Privacy Policy

This policy explains what data the duply website (the “Site”) collects and how it is used. We deliberately collect very little.

1. Who we are

The Site is operated by duply (“we”, “us”), based in Sweden. For any privacy question or to exercise your rights, contact us at privacy@duply.ai. We are the data controller for the processing described here.

2. What we collect

The Site has no user accounts and takes no payments, so we do not collect names, passwords, or payment details. We process:

• Technical data — our hosting provider (Vercel) automatically processes standard request data such as IP address, browser type, and pages requested, to serve the Site securely.
• Usage & device data, with your consent — if you accept cookies, our analytics and marketing tools collect usage, device, and approximate-location data. See the Cookie Policy.

3. Legal bases (GDPR)

• Consent — for analytics and marketing cookies. You can withdraw it at any time via “Cookie settings” in the footer.
• Legitimate interests — for operating, securing, and improving the Site.

4. Who we share data with

We use a small set of processors. We do not sell your personal data.

• Vercel — website hosting (USA).
• Supabase — database for the design-system content we publish (EU).
• Google Analytics — usage analytics (USA), only with your consent.
• Meta, TikTok, LinkedIn, X — advertising and measurement pixels (USA), only with your consent and only for the tools we have actually enabled.

5. International transfers

Some providers are outside the EEA (for example, the USA). Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Retention

Server logs are kept only as long as needed for security and operations. Analytics and marketing data are retained according to each provider’s settings.

7. Your rights

Under the GDPR you have the right to access, correct, erase, restrict, or object to the processing of your personal data, and to data portability. You can withdraw consent at any time. To exercise these rights, contact privacy@duply.ai. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

8. Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes

We may update this policy. The date above reflects the latest version.