Privacy Policy

Last updated: March 7, 2026

The short version: We collect your conversation data to make Donna work and improve. We don't sell your data. You can delete everything at any time. Contact us at [email protected] with any questions.

1. Who We Are

Donna AI ("Donna", "we", "us") is a personal AI assistant service. This Privacy Policy explains how we collect, use, and protect your information when you use Donna via Telegram (@Meetdonnaai_bot) or any associated platforms.

2. What We Collect

When you use Donna, we collect:

Conversation data — messages you send to Donna and her responses
Usage data — how often you interact, which features you use, token consumption
Account identifiers — your Telegram user ID and display name (no passwords stored)
Voice data — audio transcriptions if you send voice notes (audio not stored permanently)
Payment data — handled entirely by Stripe; we receive only your subscription status

3. How We Use Your Data

To provide and personalize Donna's responses
To remember your preferences and build your agent's knowledge over time
To analyze usage patterns and improve the service
To process your subscription and prevent abuse
To communicate service updates or important notices

4. AI Processors

Donna uses third-party AI providers to generate responses. Your conversation data may be processed by:

Anthropic (Claude models) — Privacy Policy
OpenAI (voice transcription, select features) — Privacy Policy

These providers act as data processors under our instructions and are bound by their respective data processing agreements. We do not permit them to use your data to train their models without your consent.

5. Data Retention

Conversation logs are retained to provide continuity across sessions — this is what makes Donna useful over time. We retain your data for as long as your account is active. If you delete your account, all associated data is removed within 30 days.

6. Data Sharing

We do not sell your personal data. We share data only:

With AI processors (Anthropic, OpenAI) as described above
With Stripe for payment processing
With infrastructure providers (Hetzner, Cloudflare) for hosting/delivery — they see only encrypted traffic
If required by law or to protect rights and safety

7. Your Rights

You have the right to:

Access — request a copy of all data we hold about you
Delete — request deletion of your account and all associated data
Correct — request correction of inaccurate information
Export — receive your data in a portable format

To exercise any of these rights, contact us at [email protected].

8. Security

We use industry-standard security practices including encrypted transit (TLS), server-side encryption at rest, and access controls. No system is 100% secure — if you suspect a breach, contact us immediately.

9. Children

Donna is not directed at children under 13. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy. We'll notify you of material changes via Telegram. Your continued use after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us: [email protected]