Privacy Policy
This Privacy Policy describes how FrogBot, Inc. ("FrogBot", "we", "us", or "our") processes personal information that we collect through our digital or online properties and services that link to this Privacy Policy (including our websites at https://frogbot.ai, the Dojo cloud platform at https://dojo.frogbot.ai, documentation, marketing activities, and related services (collectively, the "Service")).
Our websites, products, and services are designed for software builders, businesses, and enterprise customers and their representatives. When we host applications and databases on Dojo on behalf of a business Customer, we process the data inside those applications as a data processor under our Data Processing Addendum. This Privacy Policy governs how FrogBot, Inc. collects and uses information as a data controller.
1. Personal Information We Collect
Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:
- Contact data, such as your first and last name, email address, billing address, professional title, and company or workspace name.
- Profile and authentication data, such as the username, email, OAuth account identifier (e.g., GitHub or Google login), SAML SSO attributes, and API key metadata associated with your Dojo account.
- Communications data, based on our exchanges with you when you contact support, request enterprise information, or participate in community channels.
- Transactional and billing data, such as subscription plan selections, workspace usage history, and invoice records. Payment card details are collected and processed directly by our payment processor, Stripe (https://stripe.com/privacy).
- Marketing preferences, such as your subscription to product updates or newsletters and your engagement with those communications.
Automatic data collection. We and our service providers may automatically log technical information when you interact with the Service:
- Device and network data, such as operating system type and version, browser type, IP address, and general geographic region.
- Service activity and telemetry data, such as pages viewed, deployment build logs, resource utilization (compute, Postgres storage, file storage, bandwidth, and AI gateway credit consumption) necessary to operate and bill for your workspace.
- Cookies and similar technologies, used to maintain your authenticated session and remember interface preferences. For details, see our Cookie Policy.
2. How We Use Your Personal Information
We use personal information for the following purposes:
- Service delivery and operations: To provision and operate your Dojo workspaces and applications, authenticate logins, process deployments, enforce spend caps, and provide technical support.
- Security and abuse prevention: To detect, investigate, and prevent fraudulent, unauthorized, or abusive activity, including DDoS protection, rate-limiting, and enforcing our Acceptable Use Policy.
- Research, development, and analytics: To monitor platform reliability, debug build and runtime issues, and improve the FrogBot framework and Dojo cloud. We do not train foundation AI models on your private application databases or source code.
- Communications and marketing: To send transactional alerts (such as build status, domain SSL verification, or billing receipts) and, where permitted, product announcements. You may opt out of marketing emails at any time using the unsubscribe link in any message.
- Legal compliance: To comply with applicable laws, tax obligations, lawful requests, and legal process, and to enforce our Terms of Service.
3. How We Share Your Personal Information
We do not sell your personal information. We share personal information only in the following circumstances:
- Infrastructure and service providers: Trusted third-party providers that host or support the Service on our behalf (such as cloud compute and database infrastructure, Stripe for billing, transactional email delivery, and error monitoring), bound by contractual confidentiality and data protection obligations.
- Third-party integrations designated by you: When you connect OAuth pieces (such as GitHub, Slack, Google, Linear, or Stripe) or AI model providers to your FrogBot application, data is transmitted to those services strictly at your direction.
- Professional advisors and authorities: Legal, accounting, or security advisors, or government authorities when required by law or necessary to protect the rights, safety, and property of FrogBot, our users, or the public.
- Business transfers: In connection with a merger, financing, acquisition, or transfer of all or a portion of our business or assets.
4. Your Rights and Choices
- Access, update, or delete Account data: You may review, update, or delete your profile information and workspaces directly in the Dojo dashboard or by emailing legal@frogbot.ai.
- Opt out of marketing: Click the unsubscribe link at the bottom of any marketing email or contact us at legal@frogbot.ai. Transactional and security notifications will still be delivered.
- Cookie controls: Manage cookie preferences through your browser settings as described in our Cookie Policy.
5. Notice to European and UK Users (GDPR)
For individuals located in the European Economic Area (EEA) or the United Kingdom (UK), FrogBot, Inc. is the controller of your personal data covered by this Privacy Policy.
| Purpose | Categories of Data | Legal Basis under GDPR |
| --- | --- | --- |
| Service delivery & workspace operations | Contact data, Profile data, Transactional data, Device & usage data | Contractual Necessity (Article 6(1)(b)) |
| Platform security & fraud prevention | Device data, IP address, Activity logs | Legitimate Interests (Article 6(1)(f)) in securing our infrastructure |
| Product improvement & reliability | Aggregated usage & telemetry data | Legitimate Interests (Article 6(1)(f)) |
| Direct product marketing | Contact data, Marketing preferences | Legitimate Interests (Article 6(1)(f)) or Consent (Article 6(1)(a)) where required |
| Tax, accounting & legal compliance | Transactional data, Contact data | Compliance with Legal Obligation (Article 6(1)(c)) |
Your European Data Subject Rights. Subject to applicable law, you have the right to request access to, rectification of, erasure of, restriction of processing of, or portability of your personal data, and to object to processing based on legitimate interests. To exercise these rights, contact us at legal@frogbot.ai. You also have the right to lodge a complaint with your local data protection supervisory authority.
International Data Transfers. FrogBot, Inc. is headquartered in the United States. Where personal data is transferred outside the EEA or UK to a jurisdiction not subject to an adequacy decision, we rely on approved Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
6. Data Retention and Security
We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, and comply with legal, tax, and audit obligations. We employ encryption in transit (TLS 1.3), encryption at rest, HttpOnly session cookies, and strict tenant isolation to safeguard your data.
7. Children
The Service is not directed to anyone under 18 years of age, and we do not knowingly collect personal information from children.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page.
9. How to Contact Us
- Entity: FrogBot, Inc.
- Email: legal@frogbot.ai