Doti heydoti
Get started

Privacy Policy

Last Updated: September 19, 2026

Our Approach to Privacy

HeyDoti is an AI agent designed to help you get things done. Depending on how you use HeyDoti, the Service may need to work with information from your messages, email, calendar, files, connected services, websites, browser sessions, and other sources you choose to make available.

We believe an AI agent should have access only for a reason: to provide the functionality you request, act on your instructions, keep the Service secure, and improve the product in the ways described in this Privacy Policy.

Our approach is based on several principles:

This Privacy Policy explains these practices in more detail.

1. Who We Are and What This Policy Covers

This Privacy Policy describes how Wordbricks, Inc. (“Wordbricks,” “HeyDoti,” “we,” “us,” or “our”) collects, uses, stores, shares, and otherwise processes personal information in connection with HeyDoti.

The Service includes:

On LINE, the relevant service information is:

Provider: Wordbricks, Inc.
Channel / Service: Doti

HeyDoti can interpret instructions, retrieve information, process content, generate outputs, interact with connected services and websites, and take actions on your behalf when you request or authorize those actions.

This Privacy Policy primarily covers our consumer Service. It does not govern personal information we process in our capacity as an employer with respect to employees, contractors, or job applicants.

2. Information HeyDoti May Process

The information we process depends on the features you use, the information you provide, the accounts you connect, and the permissions you grant.

Information you give us

You may provide information including:

We may use contact information, including your email address and mobile phone number, for purposes such as account creation, phone-number verification, identity or account verification, authentication, account security, fraud and abuse prevention, Service-related communications, support, and other communications or functionality that you request or authorize.

Where we request a mobile number for verification or authentication, we may send you a verification code, authentication message, security notification, or similar Service-related message.

Payment information

Payment information used to pay for HeyDoti subscriptions or purchases is generally processed directly by payment providers such as Stripe rather than stored directly by Wordbricks.

Separately, if you choose to save payment-card information or other payment details in a HeyDoti feature such as the Vault for use in tasks you request, Wordbricks may securely store that information on your behalf.

Information stored in the Vault may include, depending on what you choose to save:

Vault information is used to support tasks you request and is subject to the security and credential-handling practices described in this Privacy Policy.

Credentials, authentication secrets, and payment-card information stored in the Vault are not used to train or fine-tune our AI or machine-learning models.

Information generated through your use of HeyDoti

We may collect information about how the Service is used, including:

We use this information to operate, secure, troubleshoot, understand, and improve HeyDoti.

Browser and web automation data

When you ask HeyDoti to interact with websites or online services, we may process information necessary to perform those actions through a browser environment.

Depending on the task, this may include:

HeyDoti may maintain persistent browser profiles or session state so that supported websites can remain signed in between tasks where appropriate.

Persistent browser information is used to provide functionality you request, reduce unnecessary repeated authentication, and maintain continuity across tasks.

3. Mobile Messaging and Phone Verification

We may use your mobile phone number to provide phone verification, authentication, account-security, support, and other Service-related messaging.

Our messaging infrastructure may be provided by communications service providers such as Twilio.

How we use mobile information

Mobile information may be used to:

We do not sell, rent, share, or otherwise provide your mobile phone number, SMS/MMS opt-in information, or messaging consent to third parties or affiliates for their own marketing or promotional purposes.

This restriction applies even where other provisions of this Privacy Policy permit us to share personal information with service providers or other recipients.

We may provide mobile information to vendors that process information on our behalf solely as necessary to operate our messaging program, such as communications and telecommunications service providers. For example, we may provide your mobile number to Twilio solely as necessary to send, route, verify, secure, or otherwise provide messages or phone-verification functionality on our behalf.

These service providers are not authorized by us to use your mobile opt-in information or messaging consent for their own marketing or promotional purposes.

Mobile messaging opt-in data and consent are not transferred to third parties, affiliates, lead generators, or other businesses for marketing or promotional use.

Message frequency and charges

Message frequency varies depending on how you use HeyDoti and which messaging features you request.

For example, phone-verification messages are generally sent when you request verification or authentication. Other Service-related messages may be sent when relevant to your account, security, or a feature you have requested.

Message and data rates may apply depending on your mobile carrier and service plan.

Wordbricks does not charge a separate fee merely for receiving SMS or MMS messages from HeyDoti, although your wireless carrier may impose applicable charges.

