Privacy Policy

1. Who we are

Doris AI is powered by The Defence Network Ltd, registered at 50 St Mary's Crescent, London, NW4 4LH, United Kingdom. We provide an AI-powered admin assistant for tradespeople.

For any privacy questions or data-protection requests, contact us at hello@helpmedoris.com.

2. What data we collect

• Account information: name, email address, business name, VAT number, logo and brand preferences when you register or update your settings.
• Business records you create: customer contact details, quotes, invoices, job notes, photos, documents and follow-up records.
• Payment information: billing details and transaction records are handled by Stripe. We do not store full card numbers on our systems.
• Usage and technical data: log data, device/browser information, and product analytics to help us improve Doris and keep the service secure.

3. How we use your data and our lawful basis

We process personal data only where we have a valid legal basis under the UK GDPR:

• Performance of a contract: to provide your account, generate quotes and invoices, store your records, and process subscription payments.
• Legitimate interests: to keep Doris secure, prevent fraud, fix bugs, and understand how the product is used so we can improve it.
• Consent: where required, for analytics and marketing cookies, and for any marketing emails we send. You can withdraw consent at any time.
• Legal obligation: to comply with applicable tax, accounting or law-enforcement requirements.

4. Cookies and analytics

Doris uses cookies and similar technologies to keep you signed in, remember your preferences (such as sidebar state), and to collect anonymised usage analytics and marketing insights.

Essential cookies are always on because they are required for the app to function. For analytics and marketing cookies, we rely on your consent and you can manage or withdraw that consent at any time by contacting us at hello@helpmedoris.com.

5. Who we share data with

We do not sell your data or your customers' data. We only share information with trusted service providers who help us run Doris:

• Stripe — for secure payment processing and billing management.
• Lovable Cloud — for authentication, database, storage and hosting infrastructure.

All providers are bound by appropriate data-processing terms and technical safeguards.

6. International data transfers

Your data is primarily stored and processed within the United Kingdom and the European Economic Area. Where our service providers operate globally, we ensure appropriate safeguards are in place to protect your personal data in line with UK GDPR requirements.

7. Data retention

We keep your personal data for as long as your account is active and for a short period afterwards so we can resolve disputes, enforce our terms, comply with legal obligations, and support billing queries.

When you delete your account, we erase or anonymise your personal data within 30 days, unless a longer retention period is required by law.

8. Data security

We protect your data using industry-standard measures including encryption in transit (TLS), encrypted storage, strict access controls, and secure authentication. Each Doris account can only access its own records.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (the "right to be forgotten").
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent for processing based on consent.

You can update or delete much of your data from your Settings page. For other requests, email hello@helpmedoris.com and we will respond within one month.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app, and the latest version will always be available on this page.

11. Complaints

If you believe we have mishandled your personal data, please contact us first so we can resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.