Privacy Policy

Last updated: June 23, 2026

Who we are

The Services are operated by Dana Intelligence, Inc. If you have questions about this Privacy Policy or our privacy practices, contact support@heydana.ai.

Information we collect

• Contact information you provide, such as your name, email address, phone number, and support requests.
• Account information used to create, authenticate, secure, and administer your account.
• Conversation content you send to Dana, including messages, voice requests, instructions, attachments, approvals, and feedback.
• Connected account data from services you choose to connect, such as Google, only after you authorize access through that provider's consent flow.
• Usage, device, and log data, such as pages viewed, features used, browser type, IP address, timestamps, diagnostics, and security logs.
• Cookies and similar technologies used for basic site functionality, security, analytics, and preferences.

Google account data

Dana offers optional Google integrations so you can ask Dana to help with your Gmail and Google Calendar. Dana only accesses Google user data after you explicitly connect your Google account and grant OAuth permission.

Dana may request the following Google OAuth scopes:

• Google Calendar read access to view calendars and events so Dana can answer schedule questions, find availability, and summarize your day.
• Google Calendar event access to create, update, or manage calendar events when you ask Dana to schedule or change a meeting.
• Gmail read access to retrieve email messages, metadata, threads, and settings when you ask Dana to search, summarize, or answer questions about your inbox.
• Gmail send access to send emails or replies on your behalf when you instruct Dana to do so.

Dana uses Google user data only to provide and improve user-facing features you request, such as answering questions about your inbox, preparing an email response, sending an email you requested, or managing calendar events. Dana does not use Google user data for advertising, retargeting, selling data, determining creditworthiness, or training generalized AI or machine learning models.

How we use information

• Provide, maintain, secure, and improve the Services.
• Create and manage accounts and authenticate users.
• Understand and execute user instructions, including messages, calls, calendar actions, email actions, and document workflows.
• Communicate with you, including responding to support requests and sending service notices.
• Send product updates or marketing communications where permitted; you can opt out of marketing at any time.
• Monitor and improve security, prevent abuse, debug issues, and enforce our terms and policies.
• Comply with legal obligations and protect the rights, safety, and security of Dana, our users, and the public.

How we store and retain information

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes. Retention periods vary depending on the type of information and how it is used.

Google email and calendar content is accessed to complete the user-requested task. We avoid retaining full Google email or calendar content unless retention is necessary to provide the feature, maintain a user-visible history, comply with law, investigate abuse, or preserve security. OAuth tokens, connection metadata, user instructions, task outputs, and limited operational logs may be retained so Dana can keep the integration working and provide support.

How we share information

We may share information in the following circumstances:

• Service providers and subprocessors that help us operate the Services, including hosting, communications, analytics, customer support, authentication, AI infrastructure, and connected-account infrastructure such as Nylas.
• Connected services at your direction, such as sending a Gmail message or creating a Google Calendar event when you ask Dana to do so.
• Legal and safety when disclosure is required by law, legal process, or to protect rights, safety, security, or prevent abuse.
• Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and user notice or consent where required.

We do not sell your personal information or Google user data.

Google API Limited Use disclosure

Dana's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Human access to user data

Dana restricts employee and contractor access to user data. Humans may access user data only when necessary to provide support requested by you, investigate security or abuse issues, comply with law, or perform internal operations using aggregated or anonymized data where appropriate.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including secure transport, access controls, and safeguards for OAuth credentials. No method of transmission or storage can be guaranteed to be completely secure.

Your choices and controls

• Disconnect Google access by revoking Dana's access in your Google Account permissions or by contacting us.
• Access, correction, or deletion by contacting support@heydana.ai.
• Opt out of marketing by using the unsubscribe link in marketing emails.
• Cookie controls through your browser settings.

Deleting your data

You can request deletion of your Dana account data or connected-account data by emailing support@heydana.ai. You can also revoke Google OAuth access from your Google Account. After a deletion request, we delete or de-identify information unless we need to retain it for legal, security, fraud-prevention, or legitimate operational reasons.

International processing

We may process and store information in the United States and other countries where Dana or our service providers operate. These countries may have data protection laws different from those where you live.

Children's privacy

Dana is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.

Changes

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. If we materially change how we use Google user data or other personal information, we will provide notice and obtain consent where required before using the data for a new purpose.

Contact

If you have questions about this Privacy Policy or our privacy practices, contact support@heydana.ai.