Privacy Policy.

Doza Assist is local-first by design. Your footage, transcripts, and projects stay on your machine. We collect only what we need to run the website and process your purchase.

01Who We Are

This policy is published by Doza Visuals LLC ("Doza Visuals," "we," "us," or "our"), a Massachusetts limited liability company. It covers personal data we collect through doza.ai and the Doza Assist desktop application (collectively, the "Service").

For privacy-related questions or requests, email [email protected].

02What the App Does Not Collect

Because this is the most important thing to understand about Doza Assist, we put it first.

• Unless a Studio editor publishes a share link (see Share below), the app does not upload your video, audio, transcripts, or project files to any Doza Visuals server
• The app does not send your prompts, AI conversations, or story outputs back to us
• The app does not run analytics on how you use it, what files you open, or what you ask the assistant
• The app works offline. Turn off your network connection and it still transcribes, analyzes, and exports

Share (Studio only). Share is off until a Studio editor chooses to publish a link. When they do, the app sends a compressed audio track, the transcript, and the analysis, clips and documents for that project to share.doza.ai. Video never uploads. Expiring a link deletes the published data and collaborators’ contributions from the server. Perpetual licenses cannot publish.

The only network activity the app initiates by default is a periodic license check and a check of the update feed at appcast.doza.ai. The license check confirms your purchase is valid. That request transmits your license key, a hashed machine ID and your Mac’s name. Without a key, the Studio free trial sends the same machine ID and Mac name to get its share-link token. It does not include identifying information about your projects or content.

03Optional: Bring Your Own AI Provider

Doza Assist is local-first by default. Transcription, AI analysis, and story generation run on your Mac using the bundled local model stack. No content is sent to any remote AI service unless you explicitly enable it.

Some features may let you connect a third-party AI provider (for example, OpenAI, Anthropic, Google, or another service) using an API key you supply. These bring-your-own-key (BYOK) features are off by default and you control whether to enable them in the app's settings.

Your API keys are stored locally on your Mac in the macOS Keychain. They are not transmitted to Doza Visuals, and we never see your prompts, the provider's responses, or any content you exchange with them.

AI assistant access (the Doza Assist connector for Claude and other assistants). Doza Assist 1.1 and later can open individual projects to an AI assistant you already use (Claude Desktop, Claude Code, Codex, Cursor and VS Code, or any other MCP client) through a connector that runs entirely on your Mac and talks only to the Doza Assist app on the same machine. It is off for every project by default. When you switch a project on (project page gear menu, AI assistant access), that project's transcript text and selects become readable by the connected assistant, and the assistant can add its own selects and build a selects stringout; it cannot delete or change your clips, see your media files, see projects you have not switched on, or read your My Style profiles. Whatever the assistant reads through the connector is transmitted to and handled by that assistant's own service under its own terms and privacy policy (for Claude, Anthropic's), not ours. Doza Visuals does not receive, log, or store any of it. The connector keeps no data of its own: selects the assistant creates are saved in your local project like any other select, stringouts go to your Exports folder, and access stays on only until you switch it off in the same menu. If a project must stay entirely private, leave access off.

04What We Collect Through the Website

Information you give us

• Email address when you contact us, sign up for product updates, or request support
• Name and any details you share in support emails or inquiry forms
• Billing information when you purchase a license. Payment card data is collected and processed by our payment processor, Paddle, and is not stored on our servers
• Questions you type into Ask Doza, the help chat on doza.ai. Unlike the Doza Assist app, this chat is not local: it runs on Anthropic's Claude in the cloud, so each message, along with the conversation so far, is sent to Anthropic to write the reply. We don't store the conversation; your browser keeps it only until you close the tab. Please don't type confidential material, client names or personal details into it

Information we collect automatically

• Site analytics: pages viewed, referring source, approximate country, device category, and browser type. We use this to understand which content is useful and where to focus improvements
• Server logs: IP address, timestamp, and request URL for the standard short retention period that comes with hosted infrastructure
• Ask Doza usage limits: to cap how many questions one visitor can ask per day, we keep a daily count under a one-way hash of your IP address and the date. The hash can't be turned back into your IP address, and we don't keep the questions themselves

We do not use social media pixels or session replay tools on doza.ai. Google Ads conversion tracking runs only with your consent (see Section 05).

