DORK / LEGAL · DRAFT FOR REVIEW

Privacy policy

Draft — publication details incomplete. Effective date: [EFFECTIVE DATE]. Data controller/operator: [FULL LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Privacy contact: [PRIVACY CONTACT EMAIL]. This draft identifies data flows in the product and gaps that require confirmation for the deployed service.

Information and purposes

Dork processes account and invitation information to authenticate you and authorize Lab access. Operational records can include installation identity, app version, Lab health, and last activity. Research processing includes questions, instructions, permitted sources, reports, computational artifacts, and decisions you store in a Lab.

Model calls send prompts and permitted research context to the selected provider. Dork’s policy excludes private Lab material from its own training. Provider account terms and data controls govern provider-side processing; the Dork policy cannot override them.

Optional product analytics, when configured and enabled, sends enumerated app actions, counts, durations, error codes, version, and event metadata to PostHog with your Dork account and invitation email. It excludes research text, mathematics, reports, source passages, search terms, paths, and credentials. Session replay, screen recording, and automatic click tracking are off. App activity and crash reporting are off by default and have separate controls in Settings → Privacy. Lab usage and device-reporting controls are separate.

Feedback contains what you explicitly submit. Screenshots and current-view text are optional attachments that can contain private research; review them before sending. Disabling optional analytics does not remove the operational processing needed to supply account access and requested features.

Recipients and hosting

Hosted infrastructure uses Google Cloud; see Google’s privacy policy and its applicable terms and Cloud Data Processing Addendum. The deployed regions, subprocessors, access roles, and transfer arrangements are [CONFIRM DEPLOYED LOCATIONS AND PROCESSOR DETAILS].

OpenAI receives content sent through your ChatGPT or API connection. Read the applicable OpenAI privacy policy and Services Agreement. Where used, Anthropic processing follows the applicable Anthropic privacy policy and Commercial Terms. Optional PostHog processing is described in PostHog’s privacy policy. A custom provider has its own operator; OpenAI-compatible access does not establish OpenAI’s privacy terms.

Provider retention and model-improvement settings depend on the service, account, and agreement. This notice does not promise zero retention or that every external provider excludes training.

Retention, deletion, and your choices

[CONFIRM RETENTION FOR ACCOUNT RECORDS, RESEARCH, BACKUPS, LOGS, FEEDBACK, CRASHES, AND ANALYTICS]. Deletion timing and scope require confirmation for the deployed service, including hosting disks, stored object versions, backups, and provider-held material.

Use the app’s privacy controls to change optional reporting. Restrict a source with Never send to a model before model use and wait for confirmation. Disconnecting ChatGPT is separate from deleting a Lab or deleting provider-held content. A pending credential-erasure state is not completed erasure.

Depending on applicable law, you may have rights to access, correct, export, delete, restrict, or object to processing, withdraw consent, or complain to a regulator. Contact [PRIVACY CONTACT EMAIL] using [VERIFIED REQUEST PROCESS]. [CONFIRM RESPONSE PROCESS, LEGAL BASES, INTERNATIONAL TRANSFER SAFEGUARDS, AND REGULATOR DETAILS].

Website and security

The marketing website is served by Cloudflare Pages. It stores an optional theme preference in your browser under dork-theme and has no signup form, analytics, advertising, or research-data collection. Cloudflare processes request information to serve and protect the website; see Cloudflare’s privacy policy. [CONFIRM WEBSITE REQUEST-LOG RETENTION AND ACCESS]. The desktop app and hosted Lab have separate processing described above.

No end-to-end encryption, fixed residency, certification, or complete deletion guarantee is asserted by this draft. [CONFIRM SECURITY CONTACT, INCIDENT NOTIFICATION PROCESS, AGE ELIGIBILITY, AND POLICY CHANGE NOTICES] before final publication.