Privacy Policy

This policy explains what data the Duply website (the “Site”) collects and how it is used. We deliberately collect very little.

1. Who we are

The Site is operated by Duply (“we”, “us”), based in Sweden. For any privacy question or to exercise your rights, contact us at privacy@duply.ai. We are the data controller for the processing described here.

2. What we collect

The Site has no user accounts and takes no payments, so we do not collect names, passwords, or payment details. We process:

• Technical data: our hosting provider (Vercel) automatically processes standard request data such as IP address, browser type, and pages requested, to serve the Site securely.
• Usage & device data, with your consent: if you accept cookies, our analytics and marketing tools collect usage, device, and approximate-location data. See the Cookie Policy.
• Email lists, if you join one: if you join the Duply Pro waitlist, we store your email address and the design page you joined from. We also store when you agreed, the version of this policy that was live at the time, and whether you asked for emails about new designs. We store which part of the page you joined from and the offer you saw. If your link had campaign tags (utm), we store those too. We use these details to count which pages and posts bring sign-ups. We do not store your IP address or browser data with it.

3. Legal bases (GDPR)

• Consent: for analytics and marketing cookies. You can withdraw it at any time via “Cookie settings” in the footer.
• Consent: for the Duply Pro waitlist and for emails about new designs. You can withdraw it at any time through the unsubscribe link in any email, or by writing to privacy@duply.ai.
• Legitimate interests: for operating, securing, and improving the Site.

4. Who we share data with

We use a small set of processors. We do not sell your personal data.

• Vercel: website hosting (USA).
• Supabase: database for the design-system content we publish and for email list sign-ups (EU).
• Email delivery provider: sends the emails for the lists you join.
• Google Analytics: usage analytics (USA), only with your consent.
• Meta, TikTok, LinkedIn, X: advertising and measurement pixels (USA), only with your consent and only for the tools we have actually enabled.

5. International transfers

Some providers are outside the EEA (for example, the USA). Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

6. Retention

Server logs are kept only as long as needed for security and operations. Analytics and marketing data are retained according to each provider’s settings. Email list sign-ups are kept until you unsubscribe, or until 12 months after Duply Pro opens, whichever comes first.

7. Your rights

Under the GDPR you have the right to access, correct, erase, restrict, or object to the processing of your personal data, and to data portability. You can withdraw consent at any time. To exercise these rights, contact privacy@duply.ai. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

8. Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes

We may update this policy. The date above reflects the latest version.