dpanel.ai Privacy Policy

This Privacy Policy explains how Live Future Inc., a Delaware corporation (“Live Future,” “dpanel.ai,” “DPanel,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you use dpanel.ai, dpanel.io, dpai.io, our applications, APIs, workspaces, Boxes, channels, and related services (collectively, the “Service”).

This Policy should be read with the dpanel.ai Terms of Service. It does not govern the independent practices of AI model providers, Payment Partners, cloud hosts, communication platforms, connected services, or infrastructure selected and controlled by you. A “Payment Partner” is a third-party payment processor, reseller, merchant of record, billing provider, fraud provider, bank, or other transaction service used for a particular purchase.

1. Our Roles

Depending on the context, we act in different privacy roles:

• Account, website, early-access, billing-support, security, and product analytics data: Live Future generally acts as the business or controller determining why and how the data is processed.
• Customer Content processed for an organization: Live Future generally acts as a service provider or processor on the organization’s instructions, while the organization acts as the business or controller.
• Self-hosted, local, connected, or third-party Boxes: the customer generally controls the infrastructure and data. We may process only the command, configuration, telemetry, content, or support data that the customer chooses to transmit through DPanel.
• Third-Party Services: each model provider, connector, host, channel, payment provider, or other third party may act under its own terms and privacy notice.

Organizations are responsible for providing legally required notices to Authorized Users, employees, contractors, customers, contacts, and other data subjects whose information they submit to the Service.

2. Information We Collect

2.1 Account and profile information

We may collect your name, email address, username, password hash, authentication identifiers, organization, role, job title, account preferences, language, country, time zone, and administrative settings.

2.2 Business and verification information

We may collect company or project name, business size, industry, website, intended use, residency or location information, and verification status. Payment Partners or identity-verification providers may collect identity documents and proof-of-address information directly under their own notices. We may receive limited verification results, status, and related compliance information.

2.3 Payment and transaction information

Payment-card and billing information may be collected directly by the Payment Partner identified at checkout. Depending on that partner’s role, we may receive transaction identifiers, customer identifiers, billing email, country, tax status, product, plan, price, currency, payment status, subscription status, refunds, disputes, chargebacks, and invoices. We generally do not receive or store complete payment-card numbers when a Payment Partner collects them directly.

2.4 Customer Content

Depending on your use and settings, we may process prompts, instructions, messages, chat content, files, documents, images, screenshots, audio, voice recordings or transcripts, source references, code, outputs, workflows, tasks, approvals, logs, channel messages, and generated artifacts.

Do not submit sensitive or regulated data unless you are authorized to do so and the Service has been expressly configured and contractually approved for that data.

2.5 Box, connector, and integration information

We may process Box identifiers, host information, runtime type, system configuration, resource and health telemetry, network metadata, installed components, permissions, task status, logs, error reports, and action results. When you connect a third-party service, we may receive account identifiers, scopes, tokens or encrypted credentials, channel or workspace metadata, and content necessary to provide the requested integration.

2.6 Usage, metering, device, and log information

We collect information about features used, model and provider selections, token or metering data, Usage Unit consumption, requests, response times, retries, errors, IP address, browser, device, operating system, referring page, session identifiers, cookie identifiers, security events, audit events, and approximate location derived from IP address.

2.7 Communications, support, and feedback

We collect information you provide in support requests, early-access applications, private issue reports, surveys, demos, interviews, community submissions, referrals, and other communications.

2.8 Public and community information

If you publish a workflow, template, profile, comment, demonstration, or other Community Material, the information you choose to publish may be visible to other users or the public and may be copied or redistributed by them.

3. Sources of Information

We collect information directly from you and Authorized Users; automatically from devices and use of the Service; from organizations that administer your account; from Payment Partners, authentication providers, model providers, hosts, connectors, and communication platforms; from referral or early-access sources; and from public or lawful business sources where needed for security, verification, support, or account administration.

