011. Data we collect
We collect the following data:
- Account data: name, email address, hashed password, role.
- Subscription and payment metadata: plan, renewal date, Tap customer id, last 4 digits of the card, subscription status. We never store the full card number or security code.
- Usage data: content-generation requests (images, videos, AI chats), quota telemetry, error logs.
- Connected social accounts: the TikTok/Instagram access token you grant us and minimal public-profile data.
- Technical data: IP address, browser, access logs.
022. Why we use your data
- Operating DAAM and generating the content you request.
- Managing subscriptions and billing via Tap Payments.
- Preventing fraud and abuse.
- Improving the product and understanding aggregate performance (aggregated only, not linked to a personal identifier).
- Sending account notifications, renewal reminders and support responses.
033. Retention
We keep account data while your account remains active. On account deletion your data is removed within 90 days, except records we must keep for accounting or regulatory reasons (invoice records: 10 years under KSA regulations).
Generated content (images, videos) is retained inside your account until you delete it or until 30 days after account closure.
044. Security
We use HTTPS for all connections, bcrypt for password hashing, short-lived JWT keys, and an approved encryption library for any sensitive data at rest.
No DAAM employee can read your password; only the hashed representation is stored.
055. Third parties (data processors)
We rely on the following providers. Each is bound by industry-standard information-security commitments:
- Tap Payments — payment processing (card and billing data).
- Resend — transactional email (name, email, verification codes).
- TikTok — when you connect your account (account token, public data).
- AI model providers (Claude, Gemini, OpenAI Sora) — to process text and media generation requests.
- MongoDB Atlas / Emergent — database and application hosting.
066. Your rights
- Request a copy of your personal data.
- Correct any inaccurate data.
- Delete your account and its data (subject to legal retention obligations).
- Withdraw consent for connected social accounts at any time.
077. Cookies
We use cookies strictly required for login (JWT) and language / theme preferences. We do not use advertising trackers.
088. DAAM Leads — link click measurement
The DAAM Leads feature uses limited technical data to measure visits to link pages and clicks on contact buttons. We never store the raw IP address, and we never store the content of WhatsApp messages. The IP is transformed into an encrypted daily identifier, and measurement events are retained for up to 180 days. The figures shown are estimates and do not imply a completed order or sale.
099. Contact us
For privacy enquiries or to exercise any right above: legal@getdaam.com
Address: Riyadh, Kingdom of Saudi Arabia