Privacy Policy

Dolphin AI (“we”, “us”) is a service that lets you share Instagram reels with our bot account and turns them into structured tasks — pushed to destinations like Notion, Google Calendar, or Google Sheets that you configure. This policy explains what we collect, why, and how you can control it.

• Account information. The email address and password (stored as a salted hash, never in plain text) you use to sign up for the Dolphin AI dashboard.
• Instagram account information. When you connect your Instagram account, we store your Instagram user ID and username so we can match reels you send our bot to your Dolphin AI account. We do not store your Instagram password — connection happens through Instagram's own login flow.
• Content you send us. Reels and captions you DM to our Instagram bot account. We download the video temporarily to extract audio, transcribe it, and generate a structured task from it. We do not access, read, or process any Instagram content you have not explicitly sent to our bot.
• Your Gemini API key. If you provide your own Google Gemini API key, we store it encrypted at rest and use it only to process transcripts and captions on your behalf. We never use it for anything outside your own requests.
• Integration credentials. If you connect Notion, Google Calendar, or Google Sheets, we store the resulting access tokens encrypted at rest, and use them only to push tasks generated from your content to the destinations you've configured.

We use the information above solely to operate Dolphin AI: to identify you, to process reels you send us into structured tasks, and to deliver those tasks to the destinations you choose. We do not sell your information, and we do not use your content to train any models — reels you share are processed through Google's Gemini API under your own API key and Google's own terms.

Processing your content necessarily involves a small number of third-party services, each acting under their own privacy terms:

• Meta / Instagram — to receive the reels you share with our bot account.
• Google Gemini — to transcribe audio and generate structured tasks, using your own API key.
• Notion, Google Calendar, Google Sheets — only if and where you've connected them, to deliver the resulting tasks.
• MongoDB Atlas — our database provider, to store the information described above.

We retain your account and connected-account information for as long as your account is active. Downloaded reel video is deleted after audio extraction; we retain the transcript and generated task so you can see your own history in the dashboard.

API keys and third-party access tokens are encrypted at rest. Passwords are hashed, never stored in plain text. Access to your data is limited to what Dolphin AI's own systems need to operate the service.

You can disconnect your Instagram account, remove integration connections, or delete your Gemini API key at any time from the dashboard. To request deletion of your account and all associated data, see our Data Deletion Instructions.

If we make material changes to this policy, we'll update the effective date above and, where required, notify you directly.

Questions about this policy or a data request? Email privacy@dolphinai.app.