Privacy Policy

The operator of Dice is responsible for the personal information described in this Privacy Policy (“Dice,” “we,” “us,”or “our”). This Policy applies to our website, application, support, transactional communications, and related services.

It does not govern third-party websites, mailbox providers, payment pages, or services that you access through links or integrations. Those providers apply their own privacy policies. When a customer uses Dice to manage its own outreach, that customer is independently responsible for the contacts, lawful basis, messages, and compliance decisions it controls.

• Account and identity information: name, email address, authentication identifiers, profile details, workspace membership, and account preferences.
• Workspace and customer content: company and website details, target topics, competitors, campaigns, prompts, instructions, notes, selections, email drafts, revisions, and other content you submit.
• Discovery and research information: URLs, page content and metadata, search results, extracted company or topic details, classifications, opportunity scores, backlinks, public author or publisher details, and professional contact information.
• Mailbox and communications information: connected mailbox address, provider, encrypted credentials or OAuth tokens, sending settings, outbound messages, delivery identifiers, thread metadata, replies relevant to managed campaigns, support requests, and notification preferences.
• Payment and subscription information: plan, order and subscription status, transaction identifiers, billing events, and limited billing details supplied by our payment processor. We do not receive or store full payment-card numbers.
• Technical and usage information: IP address, browser and device information, timestamps, requested routes, security events, error logs, job status, feature activity, and diagnostic information.

Please do not submit government identifiers, financial credentials, health information, precise location, or other sensitive personal information unless we specifically request it and you have a lawful reason to provide it.

We obtain information:

• directly from you and members of your workspace;
• automatically when you use the website or application;
• from services you choose to connect, such as Google, Microsoft, or SMTP/IMAP mailbox providers;
• from payment and infrastructure providers;
• from publicly accessible websites and pages; and
• from business-information providers such as Hunter and web research providers such as Firecrawl.

We use information to:

• create and secure accounts and workspaces;
• provide web discovery, crawling, extraction, enrichment, scoring, drafting, outreach, reply handling, and monitoring features;
• process payments, administer plans, and send transactional notices;
• authenticate integrations and carry out actions you request;
• operate durable jobs, queues, retries, and progress updates;
• personalize and improve product functionality and reliability;
• provide support and respond to requests;
• detect abuse, protect users, enforce our Terms, and prevent security incidents; and
• comply with legal obligations and establish or defend legal claims.

We do not use customer content to build or train our own general-purpose AI models. We may use aggregated or de-identified information to understand and improve the service, provided it cannot reasonably be used to identify a person.

Where laws such as the UK GDPR or EU GDPR require a legal basis, we rely on one or more of the following:

• Contract: processing needed to create your account, provide requested features, process purchases, and support the service.
• Legitimate interests: operating and securing the service, responding to support, improving functionality, preventing misuse, and providing relevant business research, balanced against the rights of affected people.
• Consent: where we specifically ask for consent, including certain optional integrations or communications. You may withdraw consent, although that does not affect prior lawful processing.
• Legal obligation and claims: tax, accounting, regulatory, law-enforcement, dispute, and compliance requirements.

Customers remain responsible for selecting an appropriate legal basis for their own prospecting and outreach activity.

At a customer’s direction, Dice searches and analyzes public web pages and may display professional details such as a person’s name, role, employer, business email address, and the public source where that information appeared. This information may come from the open web or a business-information provider.

We process this information to help customers evaluate editorial relevance and identify an appropriate professional contact. We do not claim that public availability makes information unrestricted or grants permission to send marketing. Customers must independently assess accuracy, relevance, lawful basis, local notice requirements, and objections before use.

If your information appears in Dice research and you want to request access, correction, restriction, or deletion, contact us at "bobi@dicee.app". Please include enough detail for us to locate the record. We may verify your identity and may retain limited suppression information so removed details are not reintroduced where permitted by law.

If you connect Gmail, Microsoft, or another mailbox, we use the connection to send messages you authorize, preserve conversation threading, and identify replies relevant to campaigns. Depending on the provider, this may require send and read permissions, or SMTP and IMAP credentials.

OAuth tokens and mailbox passwords are encrypted before storage and are not returned to the browser. Provider permission labels may be broader than the actions used by Dice; we do not use mailbox access to delete messages or inspect unrelated conversations. We process message content only as needed for sending, reply detection, classification, drafting, display, troubleshooting, and security.