4. How We Use Information

We use personal information to:

• create, authenticate, administer, and secure accounts and organizations;
• provide workspaces, Boxes, workflows, agents, models, channels, approvals, files, and support;
• route prompts and data to the models, tools, hosts, and connectors selected by the customer;
• meter usage, maintain balances and allowances, prevent duplicate or abusive grants, and reconcile transactions;
• process subscriptions, refunds, disputes, taxes, and payment support with applicable Payment Partners;
• monitor reliability, debug errors, investigate incidents, prevent fraud, and enforce policies;
• personalize settings, remember preferences, and improve usability;
• communicate about service, security, billing, legal, product, and early-access matters;
• analyze aggregate product performance and develop or improve features;
• comply with law, sanctions, legal process, and provider requirements; and
• protect users, third parties, Live Future, and the public.

We do not use private Customer Content to train our own general-purpose foundation model unless the customer separately opts in through a clear setting or written agreement. We may use de-identified or aggregated information that cannot reasonably identify a person or organization to operate, analyze, secure, and improve the Service.

5. Legal Bases Where Applicable

Where laws such as the GDPR require a legal basis, we rely on one or more of:

• contract: to provide the Service and manage the account;
• legitimate interests: to secure, support, improve, and administer the Service; prevent fraud; and conduct ordinary business operations, balanced against applicable rights;
• consent: where you make an optional choice, such as certain cookies, recordings, marketing, or optional data use;
• legal obligation: to comply with tax, accounting, sanctions, fraud-prevention, law-enforcement, and other legal requirements; and
• vital interests or public interest: only where applicable and legally permitted.

6. AI Models and Third-Party Processing

When you select or use an AI model, agent, connector, channel, tool, or host, the Service may transmit Customer Content and metadata to the applicable provider. Provider practices vary. A provider may retain prompts or outputs, use data for abuse monitoring, apply region restrictions, or offer different training and retention choices.

We display or link to provider information where practical, but we do not control and cannot guarantee the accuracy or continued availability of provider terms, settings, or representations. The organization administrator is responsible for selecting providers and configuring options suitable for the organization’s privacy, security, contractual, and regulatory requirements.

7. Boxes and Data Location

7.1 DPanel-managed Boxes

For a managed Box, data may be processed by us and the hosting providers used to operate that Box. The applicable plan, settings, and documentation may describe available region, logging, and retention choices.

7.2 Customer-controlled Boxes

For a Box running in a Customer Environment, data may be stored, processed, backed up, logged, transmitted, or deleted according to the customer’s configuration and the practices of the selected host and software. DPanel may not possess or control all data stored there.

Disconnecting a Box or deleting a DPanel account does not delete data from a Customer Environment. The customer is responsible for access requests, deletion, retention, incident response, backups, security, and notices concerning data it controls in that environment.

8. How We Disclose Information

We may disclose information to:

• Payment, reseller, merchant-of-record, tax, fraud, banking, and verification providers for transactions, subscriptions, refunds, taxes, identity or business verification, and chargebacks;
• AI model and agent providers selected or enabled by the customer;
• cloud, hosting, storage, content-delivery, database, authentication, monitoring, analytics, email, support, and security providers that help operate the Service;
• connectors and communication platforms when the customer requests an integration or action;
• organization administrators and Authorized Users according to account roles and settings;
• professional advisers, auditors, insurers, financing sources, and corporate transaction participants subject to appropriate obligations;
• authorities or third parties where required by law or reasonably necessary to protect rights, safety, systems, users, or the public; and
• a successor or acquirer in a merger, financing, reorganization, bankruptcy, or sale of assets.

We do not sell personal information for money. We do not use Customer Content for third-party targeted advertising. If our practices change in a way that constitutes a sale or sharing under applicable law, we will provide required notice and choices before the change applies.

9. Cookies and Similar Technologies

We and our service providers may use strictly necessary cookies and local storage for authentication, security, preferences, session management, and core functionality. With consent where required, we may use analytics technologies to understand website and product use.

