Privacy Policy

1. Introduction

DELLIGHT.AI Limited ("Company," "we," "us"), DIFC License CL12872. Registered address on file: DIFC Innovation One, Level 3, Dubai. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or contact us about our products.

2. Information We Collect

We may collect the following types of information: name and contact details you provide by email or through other direct written communication; business information relevant to evaluating product fit, scoping potential engagements, or responding to your inquiry; account details when you create an account on this website, which our authentication provider Clerk collects at sign-up: the email address you register with, a name if you give one, the sign-in method you choose, and the account identifier Clerk assigns; purchase and billing records when you pay for a subscription or fixed-fee service through Stripe checkout, meaning the name and email on the account, the billing address you enter with Stripe, the item, the amount, and the payment status, but never full card numbers, which are entered with and held by Stripe; and standard technical request data from our hosting provider, such as IP address or browser information, for basic site delivery and security.

When you create an account, we keep a registration record of that account in our own database (your account identifier, the email address, and when the account was created). When you buy something, we keep the subscription and purchase records for that account in the same database: the plan or service, its status, the billing period, the amount, and the payment status, together with the customer reference Stripe assigns to you.

3. How We Use Your Information

We use the information we collect to respond to your inquiries, evaluate potential product fit or scoping requests, document direct written communications and any applicable agreements, operate your account and sign you in, fulfill paid subscriptions and fixed-fee services, including processing payments, renewals, cancellations, and refunds through our payment processor, maintain basic site delivery and investigate abuse or availability issues, and comply with legal obligations, including tax and accounting requirements that attach to paid transactions.

4. Data Security

We currently rely on the security controls available in our current website hosting and direct written workflows. We will publish more specific product security terms if product-specific systems go live. However, no method of transmission over the internet is 100% secure.

5. Product-Specific Privacy

BEACON stores your online questionnaire, draft answers, submitted answers and supporting reference notes in our application database hosted by Supabase. The record is linked to your signed-in account and is available to our authorized review team. Questions and answers are not sent to AI providers by this form. Submitted versions are preserved for review; ask contact@dellight.ai for corrections or deletion. Do not enter passwords, secret keys, document-access links or personal customer details. The practice example keeps its made-up answers only in the current page and does not send them to our servers.

Product stages are stated per product — from in development to available now. Self-serve checkout exists for the stated offers — ULYSSES Pro and Premium subscriptions, AI Presence Audits, Agent-Readiness Audits, and the AMPLIFY Briefing — through Stripe-hosted payment pages; every other engagement is request-based. That checkout requires an account on this website and runs through Stripe checkout started from our own server. Any product-specific privacy terms for scoped evaluations are documented in direct written agreements until public product-specific terms are published.

Release candidate — validation in progress. FREE Companion allows 15-minute sessions and 10 assists per day; one-time CORE access removes those Companion limits, with prices supplied by the app store for your region. Cloud answers and the PRO offer are disabled. Android and iOS source and build checks are complete for the candidate; physical-device behavior, SDK network traffic, content safety, purchases and store acceptance remain under validation. Model setup and store services may use network access. Support and answer reports open a reviewed email draft to contact@dellight.ai; answer inclusion is off by default and you send from your email application. Audio, questions and transcripts are not attached automatically. Deployment-specific terms are confirmed in direct written communication when you request access.

Access requests are open. Delivery depends on completing product, device, privacy and store validation; an access request does not promise an installation date. Support email handling is described in our privacy policy.

SUPERHUMAN-X support and answer reports let you review an email draft addressed to contact@dellight.ai. The displayed answer is excluded unless you choose to include it; audio, questions, transcripts, calendar content, purchase receipts and device identifiers are not attached automatically. Opening or copying a draft does not send it. Your email application controls sending and may retain the draft. If you send, DELLIGHT.AI receives your sender address and the content you voluntarily include to respond to and investigate your request. Email and clipboard copies can remain outside the app under your email and device settings. To ask about or request deletion of that correspondence, contact contact@dellight.ai. We do not promise a response time or a fixed support retention period here.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Account, registration, subscription, and purchase records are kept while your account exists. If you ask us to delete your account, we delete the account with Clerk and the registration record in our database. Records of payments you have made are kept for as long as tax and accounting law requires, and are not used for anything else in that time.

7. Third-Party Services

We rely on third-party providers for website hosting. Account sign-in on this website is operated by Clerk, our authentication provider, which holds the email address, sign-in method, and account identity you register with and processes them under its own privacy policy (clerk.com/privacy). The same account signs you in to ULYSSES at ulysses.dellight.ai. Payments are processed by Stripe: checkout runs on Stripe-hosted pages that our server opens for you, and the card details and billing address you enter there are collected and processed by Stripe under its own privacy policy (stripe.com/privacy). We receive transaction records, never full card numbers. Stripe also uses payment data for its own purposes, such as fraud prevention and meeting its own legal duties, and for those purposes Stripe acts as an independent controller. Clerk and Stripe may process your data outside the DIFC; transfers of personal data outside the DIFC take place under the transfer provisions of the DIFC Data Protection Law. If analytics providers are added later, this page will be updated before those flows go live. We do not sell your personal data to third parties.

8. Your Rights

We process personal data as a controller under the DIFC Data Protection Law, DIFC Law No. 5 of 2020. You have the right to access, correct, or delete your personal data; to object to or restrict the processing of your data; to request data portability; and, where processing rests on consent, to withdraw that consent. To exercise these rights, contact us at contact@dellight.ai. To delete your account, write to contact@dellight.ai from the email address on the account. You also have the right to lodge a complaint with the DIFC Commissioner of Data Protection. If you are outside the DIFC, you may hold equivalent rights under the law that applies to you.

9. Cookies and Browser Storage

We do not currently publish a separate cookie-management program or tracking-tool inventory for this site. When you sign in, Clerk sets two cookies on the dellight.ai domain: __session, which keeps you signed in, and __client_uat, which records when your sign-in state last changed. They exist only to operate your account, and the same sign-in carries to ulysses.dellight.ai. Stripe's checkout pages run on Stripe's own domains and set the cookies Stripe needs for payment processing and fraud prevention, governed by Stripe's cookie policy. If cookies beyond basic site delivery and sign-in are introduced on this site itself, this page will be updated before those tools go live.

To vary the homepage welcome on return visits, we store the headline position and the time the site was last visible in your browser's local storage. A return after at least 30 minutes away advances the headline. This preference contains no visitor identifier and is not sent to our servers. You can reset it by clearing this site's browser data. If browser storage is unavailable, the default headline is shown.

10. Sub-processors

The providers below process personal data on our behalf. The list states what this website's code and the linked product services call today, and it is updated before a new provider goes live.

• Vercel hosts this website and receives the standard technical request data described in section 2.
• Supabase hosts this website's database, in its Singapore region, where briefs submitted through the intake form at /book, the site's own first-party page and submission events, and the account registration, subscription, and purchase records described in section 2 are stored. The ULYSSES service keeps a separate Supabase database in the United States (us-east-1) for scan requests and results.
• Clerk operates account sign-in for this website and for ULYSSES, in the United States, and holds the email address, sign-in method, and account identity you register with.
• Stripe processes payments as described in section 7, in the United States, and holds the billing address and card details you enter at checkout.
• Cloudflare runs the Turnstile bot check on the ULYSSES scan form and stores ULYSSES scan artifacts in its R2 object storage.
• Fly.io hosts the ULYSSES product web at ulysses.dellight.ai.
• OpenRouter receives the text of this website's own internal working notes to compute search embeddings. Visitor submissions and scan inputs are not sent to it.

What reaches an AI model

Three places on this website or the linked products take text you type. Each is described here in the terms the code supports, and nothing beyond that is promised.

• ULYSSES scan (ulysses.dellight.ai). You enter a website domain and an email address. The engine derives the company name from the domain and asks a fixed set of questions about that company, its sector and a named competitor where one is set. Those questions go to the model APIs listed here. Your email address is stored with the scan request and is not part of any question. The model APIs called are OpenAI, Anthropic, xAI, Google (Gemini, with Google Search grounding). Scan requests and results are stored by the ULYSSES service in its own database (Supabase, United States) and object storage (Cloudflare R2).
• Ask box in the Clara greeter on this website. Each request to the Clara service at clara.dellight.ai carries the question you just typed. When you ask a follow-up, it also carries your previous question and up to 300 characters of Clara's previous answer. Free text is forwarded as you wrote it, so do not type anything you would not send to a third party. While you are on this site, the exchange stays in your browser: in the greeter panel, and in your browser's session storage when you pass it to the intake form. If you choose to send a brief from that exchange, your question and Clara's answer are stored with the brief in the same place as the intake form, this website's Supabase database. Clara is a separate service, and which model answers inside it is not visible from this website's code, so it is not claimed here.
• Intake form at /book. Nothing goes to an AI provider. The brief, your name, reply-to email, company, role and optional website are stored in this website's Supabase database and read by a person. This website's Supabase database, Singapore region.

SENTINEL runs as a separate service at sentinel.dellight.ai. This website only links to it and sends it nothing you enter here.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

12. Contact

For questions about this Privacy Policy, contact DELLIGHT.AI Limited at contact@dellight.ai. Registered address on file: DIFC Innovation One, Level 3, Dubai. DIFC License CL12872.