Last updated: October 11, 2026

This Privacy Policy describes how Caddie (the "Service") collects, uses, and shares information about you when you use the Caddie iPhone application, WhatsApp sales guide, web signup/billing preview and related services. Caddie is operated by Daniel Hariyanto ("Caddie", "we", "us", "our"). By using the Service, you agree to the practices described here.

1. Information we collect

1.1 Information you provide

Account information. Web sign-in uses Google or Apple when configured. We verify the provider-issued identity and retain a keyed identity index, not a reusable provider access token. This web flow does not request name or email scopes, merge accounts by email, or use Google/Apple sign-in to read your mail, contacts, files or calendar.
WhatsApp verification. We retain the encrypted provider-authenticated direct contact and proof of a fresh, one-use browser challenge sent from that account. A keyed normalized-phone claim links it to the authenticated sign-in and one customer allowance. Group participation, display names and unverified phone text cannot verify a private contact.
Volunteered sales profile. Optional preferred name, goals, preferences, role/company and business URLs, with provenance and an unverified label. We do not infer identity from a phone number or photo, infer sensitive traits, or profile group participants automatically. Only your approved setup summary is handed to your new assistant.
Profile information. The preferred name and time zone you provide during onboarding.
Conversation content. Messages you send to Caddie, files you upload, and instructions you give the assistant.
Integration data. If you connect a third-party service (for example, Google Workspace, Microsoft 365, or Notion), we receive access tokens and the data from that service that is necessary to complete the tasks you direct.
Support correspondence. Email and in-app messages you send to our support addresses.

1.2 Information collected automatically

Device and usage data. Device model, iOS version, application version, language, crash reports, and anonymized usage events.
Subscription status. The purchase channel's customer/subscription identifiers, active tier, renewal status and payment events: Stripe for web, Apple for App Store.
Abuse prevention. Short-lived keyed rate limits protect sign-in and phone challenges. Minimal identity, phone-claim and trial-grant records remain to prevent resets through email changes, linked providers or account deletion/recreation. A phone number is not proof of a unique person; number recycling and recovery require support review. WhatsApp does not expose a sender IP to us; we do not invent one. Model usage and unresolved effects remain for accounting and reconciliation.

1.3 Information from third parties

Google and Apple. Verified web authentication; Apple separately supplies App Store subscription and receipt information.
Stripe. Hosted web checkout and subscription status. Card details go to Stripe, not into a sales conversation or assistant workspace.
Consented public business preview. Only an exact URL you provide and approve may be read, from an approved public host. We do not perform covert identity lookup or fetch private/internal network addresses.
Service providers. Limited operational data from the infrastructure and AI providers we use to run the Service (see Section 4).

2. How we use information

We use information to:

Provide, operate, and maintain the Service;
Execute the tasks you instruct Caddie to perform;
Process subscriptions, billing, refunds and renewals through their purchase channel: Stripe for web, Apple for App Store;
Communicate with you about your account, security, and important Service updates;
Improve the Service, debug issues, and develop new features;
Detect, prevent, and respond to abuse, fraud, or violations of our Terms;
Comply with applicable legal obligations.

We do not sell your personal information. We do not use your conversation content or uploaded files to train artificial intelligence models, our own or anyone else's.

3. How we share information

We share information only as described below:

Service providers. We share data with third parties that help us operate the Service under contracts requiring them to protect your data (see Section 4).
At your direction. When you instruct Caddie to interact with a third-party service (for example, to send an email or schedule a meeting), we share with that service only the data necessary to complete the task.
Legal requests. If required by law, court order, or to protect our rights, our users, or third parties, we may disclose information.
Business transfers. In the event of a merger, acquisition, or asset sale, your information may be transferred. You will be notified of any change in ownership or material change in use of your data.

4. Service providers

We rely on the following categories of third parties to operate Caddie. Each is bound by data protection terms.

Cloud infrastructure for hosting your dedicated backend instance and storing your data.
AI model providers to generate Caddie's responses. Conversation content may be transmitted to these providers solely to produce a reply; they are contractually prohibited from using your data to train their models.
Apple Inc. for authentication, in-app purchases, subscription management, and platform-level analytics.
Google for web authentication when configured. It is not a grant to access Google Workspace data.
Stripe for hosted web checkout and subscription management when the web channel is enabled.
WhatsApp and the centralized native OpenClaw/GitHub Copilot sales adapter to receive/reply to direct sales questions when eligible and enabled. GPT-6 Luna is the requested candidate, not GPT-5.6 Luna. Only that contact's supplied bounded conversation and volunteered profile may enter an isolated, nonpersistent completion; no customer/operator archive or group context is inherited. No separate per-lead OpenClaw process or workspace is created.
Customer-support tooling used to triage and respond to support inquiries.
Aggregated analytics to understand, in aggregate and without identifying individual users, how the Service is used.

5. Data retention

Web browser sessions expire after one hour, sign-in flows after five minutes, and phone challenges after ten minutes. Expired sessions and flows are removed by the controller's bounded cleanup. Minimal keyed phone claims and original trial grants are not erased by sales-data deletion or a provider change. They are separate from sales conversation memory.

We retain your account data for as long as your account is active. When you request deletion, we remove your data within 30 days, except where retention is required for legal compliance, dispute resolution, or enforcement of our agreements. Backups containing your data may persist for up to an additional 30 days before they cycle out.

6. Your rights

An approved family workspace extends one owner's account and allowance. Verified current members share that group's context without separate signup. Your private DM history is never used as family context. Removal stops future access; it cannot recall messages already delivered.

In the pre-signup sales chat, STOP opts out; FORGET deletes sales chat/profile. You can also delete sales data or withdraw enrichment consent from the verified web page. These controls cancel queued sales work and revoke future sales responses; already transmitted messages cannot be recalled. We retain minimal keyed suppression, verification and usage records to honor opt-out, prevent duplicate trials and reconcile possible effects. They do not cancel a subscription or delete your separate assistant workspace.

Depending on where you live, you may have the following rights with respect to your personal information:

Access — request a copy of the personal information we hold about you;
Correction — ask us to correct inaccurate or incomplete data;
Deletion — ask us to delete your account and associated data;
Portability — receive your data in a portable, machine-readable format;
Objection — object to certain processing of your data;
Restriction — request that we limit how we use your data;
Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email hey@heycaddie.app. We will respond within 30 days. You may also have the right to lodge a complaint with your local data protection authority.

7. California privacy rights

California residents have rights under the California Consumer Privacy Act (CCPA), including the rights to know, delete, and correct personal information, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, email hey@heycaddie.app.

8. Children's privacy

The Service is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable threshold), and we do not knowingly collect personal information from children under those ages. If you believe a child has provided us with personal information, contact us at hey@heycaddie.app and we will delete it.

9. International data transfers

Caddie is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We rely on appropriate safeguards (including Standard Contractual Clauses where applicable) to protect your information during international transfers.

10. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, per-user isolation of backend instances, and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, contact us at hey@heycaddie.app immediately.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by in-app notification or email, and the "Last updated" date at the top of this page will reflect the change. Continued use of the Service after changes are posted constitutes acceptance.

12. Contact

Caddie · operated by Daniel Hariyanto
Email: hey@heycaddie.app