Privacy Policy &
Data Retention Rules
LAST REVISED: September 20, 2026 • GLOBAL DEVELOPER STANDARDS • TRANSPARENT LOGGING
Privacy Architecture Overview
Doop AI (do0p.com) prioritizes transparency and developer data sovereignty. We collect only what is strictly required to route API requests, meter credit balances, prevent fraud, and maintain infrastructure stability.
• Payment Information: We do NOT store credit cards or UPI PINs. All billing is handled by certified payment gateways (e.g. Cashfree).
• Media Storage: Generated media URLs are temporary. You must download your outputs immediately; we do not offer permanent storage.
• No Data Selling: We never sell personal information or API prompts to third-party data brokers or advertisers.
1. Information We Collect
When you interact with Do0p, we collect the following categories of information:
- Account Credentials: Name, email address, and Google OAuth unique identifier when you sign in via Google or create an account.
- API Request Telemetry: Inbound prompt text, negative prompts, resolution parameters, model IDs, generation seeds, request timestamps, response status codes, and credit deduction amounts.
- Network & Device Data: IP address, browser user-agent, operating system, and referral headers used solely for rate limiting, DDoS mitigation, and anti-abuse enforcement.
- Billing Records: Transaction identifiers, order status, purchase timestamps, and currency amounts. We never handle, store, or view sensitive payment card numbers, CVVs, or bank credentials.
2. How Your Data Is Processed & Disclosed
Your information is processed strictly for the following functional purposes:
- Routing your prompt and model configurations to upstream inference clusters to produce your requested images or video frames.
- Accurately calculating computational credit deductions and updating your real-time wallet ledger.
- Detecting and blocking abusive requests, prompt injections, and automated attacks.
- Dispatching critical operational emails (account verifications, transaction receipts, security notices, and feature announcements from Sofia at Do0p). You may opt out of promotional emails at any time.
3. Media Storage & Ephemeral Retention Policy
Do0p is a real-time compute gateway, NOT a perpetual cloud backup or hosting provider.
Generated images, videos, and intermediary tensor outputs are hosted ephemerally on temporary content delivery networks (CDNs). Media URLs may expire, refresh, or be purged automatically within 24 to 72 hours after generation.
YOU ARE STRICTLY RESPONSIBLE FOR IMMEDIATELY DOWNLOADING AND STORING ALL GENERATED ASSETS ON YOUR OWN INFRASTRUCTURE. DO0P ASSUMES ZERO LIABILITY FOR EXPIRED, DELETED, OR PURGED MEDIA.
4. Security Safeguards & Inherent Risk
We implement industry-standard technical measures, including TLS/SSL encryption in transit, strict database access controls, salted credential hashing, and perimeter firewalls.
However, no electronic transmission over the internet or method of digital storage is 100% impenetrable. While we strive to protect your personal and API information, you acknowledge that transmission of data to and through our services is done at your own risk.
5. User Rights & Data Deletion
You have the right to request access to the personal information we hold about you, request corrections, or request the permanent deletion of your account and associated database records.
To request account deletion or data erasure, please submit a request to our privacy team via our Contact Page or email privacy@do0p.com. Please note that certain historical transaction records must be retained for accounting, fraud prevention, and legal compliance as required by applicable tax laws.
6. Policy Updates & Contact
We may revise this Privacy Policy periodically to reflect infrastructure improvements or regulatory changes. Updated versions will be published directly on this page with an updated “Last Revised” timestamp. Continued use of Do0p following any change constitutes your acceptance of the updated policy.