Privacy Policy

Introduction

Dude Diligence ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at dudediligence.pro.

Information We Collect

1. Information You Provide

• Account Information: Email address, name, company name, phone number (optional)
• Payment Information: Processed securely through Stripe or NOWPayments (we don't store credit card numbers)
• Documents: Files you upload for due diligence analysis (LOIs, ICPOs, KYC documents, etc.)
• Contact Information: Email and WhatsApp number when downloading reports

2. Information Collected Automatically

• Usage Data: IP address, browser type, device information, pages visited, time spent on site
• Analytics: Google Analytics 4 and Microsoft Clarity track user behavior to improve our service
• Cookies: We use cookies for authentication, preferences, and analytics (see Cookie Policy below)

How We Use Your Information

• Provide Services: Process documents, generate risk reports, deliver PDF reports via email
• Account Management: Create and manage your account, process payments, send receipts
• Communication: Send service updates, respond to inquiries, provide customer support
• Improve Services: Analyze usage patterns, fix bugs, develop new features
• Security: Detect fraud, prevent abuse, protect against security threats
• Legal Compliance: Comply with legal obligations, enforce our terms, protect rights

Data Retention & Deletion

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
• Infrastructure: Hosted on SOC 2 compliant servers (AWS/Google Cloud)
• Access Control: Role-based access, multi-factor authentication for admin accounts
• Zero-Knowledge Architecture: We process documents without permanently storing them
• Regular Audits: Quarterly security reviews and penetration testing

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Third-Party Services

We use the following third-party services that may collect your information:

Data Sharing & Disclosure

We do NOT sell, rent, or trade your personal information.

We may share your information only in these limited circumstances:

• Service Providers: Third-party vendors who help us operate (payment processors, hosting providers, analytics)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Protect Rights: To enforce our terms, protect against fraud, or defend legal claims
• With Your Consent: When you explicitly authorize us to share your information

Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR (EU/UK Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for data processing at any time

CCPA (California Users)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Non-Discrimination: You won't be discriminated against for exercising your rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookie Policy

We use cookies and similar tracking technologies to improve your experience:

To manage cookies, adjust your browser settings or use tools like AboutCookies.org.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
• Privacy Shield Framework: For US-EU transfers (where applicable)
• Encryption: All cross-border data transfers are encrypted

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email or prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy.