, such as tenant settings, business profile information, WhatsApp business configuration, scheduling settings, product or inventory data, and workflow settings.
• Conversation data, such as messages sent to or from AI agents, WhatsApp conversations, chat transcripts, metadata, conversation summaries, operational tags, and statuses.
• Voice and audio data where enabled, such as audio messages, recordings, transcriptions, and related metadata.
• Uploaded content and knowledge sources, such as documents, PDFs, images, videos, catalogs, FAQs, and other business knowledge connected to the platform.
• Integration and connected-system data made available through customer-approved third-party systems or channels.
• Cookies and similar technologies used to operate, secure, and improve the website and services.

4. Sources of Information

We may collect information directly from you, from our customers and their authorized users, from end users interacting with customer-configured AI agents, from third-party platforms or integrations connected to our services, from service providers supporting hosting, authentication, analytics, communications, and security, and automatically through website and platform usage.

5. How We Use Information

We may use information for the following purposes:

• To provide, operate, maintain, and improve our website, platform, and services.
• To create and manage accounts, subscriptions, and user access.
• To authenticate users and secure access to services.
• To enable AI agents, automations, workflows, scheduling, media delivery, and integrations.
• To process and respond to communications, inquiries, and support requests.
• To generate conversation outputs, summaries, classifications, and insights.
• To monitor service health, quality, reliability, and performance.
• To protect against unauthorized access, abuse, fraud, spam, malicious activity, and security incidents.
• To enforce our terms, policies, and contractual rights.
• To comply with legal, regulatory, and compliance obligations.
• To communicate with customers and users about the service.
• To improve user experience, accessibility, safety, and usefulness of our services.

6. AI and Automated Processing

Doeric AI uses advanced AI technologies to support conversational experiences, automation, classification, content retrieval, scheduling assistance, and other product capabilities.

• AI may be used to understand prompts and conversations, retrieve relevant business or knowledge content, generate replies, summarize conversations, support workflow execution, assist with scheduling or routing, analyze operational signals, and produce other outputs requested by customers.
• We implement technical and organizational safeguards designed to promote responsible AI use, including policy-based controls, validation logic, access restrictions, monitoring, auditability, and safety or guardrail features intended to reduce misuse or unsafe outcomes.
• AI-generated content may not always be complete, accurate, or appropriate for every situation. Customers and users remain responsible for reviewing outputs where necessary and for applying human oversight to business-critical, legal, financial, medical, regulated, or high-risk decisions.

We do not sell personal data. Unless explicitly agreed otherwise in writing, customer data is processed to provide the contracted services, support legitimate service functions, maintain security, and improve the quality, reliability, and usability of the service in accordance with applicable law and contractual commitments.

7. Customer Data Ownership

Customers retain ownership of their data, subject to applicable law and the rights necessary for us to provide the service. As between Doeric AI and our customers, the customer owns or controls its business data, conversations, uploads, and connected content, while Doeric AI processes that data to provide the platform and related services.

8. Multi-Tenant Data Isolation

Doeric AI supports multiple customers and is designed to logically segregate customer environments and data. We implement measures intended to prevent unauthorized cross-customer access and to maintain appropriate separation of customer information within our systems.

9. Conversation Retention and Storage Preferences

We understand that customers may have different retention requirements. Conversation storage and retention may therefore be configured based on customer preferences, including not storing certain conversations at all where supported, storing conversations for a customer-selected number of days, or retaining limited operational metadata where appropriate.

Where personal data is no longer needed for the purposes for which it was collected, and retention is no longer necessary for legal, business, or security reasons, we will delete it, anonymize it, or securely de-identify it, subject to technical feasibility and applicable law.

10. Media, Knowledge Bases, and Uploaded Content

Customers may upload or connect content such as images, videos, PDFs, product information, knowledge articles, FAQs, and other business materials to support AI-driven conversations and workflows. We process such content to support retrieval, referencing, response generation, and other platform functions. Customers are responsible for ensuring they have all rights, permissions, and legal bases needed to upload or connect that content.

11. WhatsApp and Third-Party Channels

If customers use WhatsApp or other third-party communication channels with Doeric AI, related data may be processed through or alongside those third-party services. This may include message content, metadata, contact identifiers, and platform-specific delivery or status information needed to support channel-based conversations.