You can control cookies through browser settings and any consent tool we provide. Blocking necessary technologies may prevent the Service from functioning. We do not currently respond to browser “Do Not Track” signals because there is no uniform standard, but we honor legally required opt-out preference signals where applicable to our processing.

10. Communications

We may send transactional messages about accounts, security, billing, legal terms, support, and service operation. You cannot opt out of essential service messages while maintaining an account.

We may send marketing communications where permitted. You can unsubscribe using the link in the message or by contacting us. Unsubscribing from marketing does not stop transactional messages.

If you use DPanel to send email, SMS, messaging-app, social-media, or other communications, you are responsible for lawful consent, sender identification, opt-out handling, suppression lists, platform rules, and applicable anti-spam and telemarketing laws.

11. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security and audit records, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect rights.

Retention depends on the data and context. Account and Customer Content may be retained while an account is active and for a limited period after deletion to allow recovery, prevent fraud, or complete deletion from backups. Transaction, tax, legal, security, and dispute records may be retained longer where required. Data in a Customer Environment is controlled by the customer and is not deleted by deleting the DPanel account.

You should export and delete information according to your own retention requirements. We may describe additional retention controls or periods in product settings, documentation, an order form, or a Data Processing Addendum.

12. Security

We use administrative, technical, and organizational safeguards designed to protect information, such as access controls, authentication, encryption in transit where appropriate, logging, monitoring, and vendor management. No system is completely secure, and we cannot guarantee that information will never be accessed, altered, lost, or disclosed.

You are responsible for security in Customer Environments, least-privilege permissions, secure credentials, updates, backups, and careful review of agent actions. Notify us promptly of suspected incidents affecting the Service.

13. International Transfers

We are a United States company and use providers in multiple countries. Information may be processed in the United States, Israel, the European Economic Area, and other locations where we or our providers operate. Where required, we use recognized transfer mechanisms and contractual safeguards. Customers needing specific data-localization or transfer terms must obtain our written agreement before submitting restricted data.

14. Your Choices and Privacy Rights

Depending on your location and relationship with us, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about disclosures. You may also have rights to opt out of sale, sharing, targeted advertising, or certain profiling, and to appeal a denied request.

Submit requests to [email protected]. We may verify identity and authority before acting. If Live Future processes information solely on behalf of an organization, we may direct you to that organization and assist it as required by our agreement and law.

You may complain to a privacy or data-protection authority. You will not be discriminated against for exercising applicable rights.

15. United States State Privacy Disclosures

Where applicable state privacy laws apply, the categories of personal information we collect are described in Section 2, the purposes in Section 4, and the recipient categories in Section 8. We may collect identifiers, commercial information, internet or network activity, geolocation derived from IP, professional information, audio or visual information, inferences, and Customer Content that may contain other categories chosen by the customer.

We do not sell personal information for money and do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about individuals. We retain information as described in Section 11.

Authorized agents may submit requests where permitted. We may require proof of authority and identity. Metrics about privacy requests may be published where legally required.

16. EEA, United Kingdom, and Switzerland

Individuals in these regions may have rights under applicable data-protection law, including access, correction, erasure, restriction, portability, objection, and withdrawal of consent. Our legal bases are described in Section 5. Where we rely on legitimate interests, you may request information about the balancing assessment where required.

Live Future Inc. is the controller for data described in Section 1 unless another entity is identified. You may contact us at [email protected]. Where legally required as our operations develop, we will appoint and identify an appropriate representative or data protection contact.

17. Children

The Service is intended for users age 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

18. Third-Party Links and Services

The Service may link to or interoperate with third-party websites and services. Their privacy practices are governed by their own notices. We are not responsible for their independent processing.

19. Changes to This Policy

We may update this Policy as the Service, vendors, or laws change. We will provide notice of material changes as required. The effective date above identifies the current version.

20. Contact

Live Future Inc. Registered office: 251 Little Falls Drive, Wilmington, Delaware 19808, United States Email: [email protected]