You can disconnect a mailbox in the application and may also revoke OAuth access from the provider. Disconnecting stops new access but does not necessarily delete campaign records or messages already stored; you may request deletion as described below.

We send selected page content, company context, contact context, prompts, message text, and relevant replies to OpenAI’s API to provide classification, extraction, scoring support, personalization, and drafting. We aim to send only the information needed for the requested task.

AI outputs and related context may be stored in your workspace so you can inspect, revise, copy, or reuse them. OpenAI processes API data under its own business data and retention controls. You should not place sensitive or unnecessary personal information in prompts or drafts.

We disclose information only as reasonably necessary to:

• Infrastructure and hosting providers, including Supabase and Vercel, for authentication, databases, application hosting, logs, and delivery.
• Workflow and product providers, including Trigger.dev, Firecrawl, Hunter, OpenAI, and Resend, for jobs, web research, professional contact enrichment, AI features, and transactional email.
• Payment providers, including Polar, for checkout, billing, tax-related processing, subscriptions, and fraud prevention.
• Connected services, including Google, Microsoft, and your selected mailbox provider, when you direct us to connect, send, or retrieve campaign-related information.
• Your organization, including authorized workspace members and administrators.
• Professional advisers and authorities where reasonably necessary for security, compliance, legal claims, or a valid legal request.
• Transaction parties in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

Providers may process information in countries different from yours and may change as the service evolves. We require them to handle information for the services they provide to us and subject to applicable contractual obligations.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. We do not use third-party advertising cookies to build profiles across unrelated websites.

Disclosures to service providers that process information on our behalf are not intended as sales. If our practices change, we will update this Policy and provide any legally required opt-out method before the change applies.

We keep information for as long as reasonably needed to provide the service, maintain your account and workspace, complete jobs, resolve disputes, enforce agreements, protect security, and meet legal, tax, accounting, and audit obligations. Retention depends on the data and why it is processed.

• Account, workspace, research, campaign, and draft data generally remain while the account is active.
• Mailbox credentials remain until the mailbox is disconnected, credentials are replaced, or the account is deleted, subject to backup and legal retention.
• Payment and transaction records may be kept for legally required accounting, tax, fraud, and dispute periods.
• Logs, security records, backups, and job diagnostics are retained for limited operational periods and then deleted or de-identified according to our schedules.
• Suppression records may be retained to respect opt-outs, objections, or deletion requests.

Deletion from active systems may not immediately remove information from encrypted backups. Backup copies are isolated and expire through the normal backup lifecycle unless law requires longer retention.

We and our providers may process information in the United States and other countries that may have different data-protection laws. Where required, we use recognized transfer mechanisms, such as adequacy decisions, standard contractual clauses, or other lawful safeguards. You may contact us for more information about safeguards relevant to your information.

We use administrative, technical, and organizational measures designed to protect information. These include access controls, workspace-level database policies, encrypted mailbox credentials, transport encryption, restricted server-side secrets, and monitoring or logging intended to detect failures and misuse.

No method of storage or transmission is completely secure. You are responsible for protecting your login, mailbox, devices, and workspace access. Contact us promptly if you believe your account or information has been compromised.

Depending on where you live and subject to legal exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; restrict or object to processing; withdraw consent; opt out of certain sales or sharing; limit certain uses of sensitive information; and receive equal service without unlawful discrimination for exercising a privacy right.

You may update some account information in the service, disconnect integrations, cancel recurring billing, and use unsubscribe controls in our optional marketing messages. Transactional and security notices may continue while you have an account or active service relationship.

To exercise a privacy right, email "bobi@dicee.app" with the subject “Privacy request.” Describe your request and the account, email address, URL, or record involved. We may ask for information needed to verify identity and authority. An authorized agent may submit a request where permitted by law. You may also have the right to appeal our response or complain to your local data-protection authority.

Dice is a business service and is not directed to children. You must be at least 18 to create an account. We do not knowingly collect personal information directly from children. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.

We may update this Policy to reflect changes in the product, providers, or law. We will post the revised version here and update the date above. If a change is material, we will provide additional notice through the service or by email where required.

For privacy questions, rights requests, or concerns about professional contact information displayed by Dice, email "bobi@dicee.app".