Privacy policy

Last updated October 13, 2026

dazl is an AI front desk for home-service businesses. This policy explains what we collect, why, and what we never do. It covers two groups of people: business owners who use dazl, and their customers who chat with a business through dazl.

What we collect

• Business owners: your Google account name and email (to sign you in), the public pages of the website you give us (to learn your services, hours and service area), the corrections you type, your working hours and job length, and billing status from Stripe. We never see or store your card number.
• Google Calendar and Gmail access: if you connect Google, we read free/busy times on the calendar you choose, create and cancel appointment events on it, and send appointment emails from your Gmail address. We do not read your email or the contents of other calendar events. Your Google token is stored encrypted.
• Your customers: the messages they send, and the details they give to book a job — name, phone, email, address or postal code, job description, and optional photos. This is what a receptionist would write down.

How it is used

• To answer your customers using only the facts about your business, book appointments on your calendar, and email confirmations and lead alerts.
• Conversations are processed by an AI model that dazl runs on its own hardware. Customer messages are not sent to third-party AI companies and are not used to train any model.
• We keep a log of every message so you can review and take over any conversation. Our system logs record timings and sizes, not message content.

Anonymous website preview

You can use the website preview without signing in. dazl fetches the public pages of the website address you submit and processes their text to derive a business name, service, location and summary. When an AI model is available, dazl also sends that page text to the AI model that runs dazl's agents (Anthropic's Claude), only to describe what the business sells, who buys it, where, and the public buying signals dazl would look for. No prospect is looked up or shown. No account is created, no Google account is connected, and the preview cannot send a message, make a booking or take a payment.

We do not store the website address, fetched page, analysis or draft. They exist only while the request is processed and in the current response in your browser; closing or replacing that page ends that browser-only preview session. We do not set an account or preview-session cookie for it. To prevent abuse, we count up to five previews per hour by the IP address or IPv6 network supplied with the request. That rate-limit counter can remain for up to two hours and is deleted during the next cleanup; it is not joined to an account or used for advertising.

Sharing

We do not sell personal information and we do not use it for advertising. A customer's details are shared only with the business they contacted. Service providers we rely on: Cloudflare (hosting and database), Google (calendar and email, only for businesses that connect it), Stripe (subscription billing for business owners).

Isolation and security

Every business's data is kept separate and is only visible to that business's signed-in owner. Connections are encrypted in transit; Google tokens are encrypted at rest. Access to the model server requires a secret key.

AI assistants and connectors

dazl offers a connector for AI assistants such as Muse, ChatGPT and Claude (dazl Connectors). It reads your own dazl account, so it needs a token that you make on that page and give to your assistant. dazl keeps a hash of the token, not the token; you can replace or remove it at any time, and closing your account deletes it. When you ask your assistant to use the connector, the assistant sends dazl only what the tool needs: how many leads, or the id of one lead. dazl uses it to answer that one request and does not store it.

• What comes back: the leads in your own dazl account only: the name, why it appeared, its score, a link to the public page that shows it and how to reach them, and drafts you ask for. A token never gives access to another account.
• Nothing is sent for you: the connector writes drafts; it never queues or sends a message. You send them yourself.
• Abuse protection: to limit calls per network address, dazl keeps a counter for about 20 minutes under a keyed hash of the address (for IPv6, its /64 network), made with a secret key that changes every day; expired counters are deleted at the next cleanup. The address itself is not stored.
• AI model and no training: a draft is written by the AI model that runs your dazl agent, from your product description and the lead, and counts against your account's agent budget. Listing leads calls no AI model. Your requests are not used to train any model.
• Your assistant's own provider (for example Meta for Muse, OpenAI for ChatGPT) handles your conversation under its own privacy policy.

Messages to prospects

When a business uses dazl to write to prospects, dazl uses only contact details the prospect's business published itself, and keeps the page each one came from. Which rules apply depends on the country of the person receiving the message, not on where dazl or the business is. For example:

• Canada: Canada's Anti-Spam Legislation (CASL).
• United States: the CAN-SPAM Act.
• European Union and United Kingdom: the GDPR (and the UK GDPR) and the ePrivacy rules, including the UK's Privacy and Electronic Communications Regulations (PECR).
• India: the Digital Personal Data Protection Act, 2023 (DPDP Act) and TRAI's rules on commercial communications.
• Anywhere else: the laws of the country the person you write to is in.

Every message dazl sends names the business sending it, gives its postal address and says how to stop. A stop request, an unsubscribe or a bounce is honoured at send time and is never undone. People who received a message can ask the business, or us, what is held about them and to delete it.

Retention and your choices

Business owners can delete conversations and close their account at any time; we delete account data within 30 days of closure, except billing records we must keep by law. Customers can ask the business they contacted, or us, to access or delete their information.

Contact

Questions or requests: gagan@getfoolish.com.