Privacy Policy

This Privacy Policy explains what information Negotiation Tool ("the Service", "we", "us") collects when you use it, why, and what you can do about it. The Service is run by pobodoq. For the operator's details, see our Imprint.

1. Information we collect

Your account

When you create an account, we store:

• your name and email address
• your password, only as a one-way hash. An account made with Google may have none.
• a profile picture, if you upload one or one is taken from Google when you first sign in with it. We re-encode a picture from Google, which removes the location and camera details a photo file can carry.
• your two-factor authentication secret and recovery codes, encrypted, if you turn two-factor authentication on
• the public key and name of each passkey you add. A passkey's private key never leaves your device.

We use them to create your account, let you sign in, confirm your email address, reset your password and write to you about your account.

Signing in with Google

You can sign up and sign in with Google. When you do, Google tells us your account id there, your email address, your name and the address of your profile picture. We store the id, the email address and when you last used it, so that it can sign you in again. You can remove a connected account in Settings → Security, and we email you whenever one is connected or removed. What Google itself records is governed by its own privacy policy.

What you enter

Everything you enter is stored with your account: your negotiations (subject, counterparty, amounts, the situation, topics and numbers, your answers and comments, the strategy and tactics), the rounds you log, the templates you make, and what you note under Counterparties, including the names, roles and notes of people on the other side.

A negotiation is shown only to you and to the team members you add to it. Your own templates and your Counterparties are shown only to you.

What you note about other people is their personal data. Enter only what your negotiation needs and what you are allowed to keep.

Team members and invitations

When you add someone to a negotiation by their email address, they can see and change it. If no account uses that address, we send it one email saying that you invited them to the Service. We keep the address only until that email is sent.

AI, when you turn it on

AI is off until you turn it on in Settings → AI. There you choose the AI service: its address, its model and, if it needs one, an API key. We store these settings with your account, the API key encrypted, and never show the key again.

When you use a button marked AI, we send the parts of your negotiation that the button needs (for example the situation, your topics and answers, or your notes from a meeting) to the AI service you chose, and show you its reply. Nothing it writes is saved until you save it.

That service is chosen by you, not by us, and handles what it receives under its own terms and privacy policy. Do not send it anything you are not allowed to share with it. Without AI, the Service works in full and sends nothing to an AI service.

Technical data

When you use the Service, our servers record your IP address, your browser and operating system as your browser reports them, the time and the page requested. Your sign-in session is stored with your IP address and browser.

We use this data to run and secure the Service, prevent abuse, limit repeated sign-in attempts, and find and fix faults. It is deleted once it is no longer needed for that.

No analytics or advertising

We do not use analytics, advertising or tracking services, and we do not sell your data. The fonts and everything else on our pages come from our own servers, so your browser does not contact anyone else when you open them.

2. How we use your information

We use your data to:

• provide the Service and your account
• show a negotiation to you and the team members you add
• send the emails you need: confirming your address, resetting your password, and the invitations you ask for
• keep the Service secure and prevent abuse
• answer your questions and requests
• comply with legal obligations

We do not use your content to train AI models. We look at it only when you ask us for help with it, when the security of the Service requires it, or when the law requires us to.

3. Legal basis (GDPR)

If you are in the European Union or the European Economic Area, we process your data under the General Data Protection Regulation (GDPR) on these legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): your account, your content, the emails you need and the AI requests you make
• Legitimate interest (Art. 6(1)(f) GDPR): keeping the Service secure, preventing abuse, fixing faults, and the invitation email another user asks us to send you
• Legal obligation (Art. 6(1)(c) GDPR): where the law requires us to keep or hand over data

4. Where your data is stored

The Service runs on servers of Hetzner Online GmbH in Helsinki, Finland, in the European Union. Your account, your content and your profile picture are stored there.

5. How long we keep it

We keep your account and your content for as long as your account exists. You can delete your account at any time in Settings → Profile. That deletes your account, your profile picture, your connected accounts, your negotiations with their rounds, your templates, your Counterparties and your AI settings.

Negotiations owned by someone else, where you were a team member, stay with their owner, and you are removed from them. Technical data is kept only as long as it is needed for the purposes above.

6. Your rights

Depending on where you live, you may have the right to:

• Access: ask for a copy of your personal data
• Rectification: correct it. Most of it you can correct yourself in Settings → Profile and in your negotiations.
• Erasure: delete your account yourself, or ask us to delete your data
• Data portability: receive your data in a structured, machine-readable format
• Restriction and objection: ask us to restrict how we use your data, or object to a use based on legitimate interest
• Complaint: lodge a complaint with the data protection authority where you live or work

To use any of these rights, write to hello@dramagoapp.com from the email address of your account. We answer within one month.

7. Cookies

We use only the cookies the Service needs to work or that remember choices you made. None of them is for advertising or tracking, so we do not ask for your consent to them.

8. Third parties

• Hetzner Online GmbH: servers, database and file storage, in Finland
• Google: only if you sign in with it
• The AI service you choose: only if you turn AI on and use it, under that service's own terms

We do not share your data with anyone else unless the law requires us to.

9. Security

Connections to the Service are encrypted, passwords are stored only as hashes, and secrets such as two-factor codes and API keys are encrypted. No system is completely secure, though. You can protect your account further with two-factor authentication or a passkey in Settings → Security.

10. Children

The Service is meant for people 16 years of age or older. If you are younger, do not use it.

11. Changes to this policy

We may update this Privacy Policy. The new version is published on this page with its date. If a change matters for how we use your data, we tell you by email or in the Service before it takes effect.

12. Contact

For privacy questions and requests, write to hello@dramagoapp.com. The operator's details are in our Imprint.