Privacy Policy
Last updated: July 12, 2026
This policy explains how Duding ("we," "us") collects, uses, and shares information through duding.ai (the "Site") and our lead-intake and outreach services (the "Service"). It does not apply to CHKD (getchkd.app), which is a separate product with its own privacy policy.
1. Who we are
Duding builds and operates automated lead-intake systems for local service businesses (plumbers, HVAC, electricians, roofers, and similar trades). Contact: duding@duding.ai.
2. Information we collect
From businesses who submit a lead or contact form: name, email, business name, budget range, website link, and any other details you provide.
From businesses we contact directly: we identify prospective local service businesses using publicly available information (business name, publicly listed contact email, and public website content) found through web search and public business websites. If you did not sign up directly and received an email from us, this is why — see Section 5 on how to stop receiving these emails.
From clients who purchase a build or retainer: business details, payment information (processed by Stripe — we do not store your card number), ad account and social media login details you choose to share for retainer/marketing services, and communications with us.
Automatically: standard server logs (IP address, request timestamps, pages requested) and session cookies used to keep you signed in to the admin dashboard.
3. How we use information
- To respond to lead submissions and provide quotes/builds.
- To send outreach emails to prospective business clients about our services.
- To deliver purchased services (website builds, retainer marketing services) and process payments.
- To operate, secure, and improve the Site and Service.
4. Who we share information with
We share information with the service providers that power the Service, and only as needed for them to provide that service to us:
- Resend — email delivery.
- Stripe — payment processing. Stripe receives your payment details directly; we do not see or store full card numbers.
- Railway — application hosting and database infrastructure.
- Anthropic — used internally to help generate marketing content and business research for retainer clients; not used to process lead or payment data.
We do not sell personal information.
5. Outreach emails and opt-out
If you received a cold email from us, it's because we identified your business as a potential fit for our services using publicly available contact information. Every outreach email includes instructions to opt out — replying "unsubscribe" removes you from future contact. We do not re-contact a business domain once it has opted out.
6. Data retention
We retain lead, prospect, and client records for as long as reasonably necessary to operate the Service or as required by law (e.g. financial records related to payments). You may request deletion of your data at any time by emailing duding@duding.ai.
7. Your rights
Depending on where you're located, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise any of these rights, contact duding@duding.ai.
8. Security
We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) and access controls on administrative systems. No system is completely secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
10. Contact
Questions about this policy: duding@duding.ai.