Privacy Policy

Last updated: October 19, 2026

Who we are

The Services are operated by Dana Intelligence, Inc. If you have questions about this Privacy Policy or our privacy practices, contact support@heydana.ai.

Information we collect

• Contact information you provide, such as your name, email address, phone number, and support requests.
• Account information used to create, authenticate, secure, and administer your account.
• Conversation content you send to Dana, including messages, voice requests, instructions, attachments, approvals, and feedback.
• Connected account data from services you choose to connect, such as Google, only after you authorize access through that provider's consent flow.
• Usage, device, and log data, such as pages viewed, features used, browser type, IP address, timestamps, diagnostics, and security logs.
• Cookies and similar technologies used for basic site functionality, security, analytics, and preferences.
• Advertising measurement data, such as ad click identifiers and completed account signup events, used to measure Dana's advertising campaigns.

Early-access SMS program

Dana Intelligence, Inc. uses your mobile number and SMS consent record to manage your early-access request, send an approved invitation and invitation resends, and honor opt-out requests. Joining the waitlist does not create an account or send a verification code. We retain invitation status, timestamps and delivery references for support, security and preventing duplicate sends.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

This protection covers personal information collected for the early-access SMS program. The advertising uses described elsewhere in this policy do not apply to that information. SMS consent does not authorize advertising use of program information. Service providers, including Twilio for invitation delivery, process program information to provide this service. If you accept an invitation, Clerk handles phone verification and account authentication.

Message frequency varies with your access request and invitation resends. Message and data rates may apply. Reply STOP to opt out or HELP for help. Contact support@heydana.ai for help, access, correction or deletion requests. We retain program information as needed to manage your request, honor your choices, prevent abuse and meet legal obligations; a limited opt-out record may be retained to honor it. Read the SMS Terms for more information.

Google account data

Dana offers optional Google integrations so you can ask Dana to help with your Gmail, Google Calendar, website performance and advertising reports. Dana only accesses Google user data after you explicitly connect your Google account and grant OAuth permission.

Dana may request the following Google OAuth scopes:

• Google Calendar read access to view calendars and events so Dana can answer schedule questions, find availability, and summarize your day.
• Google Calendar event access to create, update, or manage calendar events when you ask Dana to schedule or change a meeting.
• Gmail read access to retrieve email messages, metadata, threads, and settings when you ask Dana to search, summarize, or answer questions about your inbox.
• Gmail send access to send emails or replies on your behalf when you instruct Dana to do so.
• Google Analytics read-only access (analytics.readonly) to discover the GA4 properties you can access and retrieve traffic, engagement, key-event, revenue, acquisition-channel and page reports you request.
• Google Ads access (adwords) to discover advertising accounts and retrieve performance reports. Google provides a broad scope for this API; Dana restricts this connection to reporting and does not create or change campaigns, budgets, audiences or billing.

Dana uses Google user data only to provide and improve user-facing features you request, such as answering questions about your inbox, preparing an email response, sending an email you requested, managing calendar events, or explaining website and advertising performance. Dana does not use Google user data to target or serve advertisements, retarget users, sell data, determine creditworthiness, or train generalized AI or machine learning models.

Analytics and advertising reporting connections

Where available, you can separately connect Google Analytics, Google Ads or Meta Ads to ask about website traffic and advertising performance. You authorize access to your own properties or advertising accounts. Reporting data may include account and property identifiers, campaign names, dates, aggregate audience and engagement measures, spend, revenue and conversion statistics. Meta Ads requests read access (ads_read) to the advertising accounts you authorize.

Dana processes this data to answer your requests. Relevant report data is sent to the AI service providers that generate your answers and may be retained in your conversation history and the systems that process that conversation. These reporting connections do not collect raw visitor-level Analytics records or change advertising campaigns. Availability depends on provider approval and configuration.

Vercel Connect holds the OAuth client credentials and customer authorization grants for these reporting connections. Dana retains connection ownership and lifecycle references and obtains access tokens in server memory when making authorized requests. Access and refresh tokens are not stored in Dana's reporting connection database or conversation history. Credential custody is separate from retention of report data.

Disconnecting in Dana Connections stops further reporting access in Dana and requests revocation through Vercel Connect. If revocation fails, the connection remains disabled in Dana and you can retry disconnecting. You can also revoke access in your Google Account or Meta business settings. Meta business grants configured for continuous access may remain valid until revoked or otherwise invalidated by Meta. Disconnecting does not itself delete reports already retained in conversations or other processing systems. For deletion requests, contact support@heydana.ai.