05Cookies

We keep cookies to a minimum, limited to:

• Strictly necessary cookies, set by our payment processor (Paddle) on the checkout page (doza.ai/buy), where Paddle's checkout script must load for a purchase to work. That script also powers Paddle Retain (see below) on that page
• Optional analytics and conversion cookies, set only if you click "Accept" on the cookie notice, from three services:
  • Google Analytics (Google LLC): records how visitors use doza.ai (pages viewed, visit frequency, approximate location, device and browser type) in aggregate
  • Google Ads conversion tracking (Google LLC): records that a visitor who arrived from a Google search ad completed a purchase, so we can measure whether the ad worked. It passes the Paddle transaction ID to Google so one purchase is not counted twice. It does not pass your name, email, or what you bought
  • Paddle Retain (formerly ProfitWell, operated by Paddle, our payment provider): records anonymous engagement with doza.ai (pages visited, visit frequency)
  None of these scripts load, and none of these cookies are set, until you accept the cookie notice. If you decline, or do not answer, they are disabled: the scripts never load and no cookie is set. On the checkout page only, Paddle's script loads regardless because a purchase cannot work without it (see above)
• Our core website analytics are cookieless: they record anonymized, aggregate visit data without storing identifiers on your device or tracking you across sites

We do not use cookies for cross-site tracking, behavioral advertising, social media pixels, or session replay. Your cookie choice is stored in your browser's local storage (first-party, strictly necessary). You can change it at any time: manage cookie preferences. The web fonts used on doza.ai are served from our own domain, so loading a page does not share your data with third-party font providers.

06How We Use the Information

We use the personal data we collect to:

• Deliver, support, and improve the Service
• Process purchases, license keys, renewals, and refunds
• Respond to your questions, feedback, and support requests
• Send important account, billing, and product notices
• Send occasional product updates if you have opted in to receive them
• Protect against fraud, abuse, and security threats
• Meet our legal and tax obligations

07Third-Party Services We Rely On

To operate the Service, we share limited data with a small number of trusted service providers, each bound by their own terms and privacy commitments:

• Paddle (Paddle.com Market Limited) acts as the merchant of record for purchases through doza.ai. Paddle collects payment details, billing address, and tax information to process your purchase. Paddle's checkout script also includes Paddle Retain (formerly ProfitWell), which sets an engagement-analytics cookie on the checkout page and, with your consent, on the rest of doza.ai (see Section 05). Their privacy notice describes how they handle that data
• Google (Google LLC) provides Google Analytics and Google Ads conversion tracking on doza.ai, which load only with your consent (see Section 05). Google's privacy policy describes how they handle that data
• Netlify hosts the doza.ai website and processes standard server logs
• Anthropic (Anthropic, PBC) provides Claude, the AI model behind Ask Doza, the help chat on doza.ai. What you type into the chat is sent to Anthropic to generate a reply. Anthropic's privacy policy describes how they handle that data. This applies only to the website chat; the Doza Assist app never sends your content to Anthropic unless you connect your own key (see Section 03)
• Cloudflare hosts share.doza.ai (Workers, D1, R2) and receives what Share publishes (see Section 02) plus what collaborators add on a link: the name they enter, their selects, highlights and comments, when they opened it, and, for passcode links, the IP address of failed unlock attempts
• Email infrastructure providers transmit transactional messages such as receipts, license keys, and support replies

We do not sell personal data to third parties and we do not allow third parties to use your data for their own marketing.

08Legal Bases for Processing

Where the EU or UK General Data Protection Regulation applies, we process personal data on the following legal bases:

• Contract: to deliver the Service you purchased
• Legitimate interests: to operate the website, prevent fraud, and improve the Service
• Consent: for optional marketing emails and the optional Google Analytics, Google Ads conversion and Paddle Retain cookies, each withdrawable at any time
• Legal obligation: to meet tax, accounting, and other regulatory requirements

09Your Rights

Depending on where you live, you may have the following rights with respect to your personal data:

• Access a copy of the data we hold about you
• Correct inaccurate or incomplete data
• Delete data we hold about you
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent for marketing communications
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email [email protected]. We respond within 30 days. California residents have additional rights under the CCPA, including the right to opt out of the sale of personal information. We do not sell personal information.

10Data Retention

We keep personal data only as long as we need it for the purposes described above or as required by law. Order and tax records are retained for the period required by U.S. and EU tax authorities, typically seven years. Support emails are retained for two years from the last interaction. Marketing email subscriptions are retained until you unsubscribe.

11Children

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided personal data to us, please contact [email protected] and we will delete it.

12International Transfers

Doza Visuals is based in the United States. If you are located outside the U.S., your personal data may be transferred to and processed in the U.S. and in other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

13Security

We use reasonable administrative, technical, and physical safeguards to protect personal data, including encryption in transit, access controls, and least-privilege practices for the small set of systems that touch customer data. No system is perfectly secure, and we cannot guarantee absolute protection.

14Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised policy at this URL and update the "Last updated" date above. For substantial changes, we will notify subscribers by email.

15Data Controller

Doza Visuals LLC
North Easton, Massachusetts, United States
[email protected]