Privacy Policy

Last updated: June 10, 2026

1. Introduction

Dally ("we," "our," or "us") is operated by Dally Platforms, Inc. Dally is a content intelligence platform for creators. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how we protect it when you use dally.ai and its related services.

2. Information We Collect

2a. Account Information (Google OAuth)

When you sign in with Google, we receive your Google account email address and display name. We use this information solely to create and manage your Dally account, authenticate your sessions, and send you account-related communications. We do not request access to your Google contacts, calendar, Drive files, or any other Google service data.

2b. Connected Platform Data

You may connect one or more of the following platforms to Dally: Instagram, TikTok, YouTube, Threads, X (Twitter), LinkedIn, and Substack. For each platform you connect, we collect:

  • Profile information (username, display name, profile picture, follower count, media count)
  • Published content metadata (captions, timestamps, permalinks, media types, thumbnail images)
  • Content performance metrics where the platform API provides them (saves, shares, reach, views, likes, comments). These are private metrics accessible only with your explicit OAuth authorization.
  • Audio transcriptions of your video content, generated by our processing pipeline
  • For YouTube specifically: video analytics (retention, watch time, subscribers gained) and revenue data (estimated revenue, ad revenue) provided through the YouTube Analytics API. This data is displayed to you in your content library.

Each platform connection requires a separate, explicit OAuth authorization (or, in the case of Substack, an RSS URL you provide). We request only the permissions necessary to provide our service. We do not access your direct messages on any platform.

2c. Publicly Available Content

We collect publicly available content data (captions, thumbnails, public engagement counts) from public creator profiles to power our discovery feed and niche benchmarks. This data is available to anyone who visits the public profile and does not require authentication.

2d. Analytics and Usage Data

We use PostHog to collect usage analytics and session recordings when you interact with Dally. This includes pages visited, clicks, feature usage, browser type, and device information. We use this data to improve the product. PostHog sets cookies on your device to distinguish users and track sessions.

3. How We Use Your Information

3a. Google Account Data

We use your Google account email and display name for authentication, account creation, and account-related communications only. We do not use Google user data for advertising, market research, or any purpose unrelated to providing Dally's authentication and account management functionality.

3b. Connected Platform Data

  • To show you analytics about your own content performance across connected platforms
  • To power your personal AI content brain: understanding your voice, themes, and what performs best
  • To generate personalized content ideas based on your performance data and voice
  • To publish content to connected platforms when you explicitly initiate a publish action
  • To include your anonymized performance metrics in aggregate niche benchmarks (see Section 5)
  • To display your content and metrics to other connected creators through the discovery feed (see Section 6)
  • To improve Dally and develop new features, using anonymized and aggregate usage patterns only

4. Platform API Usage

We access your data through each platform's official API using permissions you explicitly grant during the OAuth connection process. We request only the scopes necessary to read your profile, read your content and its metrics, and (where you authorize it) publish content on your behalf.

For each connected platform, you can revoke access at any time from your Dally settings page or from the platform's own app permissions settings. For YouTube and other Google services, you can also revoke Dally's access at any time via the Google security settings page.

For YouTube, we request permissions to: read your channel and video metadata, read your video analytics and revenue data, upload videos (Shorts), edit video titles and descriptions, and manage caption tracks. These write actions occur only when you explicitly initiate them from the Dally publish or library interface.

We do not access your direct messages, follower lists, or contact information on any platform. We do not take actions on your behalf unless you explicitly initiate them (such as publishing a video, editing a title, or uploading captions).

5. Aggregated Benchmarks

By connecting a platform account, your content performance metrics are included in aggregated, anonymized niche benchmarks. For example: "fitness reels average a 2.3% save rate." No individual creator's specific numbers are exposed in benchmarks. Only niche-level averages and trends are shown.

These aggregated benchmarks power the AI chat features and may be included in intelligence products for agencies and brands. Your individual data is never sold or shared in identifiable form.

6. Your Data and Other Creators

By connecting a platform account, your content and performance metrics (including saves, shares, and reach) become part of the Dally creator network. Other connected creators may see your content and metrics through platform features such as the discovery feed. This shared pool of private metrics is core to how Dally works and what makes the platform valuable for everyone.

You can stop new data from syncing at any time by disconnecting your account from Dally settings. To remove your existing content from the platform entirely, submit a data deletion request. Your personal analytics (visible only to you) work regardless of network participation.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data or any platform-specific user data to third parties. We do not share your data with data brokers, information resellers, or advertisers.

We share your data only in the following circumstances:

  • Service providers: We share data with the third-party services listed in Section 9 solely to operate Dally. Each provider processes your data under their own privacy policy and data processing terms.
  • Aggregated benchmarks: We share anonymized, aggregate performance data with agencies and brands as described in Section 5. This data cannot identify you or any individual creator.
  • Legal requirements: We may disclose your data if required by law, subpoena, court order, or government request.
  • Business transfer: If Dally is acquired or merged, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

8. Google API Services User Data Policy

Dally uses YouTube API Services to provide its YouTube features: connecting your channel, displaying your videos and analytics to you, and publishing Shorts you explicitly initiate. By using these features, you also agree to the YouTube Terms of Service. Information about how Google handles your data is available in the Google Privacy Policy.