Messaging choices

Where we offer optional recurring or promotional text messaging, your consent to receive those messages is voluntary and will be collected separately where required.

Consent to receive marketing or promotional SMS messages is not a condition of purchasing a product or service or maintaining a HeyDoti account.

For optional recurring SMS or MMS programs, you may opt out by replying STOP to the applicable message. You may request assistance by replying HELP where supported or by contacting privacy@heydoti.co.

Opting out of optional or promotional messaging does not necessarily prevent us from sending messages that you specifically request, such as a verification code or authentication message, or other messages that are reasonably necessary to protect or operate your account where permitted by applicable law.

Mobile carriers are not responsible for delayed or undelivered messages.

4. Information From Services You Connect

HeyDoti may allow you to connect accounts or services so that the agent can retrieve information or take actions at your direction.

Depending on availability, connected services may include:

When you connect a service, the information available to HeyDoti depends on the permissions you grant and the capabilities provided by that service.

Email and communication services

Connected email or communication accounts may provide access to:

Calendar services

Connected calendar services may provide access to:

Google Drive, Docs, and Sheets

Where you connect supported Google services, HeyDoti may process information including:

Depending on the feature and permissions granted, HeyDoti may read, search, retrieve, create, or modify supported Google files or documents at your direction.

Other connected services

Other connected services may provide information such as:

We use connected-service information according to the functionality you request, the permissions you grant, and any additional restrictions imposed by the relevant service.

You can revoke or disconnect supported integrations through HeyDoti, through available account controls, or through the third-party provider where applicable.

5. Information About People Other Than You

Content processed by HeyDoti may contain information about other people.

For example, your email, calendar, messages, documents, files, or connected workspaces may include another person’s:

We may process this information when necessary to provide a feature or perform an action you request.

When you provide, connect, or direct HeyDoti to process information about another person, you are responsible for having any authority, permission, or other lawful basis required for you to make that information available to the Service.

Applicable privacy laws may impose additional obligations on Wordbricks independently of your responsibilities.

6. Sensitive Information

Because HeyDoti can work with communications, documents, files, email, browser sessions, Vault information, and other user-selected content, information processed by the Service may sometimes include sensitive or specially protected information.

Depending on the content you choose to process, this may include information concerning:

HeyDoti does not require you to provide sensitive personal information unless that information is relevant to a feature or task you choose to use.

Where applicable law requires consent or another particular legal basis to process sensitive information, we will process such information only where an appropriate basis exists.

7. How We Use Information

We use personal information for purposes related to operating, providing, protecting, and improving HeyDoti.

To carry out your instructions

We may process information to understand what you ask HeyDoti to do and perform the requested task.

Depending on the features you use, this may include:

When completing a task requires identifiable information, we may provide the information necessary to the relevant recipient or service.

To operate your account

We may use information to:

To personalize HeyDoti and maintain memory

HeyDoti may maintain persistent memory derived from your interactions in order to provide more useful and continuous assistance over time.

Depending on how you use the Service, this memory may include information concerning:

HeyDoti may generate summaries, structured notes, or other derived context from previous interactions for this purpose.

Persistent memory may remain available across conversations or sessions until it is deleted, expires according to applicable retention practices, or your account or the relevant data is deleted.

Information derived from a connected service remains subject to any restrictions applicable to that source. In particular, Google user data and information derived from Google user data are not used to train or fine-tune our AI or machine-learning models.

To support users

We may process information to answer support requests, troubleshoot technical problems, investigate issues reported by users, and respond to feedback.

To protect HeyDoti and its users

We may process information to:

To understand and improve the Service

We may analyze information to:

To comply with law

We may process information where reasonably necessary to:

8. AI Processing

Artificial intelligence is a core part of HeyDoti.

Information you submit or connect may be processed by AI and machine-learning systems to understand instructions, retrieve information, generate responses, reason about tasks, classify information, create summaries, and perform agent actions.

Third-party AI providers

We may use third-party AI providers to help provide HeyDoti functionality.

Information necessary to perform a requested task may therefore be sent to a third-party AI provider.

Where reasonably practical for the relevant task, we may minimize, filter, mask, or otherwise reduce unnecessary personal information before transmitting it.

