Privacy Policy

This Privacy Policy describes how Due Dili, operated by Alex M. doing business as Due Dili, collects, uses, and shares information about you when you use our platform at myduedili.com (the "Service"). We are committed to protecting your privacy while fulfilling our mission of real estate transparency.

By using the Service, you consent to the data practices described in this Privacy Policy. Please read this policy carefully before using our Service.

1. Information We Collect

We collect information in the following ways:

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: Create and manage your account, process uploads, and deliver platform functionality.
• Process Payments: Handle subscription billing and payment confirmations through Stripe.
• AI Document Processing: Scan uploaded documents using Google Vision API to automatically redact personally identifiable information (PII) before documents are made publicly viewable.
• Send Transactional Emails: Password reset links, payment confirmations, subscription updates, and lead notifications for Pro users.
• Improve the Service: Analyze usage patterns, fix bugs, and develop new features.
• Security & Fraud Prevention: Detect and prevent unauthorized access, abuse, or fraudulent activity.
• Legal Compliance: Comply with applicable laws, regulations, and legal obligations.
• Communication: Respond to your inquiries, support requests, and feedback.

3. AI Processing & PII Redaction

A core feature of Due Dili is our AI-powered PII redaction system. When you or any user uploads a document, we process it through Google Vision API to identify and redact personally identifiable information before the document is made publicly available.

What gets redacted: Names, home addresses, Social Security Numbers, phone numbers, email addresses, dates of birth, financial account numbers, and other sensitive personal data.

How it works: Your uploaded document is sent to Google's Vision API for analysis. Google processes the document and returns detection results, which we use to create a redacted version. The original document is stored securely, and the redacted version is what is displayed publicly on the platform.

Limitations: AI-powered redaction is automated and best-effort. It is not guaranteed to catch every instance of PII. If you are uploading documents containing highly sensitive information, please review them carefully before uploading. We are not liable for any PII that is not successfully redacted.

Please review Google's Privacy Policy for details on how Google handles data processed through their APIs.

4. How We Share Your Information

We share your information only in the following circumstances:

We do not sell your personal information to third parties.

5. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures, including:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/SSL.
• Encrypted Storage: Data is stored securely in Firebase, which provides encryption at rest.
• Password Hashing: Passwords are hashed using industry-standard algorithms — we never store or have access to your plain-text password.
• Access Controls: Firestore security rules restrict data access based on authentication status and user roles.
• Payment Security: We never store credit card numbers. All payment data is tokenized and handled by Stripe, which is PCI DSS compliant.
• Regular Audits: We conduct regular security reviews of our platform rules and infrastructure.

Despite these measures, no system is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach, we will notify affected users as required by applicable law.

6. Data Retention

We retain your information for the following periods:

When you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records).

7. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on the platform. These include:

• Essential Cookies: Required for the Service to function (e.g., authentication tokens, session management).
• Preference Cookies: Remember your settings and preferences.
• Analytics Cookies: Help us understand how users interact with the platform so we can improve it.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

8. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, you can manage most settings directly in your account. For requests that cannot be fulfilled through the platform, please contact us at privacy@myduedili.com.

9. Children's Privacy

Due Dili is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe that a child under 18 has provided us with personal information, please contact us immediately at privacy@myduedili.com so we can take steps to delete that information.

10. International Data Transfers

Due Dili is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States. By using the Service, you consent to such transfers.

For EU residents, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) to ensure your data is protected when transferred internationally.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Service after changes to this Privacy Policy constitutes acceptance of the updated policy. If you do not agree with the changes, please discontinue use of the Service.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

We aim to respond to all privacy-related requests within 30 days of receipt.