Dally's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The following commitments apply to all data received from Google APIs, including Google Sign-In data (email, display name) and YouTube API data (video metadata, analytics, revenue, captions):

  • We use Google Sign-In data solely for authentication, account management, and account-related communications.
  • We use YouTube API data solely to display your content, analytics, and revenue to you within Dally, and to execute actions you explicitly initiate (publishing, editing metadata, managing captions).
  • We do not use data received from Google APIs for advertising, retargeting, or any form of user profiling unrelated to providing Dally's user-facing functionality.
  • We do not sell data received from Google APIs to third parties.
  • We do not transfer data received from Google APIs to third parties except as necessary to provide or improve user-facing functionality in Dally, to comply with applicable law, or as part of a merger or acquisition (with prior notice to users).
  • We do not use data received from Google APIs to train AI or machine learning models.
  • Human access to data received from Google APIs is limited to what is necessary for security, compliance, or user support, and only with the user's consent or as required by law.

9. Third-Party Services

We use the following third-party services to operate Dally. Each service processes data under its own privacy policy and data processing agreements:

  • Supabase: Database hosting, user authentication, and file storage (stores your content data, account records, and media files)
  • Vercel: Web application hosting and serverless compute
  • Anthropic (Claude):AI analysis of your content for personalized recommendations, content ideas, and chat features. Your data is not used to train Anthropic's models.
  • OpenAI:Audio transcription of video content (Whisper). Your data is not used to train OpenAI's models under our API terms.
  • Google (Gemini):Visual analysis of video content (scene detection, labels, production signals). Your data is not used to train Google's models under our API terms.
  • Groq: Audio transcription of video content (alternative provider for faster processing)
  • Stripe: Payment processing for subscriptions. Stripe receives your payment method, billing address, and email. We do not store your full credit card number.
  • PostHog: Product analytics, session replay, and AI feature quality analytics (including chat conversations) to understand feature usage and improve the product
  • Bright Data: Collection of publicly available content data from public creator profiles for the discovery feed

None of these providers use your data for advertising, and none sell your data to third parties. AI providers (Anthropic, OpenAI, Google Gemini, Groq) process your content data only to return results to Dally. Under our API agreements, they do not retain your data for model training.

10. Cookies and Tracking

Dally uses cookies and similar technologies for the following purposes:

  • Authentication: Session cookies to keep you signed in
  • Analytics: PostHog cookies to understand how you use Dally and improve the product. This includes session recordings of your interactions with the interface.
  • OAuth state: Short-lived cookies during platform connection flows to prevent cross-site request forgery

We do not use advertising cookies, tracking pixels, or retargeting technologies. We do not share cookie data with advertisers.

11. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase with encryption at rest and encryption in transit (TLS). Media files are stored in Supabase Storage with access-controlled buckets. Our web application is hosted on Vercel with HTTPS enforced on all connections.

OAuth access tokens are stored in our database with encryption at rest (AES-256, provided by our database host) and encryption in transit (TLS). They are used only to sync your content data and execute actions you explicitly initiate. Tokens are refreshed automatically and revoked when you disconnect a platform.

We follow security practices including: encryption at rest for stored data, scoped database access controls, server-side authentication checks on all API routes, and regular rotation of application secrets. If we become aware of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

12. Data Retention and Deletion

We retain your data for as long as your account is active. If you disconnect a platform, we stop syncing new data from that platform. Existing content from that platform remains until you request deletion.

If you request deletion (via the data deletion page or by emailing support@dally.ai), we will delete or anonymize your personal data within 30 days. This includes your profile information, content data, performance metrics, and AI-generated analysis. Anonymized data that has already been included in aggregate benchmarks and cannot identify you may persist.

If you delete your Dally account, we treat this as a deletion request for all associated data.

13. Your Rights

You have the right to:

  • Access your personal data at any time through the platform
  • Request correction of inaccurate data
  • Request deletion of your data (see Data Deletion)
  • Disconnect any platform at any time to stop new data from syncing
  • Revoke OAuth access from any connected platform's own settings
  • Export your data upon request
  • Object to processing of your data for specific purposes

To exercise any of these rights, email support@dally.ai. We will respond within 30 days.

14. What We Do Not Do

To be explicit about what Dally does not do with your data:

  • We do not sell your data to third parties, data brokers, or information resellers.
  • We do not use your data for targeted advertising, retargeting, or interest-based advertising of any kind.
  • We do not use your data to determine creditworthiness or for lending purposes.
  • We do not use your data to train general-purpose AI or machine learning models. AI analysis is performed on your data only to return results to you within Dally.
  • We do not use your data to create, supplement, or build databases of information for sale or distribution to third parties.
  • We do not access your direct messages on any platform.
  • We do not take actions on connected platforms without your explicit initiation.

15. Children's Privacy

Dally is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at support@dally.ai and we will delete that information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and (for material changes affecting how we use your data) sending a notification to the email address associated with your account.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have a complaint about how we handle your data, contact us at:

Email: support@dally.ai
Business: Dally Platforms, Inc.

© 2026 Dally. All rights reserved.