Some tasks cannot be completed effectively without processing original or identifiable information. In those cases, we may provide the information reasonably necessary to perform the requested task.

When we use third-party AI providers, we use available service configurations and contractual protections designed to restrict those providers from using HeyDoti user inputs or outputs to train their general-purpose models.

Third-party AI providers may process or retain information as permitted by the service arrangements governing their provision of services to Wordbricks.

Improving HeyDoti and our AI systems

Unless you opt out, we may use eligible information to evaluate, develop, train, fine-tune, or improve HeyDoti and AI or machine-learning systems developed or operated by Wordbricks.

Eligible information may include, depending on the Service:

Certain categories of information are excluded from AI training where required by law, contractual obligation, platform policy, or this Privacy Policy.

The following information is excluded from our general AI model training:

AI training opt-out

You may opt out of the use of eligible information for general AI model training where an opt-out mechanism is made available through HeyDoti or by contacting us.

After your opt-out becomes effective, we will not use newly collected eligible information for general AI model training, except where information is processed or used as reasonably necessary for purposes such as:

The AI training opt-out applies to general AI model training. It does not prevent us from using information, where otherwise permitted by this Privacy Policy and applicable law, to provide, operate, secure, evaluate, or improve non-training aspects of the Service.

9. Google User Data

Information obtained through Google APIs is subject to additional protections.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

For Google user data:

  1. We use the data only to provide or improve user-facing functionality permitted under applicable Google policies.

  2. We do not use Google user data, or information derived from Google user data, to train or fine-tune our general-purpose, personalized, or other AI or machine-learning models.

  3. We do not use Google user data for advertising.

  4. We do not sell Google user data.

  5. We do not transfer Google user data except where permitted under applicable Google policies.

  6. We do not permit humans to read Google user data except where permitted under applicable Google policies.

  7. A merger, acquisition, or sale of assets does not by itself authorize transfer of Google user data. Where Google policy requires prior explicit user consent before such a transfer, we will obtain that consent.

Where Google requirements impose stricter restrictions than another provision of this Privacy Policy, the Google-specific restrictions apply to Google user data.

Disconnecting Google

You may revoke HeyDoti’s access to your Google account at any time through available HeyDoti controls or through Google.

Disconnecting Google prevents HeyDoti from obtaining new information through that authorization, but does not by itself necessarily delete information already stored by HeyDoti.

Deleting Google data

You may request deletion of information previously collected through Google Workspace APIs through available HeyDoti account or data-management controls, where provided, or by contacting:

privacy@heydoti.co

We process deletion requests in accordance with applicable law, applicable Google requirements, and our data-retention practices.

10. LINE and Doti

HeyDoti may be accessed through LINE.

For our LINE service:

Provider: Wordbricks, Inc.
Channel / Service: Doti

Depending on the LINE features you use and permissions available through LINE, Wordbricks may receive or process information such as:

We use this information to communicate with you, operate Doti, understand and perform your requests, maintain your account or session, provide AI functionality, protect the Service, and improve HeyDoti as described in this Privacy Policy.

Information independently processed by LINE is governed by LINE’s own terms, privacy policies, and account settings.

11. Human Access to Private Content

HeyDoti is designed so that Wordbricks personnel do not routinely browse your private emails, messages, documents, files, or other connected content.

Personnel may access user content in limited circumstances, including:

When access is required to investigate an issue reported by you, we seek to limit access to the information reasonably necessary to understand and resolve that issue.

12. Credentials, Vault Data, and Account Connections

HeyDoti may use OAuth, access tokens, API credentials, session credentials, passwords, or other authentication mechanisms to connect supported third-party services.

Where authentication information must be stored, we use credential-management, encryption, access controls, or secure storage systems designed for that purpose.

The Vault may allow you to store credentials, payment information, addresses, contact information, or other information you want HeyDoti to use when carrying out future tasks.

Credentials stored in HeyDoti’s credential-management systems are designed to be handled outside the AI model context and are not intentionally included in prompts sent to third-party AI model providers.

Credentials, authentication secrets, and payment-card information stored in the Vault are not used to train or fine-tune our AI or machine-learning models.

13. When Information Is Shared

We may share personal information where necessary for the purposes described in this Privacy Policy.

