Privacy Policy

Introduction

Doumbledor (“we,” “us”) respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have. It applies to everyone who books or participates in a session, or interacts with doumbledor.com.

Information We Collect

• Contact and booking information: your name, email address, and scheduled time, provided when you book through Cal.com.
• Payment information: processed directly by Stripe. We do not see or store your card details — only a payment confirmation and transaction ID.
• Session content: the transcript of your conversation with the avatar, screenshots you choose to share during the session, and notes the system generates about the session.
• Feedback: any post-session survey responses you submit.
• Technical data: basic server logs (IP address, user agent, timestamps) for security and debugging.

How We Use This Information

• To deliver the session you booked and send you the join link and recap (if purchased).
• To process payments and issue receipts.
• To improve the Service — reviewing transcripts and feedback lets us refine the avatar's knowledge and behavior.
• To comply with legal obligations and prevent fraud or abuse.

Service Providers We Share Data With

We rely on third-party providers to operate Doumbledor. Each category below represents one or more vendors that process your data only to deliver their service to us, under their own privacy policies.

• Booking and calendar management — handles scheduling and reminders
• Payment processing — a PCI-compliant processor handles card details; we receive only a payment confirmation and transaction ID
• Transactional email — sends booking confirmations and recap delivery codes
• Database, storage, and website hosting — managed cloud infrastructure
• AI language model — Anthropic (Claude) — generates the avatar's responses. Anthropic does not use API inputs or outputs to train its models.
• Real-time avatar streaming — produces and streams the avatar's video and voice

Some of these providers process data outside Canada, including in the United States. We can provide the specific names of our subprocessors on written request — email dvaillancourt@doumbledor.com.

Session Recording Notice

Sessions are transcribed and stored so that we can generate your recap and improve the Service. By joining a session, you consent to this recording. We do not publish your transcripts or share them beyond the service providers listed above.

Data Retention

We retain session transcripts and related data for up to 12 months, after which we delete or anonymize them unless a longer retention period is required by law. You may request earlier deletion (see below).

Your Rights

Under applicable privacy law, including Quebec's Law 25 and Canada's PIPEDA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent to certain uses
• Lodge a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email dvaillancourt@doumbledor.com.

Children

The Service is not intended for anyone under 18. We do not knowingly collect information from children.

Security

We use industry-standard security practices — encrypted connections, access controls, and managed infrastructure. No system is perfectly secure, but we do our best to protect your data and will notify you if a breach affects your information.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top. If the change is material, we will notify you by email.

Contact

Privacy questions or concerns? dvaillancourt@doumbledor.com. We are the person responsible for the protection of your personal information.