Ducto

Legal

Privacy policy

Effective July 26, 2026 · AI Brain Labs, Inc. (“Ducto”, “we”)

Ducto is a control plane that sits between your AI agents and your marketing accounts. That job requires holding some sensitive data — this page says exactly what, why, and what we never do with it.

What we store

  • Account data. Your name, email, and organization details, from signup or from Google/GitHub sign-in.
  • Platform credentials. OAuth tokens for the accounts you connect (Google, Meta, Microsoft, LinkedIn, TikTok, and the rest). They are encrypted with KMS envelope encryption before they touch the database and are decrypted only at the moment a tool call needs them.
  • Policies and audit events. Your caps, approval settings, and an append-only log of every tool call an agent makes through the gateway — that log is the product.
  • Billing data. Handled by Stripe. We never see or store card numbers.

What we never do

  • We never sell your data. There is no advertising use of it.
  • We never train AI models on your account data or campaign data.
  • We never make writes to your platforms on our own initiative — every write originates from your agent and passes your policies.

Google user data — Limited Use

Ducto’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used only to provide the features you asked for — reading and, where your policies allow, writing to the Google accounts you connected — and is never used for advertising or sold to third parties.

Where it lives

Ducto runs on Google Cloud. Subprocessors: Google Cloud Platform (hosting, KMS, database) and Stripe (payments). We add subprocessors only when the product needs them and list them here.

Retention and deletion

Disconnecting a platform deletes its stored tokens. Deleting your account removes account data and credentials. Audit events live for the life of your organization — they are the tamper-evident record of account activity — and are removed when the organization is deleted. Email us to exercise access or deletion rights and we’ll respond within 30 days.

Cookies

Session cookies for sign-in only. No advertising trackers, no third-party analytics cookies on the product.

Contact

hello@getducto.com — we read every message. If this policy changes materially, we’ll note it here with a new effective date.