For clarity, nothing in this section permits us to sell, rent, share, or transfer mobile phone numbers, SMS/MMS opt-in information, or messaging consent to third parties or affiliates for their own marketing or promotional purposes.

Infrastructure, communications, and technology providers

We work with companies that provide technical infrastructure and related services, which may include:

Our infrastructure, communications, and technology providers may include providers such as:

These providers may process information on our behalf where necessary to provide their services.

Twilio may process your mobile phone number and related technical or messaging information solely as necessary to provide phone verification, authentication, messaging delivery, security, and related communications services on our behalf. We do not authorize Twilio or other messaging vendors to use your mobile opt-in information or messaging consent for their own marketing or promotional purposes.

AI providers

We may provide information needed to deliver AI functionality to third-party AI providers as described above.

Connected services and recipients you choose

Information may be transmitted to another person, company, website, or service when necessary to carry out an action you request.

Payment processors

Payment providers such as Stripe may process payment and transaction information when you purchase HeyDoti products or subscriptions.

Professional advisers

We may provide information to lawyers, accountants, auditors, insurers, and other professional advisers where reasonably necessary for their services.

We may disclose information where we reasonably believe it is necessary to comply with law, respond to valid legal process, protect the Service, investigate unlawful conduct, or protect the rights, property, or safety of Wordbricks, users, or others.

Business transactions

Information may be disclosed in connection with an actual or proposed financing, investment, acquisition, merger, restructuring, bankruptcy, asset sale, or similar transaction.

Mobile messaging opt-in information and consent are not transferred as marketing consent to an acquiring party, affiliate, or other third party.

Google user data remains subject to the separate restrictions described above.

14. Cookies and Analytics

Our website and Service may use cookies, local storage, pixels, and similar technologies for purposes such as:

We may use Google Analytics 4 (GA4) and similar services to understand usage of our website and Service.

Where applicable law requires consent before certain cookies or analytics technologies are used, we will request consent as required.

15. Data Retention

We retain personal information for as long as reasonably necessary for the purpose for which it is processed, including to operate the Service, maintain user accounts, provide requested functionality, preserve user-requested memory or Vault information, maintain authenticated browser sessions, meet security requirements, and comply with legal obligations.

Mobile phone numbers, phone-verification records, and related messaging information may be retained for as long as reasonably necessary to:

Retention periods may otherwise differ depending on the type of information, the purpose of processing, account status, security requirements, applicable contracts, legal obligations, and potential claims.

When information is no longer reasonably necessary, we may delete, anonymize, or de-identify it unless continued retention is permitted or required by law.

16. Security and Agentic-System Risks

We use technical, organizational, and administrative measures designed to protect personal information against unauthorized or unlawful access, loss, misuse, alteration, or disclosure.

Depending on the relevant systems, safeguards may include authentication measures, access controls, encryption or secure transmission, credential vaulting, protected storage, logging, monitoring, infrastructure protections, and restrictions on personnel access.

No Internet-connected service can be guaranteed to be completely secure.

HeyDoti is also an agentic AI system capable of interacting with third-party services and taking actions based on your instructions and information available to it. AI systems may sometimes produce incorrect outputs, misunderstand instructions, encounter misleading third-party content, or take unintended actions.

Where appropriate, you should review important information and actions, particularly where an action could have significant financial, legal, professional, or other consequences.

17. Your Controls

Depending on available functionality, you may be able to:

For optional recurring SMS or MMS messaging, you may opt out by replying STOP where supported.

18. Your Privacy Rights

Depending on where you live and applicable law, you may have rights concerning your personal information, including rights of access, correction, deletion, restriction, objection, portability, consent withdrawal, or complaint to an applicable authority.

To make a privacy request, contact:

privacy@heydoti.co

We may need to verify your identity before completing certain requests.

19. International Processing and Transfers

Wordbricks, Inc. is based in the United States.

HeyDoti is available internationally, including in markets such as Japan and Taiwan.

Personal information may be transferred to, stored in, or accessed from the United States or other jurisdictions where our providers or authorized recipients operate.

This may include processing through providers such as Google Cloud Platform, Microsoft Azure, Amazon Web Services, Cloudflare, Twilio, and other technical providers.

Where applicable law requires safeguards for international transfers, we will use appropriate legal or organizational measures.

20. Third-Party Platforms

HeyDoti may interact with independent third-party platforms and services, including LINE, Google, Microsoft, Yahoo, Slack, GitHub, Linear, Granola, and others.

