← Back to dmset.ai

Privacy Policy

This Privacy Policy explains how dmset.ai ("dmset.ai," "we," "our," or "us") collects, uses, stores, shares, and protects information in connection with the dmset.ai platform, dashboard, APIs, integrations, and related services (collectively, the "Service"). The Service is operated by Inflo Partners.

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, do not access or use the Service.

1. Who We Are

dmset.ai is a business software platform that helps its customers (typically coaches, consultants, course creators, agencies, and other high-ticket operators, collectively "Customers") qualify leads, handle objections, and book sales calls inside their Instagram direct messages ("Instagram DMs") using AI automation, and manage those conversations in a centralized dashboard.

For the purposes of applicable data protection laws (including the EU/UK GDPR and the California Consumer Privacy Act / CPRA):

• With respect to Customer account data (for example, the Customer's name, email, billing information, and authentication credentials), dmset.ai acts as a data controller.
• With respect to end-user data processed through a Customer's account (for example, a lead who sends a DM to a Customer's Instagram account), dmset.ai acts as a data processor on behalf of the Customer, who is the controller.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, business name, phone number, billing information, and authentication credentials when you register, log in, or purchase a subscription.
• Configuration data: Prompts, offers, objection-handling rules, qualification criteria, voice-training samples, and other settings you upload or enter.
• Support communications: Messages, attachments, and metadata from emails, tickets, or live chats you send to us.

2.2 Information Collected Through Integrations

When you connect third-party platforms (such as ManyChat, Instagram via ManyChat, Calendly, or payment processors), we receive data through their official APIs as authorized by you. This may include:

• Instagram DM thread content, message timestamps, sender handles, and thread metadata relayed via ManyChat.
• ManyChat subscriber records, tags, custom fields, and flow state.
• Calendly booking events, event types, and invitee metadata.
• Payment and subscription metadata from our payment processor (we do not store full card numbers).

2.3 Information Collected Automatically

• Usage data: Log files, IP address, browser type, device type, operating system, pages viewed, and actions taken within the dashboard.
• Cookies and similar technologies: Session cookies, authentication tokens, and analytics identifiers used to maintain sessions, measure usage, and improve the Service.

2.4 Information About Leads (End Users)

When a lead interacts with a Customer's Instagram account, we may process, on behalf of that Customer:

• The lead's Instagram handle and display name.
• Message content the lead sends to or receives from the Customer's account.
• Behavioral signals derived from the conversation (for example, inferred goals, objections, or qualification status) used to route the conversation and report on pipeline performance.

dmset.ai does not directly solicit, collect, or store personal information from leads outside of this Customer-authorized context.

3. How We Use Information

We use information to:

• Provide, operate, secure, and improve the Service.
• Generate AI replies, route conversations, and update pipeline stages on behalf of Customers.
• Authenticate users and prevent fraud or abuse.
• Process billing and manage subscriptions.
• Communicate with Customers about account changes, security events, product updates, and support.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not train shared or third-party AI models on Customer data or on the content of Customer conversations.

4. How We Share Information

We share information only in the following circumstances:

• Subprocessors: Vetted vendors that power the Service, including cloud hosting, database (Supabase), AI model inference (Anthropic, OpenAI), email delivery, payment processing, and analytics. Each subprocessor is bound by written agreements that require appropriate security and confidentiality obligations.
• Customer-authorized integrations: ManyChat, Instagram (via ManyChat), Calendly, and any other integration you explicitly enable.
• Legal and safety: When required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of dmset.ai, our Customers, or the public.
• Corporate transactions: In connection with a merger, acquisition, financing, or sale of assets, subject to notice where required by law.

5. Data Retention

We retain account data for as long as your account is active and as needed to provide the Service. Conversation data processed on behalf of a Customer is retained until the Customer deletes it or closes the account, subject to limited backup retention for up to 30 days for disaster recovery purposes.

You may request deletion of your account and associated data at any time by emailing privacy@dmset.ai. We will honor verified requests within a reasonable timeframe, subject to any legal or regulatory obligation to retain specific records.

6. Security

We implement technical and organizational measures designed to protect information, including:

• Encryption in transit (TLS 1.2+) and at rest.
• Tenant isolation and per-account row-level security in our database.
• Role-based access controls and least-privilege production access.
• Audit logging, monitoring, and periodic security reviews.

No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify affected Customers without undue delay in accordance with applicable law.

7. International Transfers

dmset.ai is operated from the United States, and your information may be transferred to and processed in the United States and other countries where our service providers operate. Where required, we use appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, or to object to processing and withdraw consent. California residents have specific rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information, as well as the right not to be discriminated against for exercising those rights.

To exercise any of these rights, email privacy@dmset.ai. We may need to verify your identity before responding. If you are a lead whose data is processed on behalf of a Customer, please contact the Customer directly; we will assist the Customer in responding to your request.

9. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us and we will take steps to delete it.

10. Third-Party Links and Services

The Service may link to or integrate with third-party websites and services, including Instagram, ManyChat, Calendly, and payment processors. Their practices are governed by their own privacy policies, and we are not responsible for their practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or requests, contact:

Inflo Partners — dmset.ai
Email: privacy@dmset.ai
General inquiries: shariq@inflopartners.com