Legal
Privacy Policy
This Privacy Policy explains how DuoDone collects, uses, stores, and shares personal information when you visit our website, create an account, use our services, or otherwise interact with us.
Last updated April 12, 2026
1. Scope and controller information
DuoDone is operated by Lhasa Labs LLC. For purposes of applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), Lhasa Labs LLC is the controller of the personal information described in this Privacy Policy unless a different role is stated for a specific processing activity.
This Privacy Policy applies to the DuoDone website, applications, and related services collectively referred to as the “Services.”
2. Information we collect
We may collect the following categories of personal information:
- Account information such as your name, email address, login credentials, and profile details.
- Collaboration content such as tasks, projects, comments, assignments, activity history, and other information you or your partner choose to store in the Services.
- Device and usage information such as browser type, IP address, approximate location, device identifiers, pages viewed, and interactions with the Services.
- Communications data such as support requests, feedback, and messages you send to us.
- Cookie and preference data as described in our Cookie Policy.
3. How we use personal information
We use personal information to:
- Provide, maintain, secure, and improve the Services.
- Authenticate users and manage accounts.
- Enable collaboration between invited users within shared spaces.
- Respond to support requests, legal requests, and operational communications.
- Monitor performance, prevent abuse, and detect fraud or security incidents.
- Comply with legal obligations and enforce our Terms of Service.
- Conduct analytics or marketing activities when lawful and when consent has been obtained where required.
4. Legal bases for processing
Where GDPR applies, we process personal data under one or more of the following legal bases:
- Performance of a contract when we provide the Services you request.
- Legitimate interests, including product improvement, security, and business operations.
- Consent where required, including for optional analytics or marketing cookies.
- Compliance with legal obligations.
5. How we disclose information
We may disclose personal information to:
- Service providers that help us host, support, secure, and operate the Services.
- Other users you intentionally collaborate with inside DuoDone.
- Professional advisers, auditors, insurers, or legal authorities where necessary.
- A buyer, investor, or successor entity in connection with a merger, acquisition, financing, or asset transfer, subject to appropriate confidentiality protections.
We do not sell personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising without providing required rights and controls.
6. International transfers and retention
Personal information may be processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for international data transfers, such as contractual protections.
We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, maintain security records, and enforce agreements.
7. Your privacy rights
Depending on where you live, you may have rights to:
- Access, correct, delete, or receive a copy of your personal information.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
- Opt out of certain sharing or advertising activities where applicable under CCPA or similar laws.
- Appeal a privacy decision where local law provides that right.
To exercise these rights, email lhasalabsllc@gmail.com. We may need to verify your identity before fulfilling a request.
8. Security, children, and updates
We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version here and revise the “Last updated” date above.
Questions
For privacy or legal questions, email lhasalabsllc@gmail.com or visit the Cookie Policy and Privacy Policy for additional details.
