DYALO

Privacy Policy

Effective date: October 22, 2026

This Privacy Policy explains how SATECH LLC, doing business as Satech Cloud (“SATECH,” “we”), handles information when you use Dyalo™ at dyalo.ai (the “Service”).

Our approach in one paragraph

Dyalo processes what you type, upload or record only to give you the result you asked for, then lets it go. We do not store your résumés, job descriptions, speeches, recordings or other content on our servers after a request is complete. We keep only what we need to run your account, your credit and your payments, and to keep the Service secure.

1. Information we collect

What Why How long
Your email address To create your account and send sign-in links While your account is open
If you sign in with Google, GitHub or LinkedIn: your verified email address and that service’s account ID. We don’t receive your password or your contacts, and we don’t post anything on your behalf. To create your account, sign you in and link the accounts you choose Until you unlink that service or delete your account
How you found Dyalo: a short campaign tag in the link you opened (for example ?src=facebook), if there was one To learn which of our posts and ads bring people to Dyalo. It is read from the link only; we don’t use a cookie or third-party tracking for it. While your account is open
Account and credit records (balance, purchases, credit used per feature, dates). With each use we also note which AI provider handled it, the language Dyalo was set to and your country (from your connection, not your exact location). To run your credit, show your activity and handle refunds, and to understand which features, languages and countries use Dyalo While your account is open, and payment records for up to 7 years for tax and accounting
Payment records from Stripe (amount, pack, Stripe payment ID) To add credit and handle refunds. We never receive your full card number. Up to 7 years
Two-step sign-in data (an encrypted secret and hashed recovery codes) To protect your account Until you turn two-step sign-in off
A session cookie To keep you signed in. It’s strictly necessary; we don’t use advertising cookies. Up to 30 days
Fraud-prevention signals: keyed hashes of your email and your IP address To limit free starter credit to one per person and to stop abuse. Hashes can’t be turned back into the original value without our secret key. Up to 24 months
Device signals, outside the EU, EEA, UK and Switzerland only: a random device ID stored in your browser, a keyed hash of a browser fingerprint (technical settings such as screen size, time zone and graphics), and a cookie that marks a browser that already received free credit To limit free starter credit to one per device. We don’t use these signals to track you across other sites, and we don’t use them at all for visitors in the EU, EEA, UK or Switzerland. Up to 24 months
Rate-limit counters based on hashed IP addresses To protect the Service from overload and abuse About 2 days
Basic technical logs (time, address requested, error codes) Security and troubleshooting. Logs do not include your content. Up to 30 days

Information stored in your browser. Your settings, drafts and recent work (such as your last job description or script) are saved in your own browser’s local storage so they’re there next time. They stay on your device; we don’t receive them unless you use a feature that needs them.

2. Your content and AI providers

When you use an AI feature, the content needed for that request is sent securely to one of the providers below, the result is returned to you, and Dyalo does not keep a copy:

We use these providers’ paid business API services. Under their API terms as of the effective date, OpenAI, Anthropic, Google (paid Gemini API), Groq and DeepInfra do not use API data to train their models. ElevenLabs’ terms allow it to use content to improve its services, so only the text being read aloud is sent to it, and only when you pick a Studio voice. Providers may keep data for a limited period for abuse and security monitoring.

How Dyalo uses Google user data

If you choose “Sign in with Google”, Dyalo requests only the openid and email permissions. This is exactly what Dyalo does with that information:

Dyalo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

GitHub and LinkedIn sign-in work the same way: Dyalo receives only your email address and account ID and uses them only to create your account and sign you in.

AI-generated content. Results created by AI in Dyalo, and AI voices, are labeled as AI-generated. AI can make mistakes; review every result before you use it.

3. Service providers

We also use Cloudflare (hosting, database, bot protection and security), Stripe (payments) and an Resend (sign-in and account emails). They process information on our behalf under their own security and privacy commitments.

4. How we don’t use your information

We don’t sell or rent your personal information, we don’t share it for cross-context behavioral advertising, and we don’t use your content to train AI models.

5. Security

Connections are encrypted in transit (HTTPS). Data is stored on Cloudflare’s infrastructure with encryption at rest. Sign-in links and session tokens are stored only as hashes, two-step sign-in secrets are encrypted, and free-credit checks use keyed hashes. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects you.

6. Your choices and rights

You can delete your account yourself at any time: open your account in Dyalo, choose Delete my account and type DELETE to confirm. Deleting your account removes your email, sign-in data and linked Google, GitHub or LinkedIn accounts, signs you out everywhere, and ends any remaining credit. You can also ask us to access, correct, export or delete your personal information by emailing support@dyalo.ai from your account email. Depending on where you live (for example California, other U.S. states, the EU or the UK), you may have additional rights, including the right to object to or restrict processing and to complain to a data protection authority. We will not discriminate against you for exercising your rights. Payment and credit records we must keep for tax and legal reasons are kept after an account is deleted, linked only to a removed account number, not to your email. Free-credit hashes are kept for up to 24 months so the free credit can’t be claimed again.

Job board

When you save, check or apply to a job on the Dyalo Job board while signed in, Dyalo keeps only the job's number and your progress (for example "saved" or "applied") in your account, so your list follows you to any device. Employers never see your practice, recordings or scores, and never see which jobs you viewed or prepared for. When you apply on the employer's own site, you do so under the employer's privacy policy. When a job offers Apply with Dyalo and you choose it, Dyalo emails the employer only what you review and agree to send (your name, email, phone, résumé and cover letter); from then on the employer handles it under its own privacy policy. Dyalo keeps only a record that you applied (the job, your account and the date), not a copy of the résumé or letter. Your apply kit details (phone, salary expectation and similar) are stored only in your browser. The "Apply" link tells the employer only that the visit came from Dyalo. Employers who post jobs give us their company email and the job details, which we review before publishing.

7. Children

Dyalo is not directed to children under 13, and we do not knowingly collect their personal information. Users aged 13 to 17 need a parent’s or guardian’s permission. If you believe a child under 13 has given us information, contact us and we will delete it.

8. International users

Dyalo is operated from the United States. Information may be processed in the United States and other countries where our providers operate.

9. Changes

We’ll post any changes here and update the effective date. If a change is material, we’ll tell you in the app or by email.

10. Contact

SATECH LLC, doing business as Satech Cloud · 426 Westport Avenue #1145, Norwalk, CT 06851 · support@dyalo.ai · Telegram @DyaloSupport