Customers may also be subject to the policies and terms of the third-party channels they choose to use. We encourage customers and end users to review the privacy practices of those providers.

12. Data Sharing and Disclosure

We may disclose information in the following circumstances:

• With trusted service providers, subprocessors, cloud providers, communications providers, analytics providers, hosting providers, and security partners that help us operate the service, subject to appropriate confidentiality and data protection obligations.
• With third-party services, systems, and applications when directed or configured by a customer.
• Where required to comply with law, regulation, court order, lawful request, or to protect our rights, property, systems, or users.
• As part of a merger, acquisition, financing, reorganization, asset sale, or similar business transaction, subject to appropriate safeguards.

We do not sell personal data.

13. International Data Transfers

Doeric AI may process or store data in multiple jurisdictions depending on customer configuration, hosting arrangements, support operations, or subprocessors. Where personal data is transferred across borders, we take steps designed to ensure an appropriate level of protection through contractual, organizational, and technical safeguards required by applicable law.

14. Data Security

We maintain technical, administrative, and organizational safeguards designed to protect personal data and customer data against unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks.

• Encryption in transit and encryption at rest for stored conversations and other protected data.
• Access controls, authentication, authorization, and least-privilege principles.
• Environment segregation, logical isolation, and monitoring controls.
• Secure development and deployment practices, vulnerability management, and incident response procedures.
• Protection of personally identifiable information (PII) and other sensitive business data through layered safeguards.

We also apply AI safety controls and guardrails intended to support secure and responsible use of the platform. While we take reasonable and appropriate measures, no method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

15. Data Breaches and Incident Handling

If we become aware of a confirmed security incident affecting personal data, we will investigate, contain, and remediate the issue as appropriate. Where required by applicable law, we will notify affected customers, regulators, or individuals in accordance with legal obligations and the nature of the incident.

16. Legal Bases and Consent

Where required by applicable law, we rely on one or more lawful bases for processing, such as consent, performance of a contract, compliance with legal obligations, legitimate interests, customer instructions, or other lawful grounds recognized by applicable law. Where consent is required, customers and users are responsible for ensuring they have obtained any required consents from their end users, customers, staff, or contacts for use of the platform and associated communications.

17. Your Rights

Depending on your location and the applicable law, you may have rights to request access to personal data, request correction of inaccurate or incomplete data, request deletion of certain data, object to or restrict certain processing, withdraw consent where processing is based on consent, request portability of certain data, and lodge a complaint with a regulator or supervisory authority.

If Doeric AI processes your information on behalf of a customer, you should direct your request to that customer first, as they are usually best placed to respond. We will assist customers as reasonably necessary and as required by applicable law and contract.

18. Cookies and Similar Technologies

We use cookies and similar technologies to operate and secure our website, remember preferences, improve performance, understand usage patterns, measure effectiveness, and support analytics and troubleshooting. You can usually control cookies through your browser or device settings, although disabling certain cookies may affect website functionality.

19. Marketing Communications

We may send service-related communications and, where permitted, marketing or promotional communications. You may opt out of marketing communications at any time by using the unsubscribe mechanism in the communication or by contacting us. Even if you opt out of marketing, we may still send non-promotional messages related to your account, service, security, billing, or legal matters.

20. Children's Privacy

Our website, platform, and services are not intended for children, and we do not knowingly collect personal data directly from children except where such processing is expressly enabled by a customer and lawfully permitted. If you believe that a child has provided personal data to us in violation of applicable law, please contact us so we can take appropriate steps.

21. Third-Party Links and Services

Our website or services may contain links to third-party websites, tools, or services. We are not responsible for the privacy, security, or content practices of those third parties. Your use of third-party services is subject to their own terms and privacy notices.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or business practices. When we make material changes, we will update the "Last Updated" date and may provide additional notice where required by law. Continued use of our website or services after such updates may constitute acceptance of the revised Privacy Policy to the extent permitted by law.

23. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data handling practices, please contact:

• Doeric AI, currently operated under dinesQL Pte. Ltd.
• Email: info@dinesql.com
• Support: support@dinesql.com
• Business Address: 68 Circular Road, #02-01, Singapore 049422