Privacy for the Doodi workspace

Updated October 24, 2026. Doodi is operated by Doodi. For account, privacy, or deletion requests, email Doodi support.

Your account and work

Doodi uses your account email and sign-in information to open your workspace. Projects, editable designs, campaign messages, settings, and supporting files sync with the hosted Doodi account backend. The Mac app also uses local working files. Your account separates your workspace from other customers' workspaces.

License activation

We store a hash of each activation key, the account linked to it, license limits, publishing entitlement, and activation events. The app computes a Doodi-specific hash of your Mac's hardware identifier for device checks. It sends this hash, your device name, and activation timestamps to the license service. The raw hardware identifier is not sent to the service. You can rename or deactivate your listed devices from Account settings. Deactivation frees a slot and does not delete your synced work.

Purchases

Enter your email on the pricing page to start a purchase. After payment, your license is attached to a Doodi account and a secure sign-in link is emailed to you. Secure, HTTP-only account cookies keep you signed in and refresh your session for up to 30 days. Signing out removes these cookies.

Stripe handles payment details on its hosted checkout. Doodi receives your purchase email, payment and checkout references, payment status, amount, and currency to issue and administer your license. Doodi does not receive or store your full card number or security code. A secure, HTTP-only checkout cookie lets the browser that started a purchase retrieve its activation key. This cookie lasts up to 30 days and is used for payment confirmation, not advertising. Full refunds deactivate the license associated with that purchase.

Services you choose to use

Creative requests and the context needed for those requests go to the AI service connected to your app. That service has its own privacy terms and usage rules. Publishing sends the selected content and account information to Doodi's hosted Postiz service and the social platform. Postiz stores social credentials, channel information and the publishing content you send. Disconnect a channel in Apps → Social accounts → Disconnect account. Published platform posts remain. The social deletion instructions explain how to request deletion of retained connection and publishing data. Google Ads and Meta Ads connections use a separate hosted connection service. Its credential handling and deletion process are described in the connection privacy notice.

Storage and your choices

Account and project data is retained to provide your workspace. License and device records are retained for activation, device limits, and license administration. Infrastructure processes technical logs needed to operate and protect the services. This landing page does not load advertising analytics or tracking cookies. The app stores authentication state to keep you signed in.

Email us to request access to or deletion of account data, or to resolve an activation problem. We may verify that you control the account before acting. Removing a social connection and deleting your Doodi account are separate requests. Export the designs you need before requesting account deletion.