Account & Settings
Security & Privacy
Doughy takes the security of your data seriously. Here's how we protect your information.
Workspace Isolation
Every Doughy account operates in its own isolated workspace:
•Your data is separate — contacts, properties, documents, and agent activity are completely isolated from other users
•No cross-account access — agents in one workspace cannot see or interact with another workspace's data
•Independent configuration — your settings and integrations don't affect anyone else
This isolation is fundamental to how Doughy is built, not a feature that can be turned off.
Encryption
All data is encrypted in transit using TLS. Integration credentials are stored securely and never exposed in logs.
Access Controls
•Email + password — at least 8 characters, with an uppercase letter, a lowercase letter, a digit and a special character
•Session management — you are signed out automatically 7 days after you sign in
•Team permissions — an admin invites teammates from Settings > Team as an admin or a standard member; view-only access is coming soon
AI Data Usage
•Your data is not used to train AI models. Your conversations, documents, and business data stay in your workspace.
•Agent interactions are processed to provide responses but are not retained for model improvement.
•You own your data. Exporting your contacts, properties and maintenance records as CSV yourself is coming soon. Until then, email hello@doughy.app and we'll prepare a complete copy of everything we hold.
Compliance
•Data retention — we retain your data only while your account is active, plus 30 days after cancellation
•Data export — ask us for a complete copy of your data at any time; downloading it as CSV yourself is coming soon
•Data deletion — request complete deletion of your account and all associated data
•Breach notice — if a breach affects your personal information, we notify affected users without undue delay, and within any deadline applicable law sets
Best Practices
We recommend these steps to keep your account secure:
1.Use a strong, unique password — don't reuse passwords from other services
2.Review agent activity regularly — check the Activity Log weekly
3.Audit integrations — disconnect services you no longer use
4.Read approvals before you approve — anything leaving your workspace waits for you, which only helps if you actually look at it
5.Watch your usage — unexpected spending can indicate misconfigured automations