PRIVACY
Effective date: July 20, 2026. Last updated: July 20, 2026. Version 1.0.
Duet AI, Inc. ("Duet," "we," "us") provides an AI-powered marketing workspace that combines a company knowledge system (the "Marketing Brain"), AI agents and expert Digital Twins, and human-in-the-loop services. This policy explains what we collect, how we use it, and the choices you have. It applies to letsduet.ai, the Duet platform, and our related services.
Duet is built for businesses. If you use Duet through an account created by your employer or another organization, that organization controls its workspace and its Brain, and its agreement with us governs that data. This policy describes our practices; where it conflicts with a signed customer agreement, the agreement controls.
Account and contact information. Name, work email, company, role, and login credentials when you create an account, request a demo, or apply to our expert network.
Customer Content. The material you and your organization put into Duet: documents, brand and strategy materials, messaging, campaign and performance data, connected-tool data you authorize (for example CRM or marketing automation data via integrations), prompts, and the outputs generated for you. Your organization's Brain is Customer Content.
Expert Content. If you are an expert in our network: the playbooks, frameworks, materials, and recorded judgment you contribute to create your Digital Twin, along with your name, biography, and likeness as licensed in your Expert Agreement.
Usage and device information. Log data, feature usage, approximate location from IP address, browser and device type, and cookies or similar technologies as described in Section 9.
Communications. Messages you send us, support requests, and demo or application form submissions.
We do not knowingly collect information from anyone under 18. Duet is not directed to children.
We use information to provide and secure the services; to operate your Brain, Twins, agents, and workflows; to route work to human operators you engage; to provide support; to bill; to communicate with you about the services; to analyze usage in aggregate so we can improve reliability and design; and to comply with law.
We use Customer Content only to provide the services to you. Specifically:
Customer Content is processed by AI models to generate the outputs, recommendations, and signals you request.
We do not use your Customer Content to train foundation models, and we do not use one customer's Content to build, train, or improve another customer's outputs or any other customer's Twins. Your Brain makes your workspace smarter. It is not pooled.
Our foundation model providers process Customer Content solely to generate responses for you, under agreements that prohibit them from training on it.
We may use de-identified, aggregated usage data (never the substance of your Content) to understand how the product is used and to improve it.
Expert Content is used to build, operate, and improve that expert's own Twin as set out in their Expert Agreement, and is not used to train the Twins of other experts.
Duet is an AI product with people in it, and we believe you should know exactly when a human can see your data:
AI processing. Your prompts and relevant Brain context are sent to our AI model subprocessors to generate outputs. See Section 5 for who they are.
Human-in-the-loop services. If your organization engages a HITL operator, agency, or Duet's own services team, those people access the parts of your workspace needed for the engagement. Every operator in our network is bound by confidentiality obligations at least as protective as this policy, and their access is limited to workspaces that engaged them and is logged.
Duet personnel. Our team accesses Customer Content only to provide support you request, to investigate abuse or security incidents, or as required by law. Access is limited and logged.
We do not have humans reviewing your Content to label training data.
Outputs are generated by AI and, where applicable, refined by humans you engage. They may be inaccurate or incomplete, and they are provided for your review and judgment, not as professional advice. You are responsible for reviewing outputs before relying on or publishing them.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We share information only with:
(a) Subprocessors that help us run the service, each bound by contract to protect it. Our current subprocessors are Anthropic (Claude models), OpenAI, Amazon Web Services (hosting), and Supabase (database infrastructure). An updated list is available any time by emailing scott@letsduet.ai.
(b) HITL operators and experts your organization chooses to engage, as described in Section 3.
(c) Integrations you connect, which operate under their own terms once you authorize them.
(d) Professional advisors, and parties to a corporate transaction such as a financing or acquisition, under confidentiality.
(e) Authorities where required by law, in which case we will notify you unless legally prohibited.
We retain Customer Content while your organization's account is active. When an account is closed, or upon a verified deletion request from the account owner, we delete Customer Content within 365 days, including backups, which expire on a fixed schedule within that window, except for records we must keep for legal or billing purposes. Experts may terminate their Twin as provided in their Expert Agreement, after which the Twin is removed from the marketplace and the Expert Content is deleted on the same schedule.
We use encryption in transit and at rest, logical isolation between customer workspaces, role-based access controls, and logging of access to Customer Content. No system is perfectly secure, but our practices are described in more detail at letsduet.ai/security, and we will notify affected customers of any breach as required by law.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to complain to a supervisory authority. Because organizations control their workspaces, we may direct individual requests about workspace data to the account owner. To exercise rights, contact scott@letsduet.ai. We honor requests as required by applicable law, including the GDPR and the CCPA/CPRA, and we do not discriminate against you for exercising them. For CCPA purposes, we do not sell or share personal information as those terms are defined there. If you are in the EEA, UK, or Switzerland, we transfer data internationally under appropriate safeguards such as Standard Contractual Clauses. A Data Processing Agreement is available to business customers on request.
We use essential cookies to run the site and service, and privacy-respecting analytics to understand usage. You can control cookies through your browser settings. We do not use advertising cookies.
We will post any changes here and update the date and version above. Material changes affecting Customer Content will be notified to account owners in advance. Questions or requests: scott@letsduet.ai, Duet AI, Inc.