How we use information

• Provide, maintain, secure, and improve the Services.
• Create and manage accounts and authenticate users.
• Understand and execute user instructions, including messages, calls, calendar actions, email actions, and document workflows.
• Communicate with you, including responding to support requests and sending service notices.
• Send product updates or marketing communications where permitted; you can opt out of marketing at any time.
• Monitor and improve security, prevent abuse, debug issues, and enforce our terms and policies.
• Comply with legal obligations and protect the rights, safety, and security of Dana, our users, and the public.

AI training

We don’t use your conversations, files, or connected-account data to train AI models.

This is separate from processing your information to provide Dana’s services, including using AI service providers to respond to your requests, as described in this policy.

How we store and retain information

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes. Retention periods vary depending on the type of information and how it is used.

Google email and calendar content is accessed to complete the user-requested task. We avoid retaining full Google email or calendar content unless retention is necessary to provide the feature, maintain a user-visible history, comply with law, investigate abuse, or preserve security. OAuth tokens, connection metadata, user instructions, task outputs, and limited operational logs may be retained so Dana can keep the integration working and provide support.

How we share information

We may share information in the following circumstances:

• Service providers and subprocessors that help us operate the Services, including hosting, communications, analytics, customer support, authentication, AI infrastructure, and connected-account infrastructure such as Nylas and Vercel Connect.
• Advertising measurement providers, including Google Ads and Meta, to measure advertising performance. Meta may receive hashed versions of contact identifiers supplied directly to Dana, ad-referral identifiers and limited activity events. See Advertising and your choices below.
• Connected services at your direction, such as sending a Gmail message or creating a Google Calendar event when you ask Dana to do so.
• Legal and safety when disclosure is required by law, legal process, or to protect rights, safety, security, or prevent abuse.
• Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and user notice or consent where required.

We do not sell your personal information or Google user data.

Advertising and your choices

The advertising uses below exclude information collected for the early-access SMS program.

We work with advertising partners, including Meta (Facebook and Instagram), to measure how people discover Dana and, where permitted, show relevant Dana ads. We may share hashed versions of phone numbers or email addresses you provide directly to Dana, advertising click identifiers, browser information, and limited activity events such as starting a guest conversation, completing registration, connecting an account, or completing a first task. These events describe activity, not the contents of your tasks or connected accounts. Hashing transforms identifiers before transmission; it does not make them anonymous. Our partners can use these identifiers to match accounts on their services.

Where permitted, we may use contact identifiers to create advertising audiences or exclude registered users from guest campaigns. We do not share message contents, emails, calendar entries, attachments, or information obtained from connected Google accounts for advertising.

Where enabled, the Meta Pixel on our public website can record page visits after you allow Meta advertising cookies. Choose Advertising choices to decline or withdraw that permission in this browser. We honour a supported Global Privacy Control signal by keeping Meta tracking off. Your browser choice applies to this website and browser; it does not change an account-level advertising preference.

To ask us to stop using your contact identifiers and account activity for Meta advertising, email support@heydana.ai with the subject “Advertising opt-out”. You do not need to register for Dana. We may verify ownership to protect your information. We record your choice to prevent future sharing for these purposes and request removal from our matched advertising audiences where applicable. Provider processing may take time. This choice does not stop service messages, prevent you from using Dana, or prevent ads shown without using this information.

Google API Limited Use disclosure

Dana's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Human access to user data

Dana restricts employee and contractor access to user data. Humans may access user data only when necessary to provide support requested by you, investigate security or abuse issues, comply with law, or perform internal operations using aggregated or anonymized data where appropriate.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including secure transport, access controls, and safeguards for OAuth credentials. No method of transmission or storage can be guaranteed to be completely secure.

Your choices and controls

• Disconnect connected accounts using the controls for that connection in Dana, revoking Dana's access in your provider's account settings, or contacting us.
• Access, correction, or deletion by contacting support@heydana.ai.
• Opt out of marketing by using the unsubscribe link in marketing emails.
• Advertising opt-out by emailing support@heydana.ai. See Advertising and your choices.
• Cookie controls through your browser settings and the website’s Advertising choices control where enabled.

Deleting your data

You can request deletion of your Dana account data or connected-account data by emailing support@heydana.ai. You can also revoke Google OAuth access from your Google Account. After a deletion request, we delete or de-identify information unless we need to retain it for legal, security, fraud-prevention, or legitimate operational reasons.

International processing

We may process and store information in the United States and other countries where Dana or our service providers operate. These countries may have data protection laws different from those where you live.

Children's privacy

Dana is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.

Changes

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. If we materially change how we use Google user data or other personal information, we will provide notice and obtain consent where required before using the data for a new purpose.

Contact

If you have questions about this Privacy Policy or our privacy practices, contact support@heydana.ai.