Last Updated: November 17, 2025

This Privacy Policy explains how Dough, Inc. ("Dough," "we," "us," or "our") collects, uses, and protects your information when you use our AI-powered product creation platform, website, and related services. By using the Services, you agree to this Privacy Policy.

1. Information We Collect

Information You Provide

We collect name, email, phone number, password, prompts, uploads, product ideas, images, communications, and any other information you submit. Payment information is processed by Stripe; Dough does not store full payment card numbers.

Information Collected Automatically

We collect usage logs, device information, IP address, browser and operating system data, cookies, and analytics.

Information From Suppliers

If you request sampling, production, or supplier matching, we may collect your contact information and project details needed for fulfillment.

2. How We Use Information

We use data to operate and improve our Services, enable AI generation, process payments, provide supplier introductions, enhance reliability and security, prevent abuse, and communicate with you. We do not sell personal data.

3. AI Data Handling

We store prompts, uploads, and outputs to maintain project continuity. Outputs are stored for versioning and editing. Human access to user data is restricted unless required for support, legally required, or requested by you. Your data is not used to train third-party foundation models. Dough may use anonymized or aggregated data to improve the Services.

4. How We Share Information

We share information with suppliers when you request production or matching, with service providers such as Stripe, hosting partners, and analytics platforms, and as required by law or to protect Dough's rights.

5. International Data Transfers

Your information may be transferred to and processed in the United States or other countries using legally compliant safeguards, including GDPR Standard Contractual Clauses.

6. Your Rights

You may request access, correction, deletion, and export of your data, and you may opt out of marketing. EU and UK users may request restriction, object to processing, and file complaints with supervisory authorities.

7. Data Retention

We retain information as long as necessary to provide the Services or comply with law. Deleted data may remain briefly in backups.

8. Security

We use encryption, secure hosting, and access controls, but no system is perfectly secure.

9. Children's Privacy

The Services are not intended for users under 18.

10. Changes

We may update this Privacy Policy. Continued use of the Services means you accept the updated policy.

11. Contact

Dough, Inc.
Email: team@dough.do