Those companies may independently process information according to their own terms, privacy policies, and account settings.

Wordbricks does not control the independent privacy practices of those third-party services.

21. Automated Processing

HeyDoti uses AI and other automated systems to provide recommendations, generate outputs, interpret requests, and perform user-requested actions.

We do not currently intend HeyDoti to make solely automated decisions about users that produce legal or similarly significant effects, such as determining eligibility for employment, credit, insurance, or legal rights.

22. Age Requirement

HeyDoti is intended for individuals 18 years of age or older.

We do not knowingly permit individuals under 18 to use the Service.

If you believe an individual under 18 has provided personal information to HeyDoti, contact privacy@heydoti.co.

23. Japan

If you are located in Japan, our processing of personal information may be subject to Japan’s Act on the Protection of Personal Information (“APPI”).

We process personal information for the purposes described in this Privacy Policy.

Personal data may be provided to service providers, connected services, user-designated recipients, and other recipients described in this Privacy Policy, subject to applicable APPI requirements.

Because Wordbricks is based in the United States and uses international service providers, personal information relating to users in Japan may be processed outside Japan.

Subject to applicable requirements and exceptions, individuals in Japan may have rights to request disclosure, correction, deletion, suspension of use, and suspension of certain third-party provision.

Requests may be submitted to privacy@heydoti.co.

24. Taiwan

If you are located in Taiwan, our processing of personal information may be subject to Taiwan’s Personal Data Protection Act (“Taiwan PDPA”).

For purposes of applicable collection notices:

Collecting entity: Wordbricks, Inc.

Purposes: Providing and operating HeyDoti; account creation; phone-number verification; authentication; account security; Service-related communications; processing instructions; connected services; browser and agent actions; persistent memory; AI functionality; support; analytics; product improvement; fraud and abuse prevention; and legal compliance.

Categories of information: The categories described throughout this Privacy Policy, including contact information, mobile telephone numbers, phone-verification and authentication information, account information, user content, connected-service information, browser information, Vault information, persistent memory, communications, technical information, and usage information.

Period of use: For the periods reasonably necessary under the principles described in “Data Retention.”

Territories of use: The United States, Taiwan, and other countries or regions where Wordbricks and its service providers operate.

Recipients: Wordbricks, communications and phone-verification providers such as Twilio, cloud and technical service providers, AI providers, payment processors, connected services, user-designated recipients, professional advisers, and legal authorities as described in this Privacy Policy.

For clarity, mobile messaging opt-in information and consent will not be shared with any third party or affiliate for marketing or promotional purposes.

Subject to applicable law, individuals in Taiwan may have rights to inquire about or review their personal information, request a copy, request correction, request cessation of collection or use, and request deletion.

You may exercise applicable rights by contacting privacy@heydoti.co.

25. Other Jurisdictions

The Service may be accessible from jurisdictions not specifically addressed above.

Where privacy or data-protection law in another jurisdiction applies to Wordbricks’s processing, we will provide rights and protections required by applicable law.

Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be waived.

26. United States Privacy Rights

Residents of certain U.S. states may have privacy rights if and to the extent applicable state privacy laws apply to Wordbricks or the relevant processing.

Depending on applicable law, these rights may include access, correction, deletion, portability, and rights concerning certain regulated processing activities.

Regardless of these state-specific rights, Wordbricks does not sell or share mobile messaging opt-in information or consent with third parties or affiliates for their marketing or promotional purposes.

Privacy requests may be submitted to privacy@heydoti.co.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as HeyDoti changes or as legal, regulatory, or operational requirements evolve.

When we update the Policy, we will update the “Last Updated” date above.

For material changes, we may provide additional notice through HeyDoti, LINE, SMS, email, our website, or another appropriate channel.

Where applicable law requires consent before we materially change how particular personal information is processed, we will obtain consent as required.

28. Contact Us

The entity responsible for this Privacy Policy is:

Wordbricks, Inc.

Service: HeyDoti
LINE Provider: Wordbricks, Inc.
LINE Channel / Service: Doti
Website: heydoti.co

For privacy questions, data requests, or mobile messaging questions:

privacy@heydoti.co

We may request information reasonably necessary to identify your request or verify your identity before responding to certain requests.