Privacy Policy
Last updated: March 20, 2025
Duri (“we,” “us,” or “our”) operates the Duri service accessible at duriworks.com and app.duriworks.com. Duri is an AI-powered messaging assistant that helps small business owners automate responses to customer messages on Instagram, WhatsApp, and Messenger.
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using Duri, you agree to the practices described in this policy.
1. Information We Collect
Account Information
When you sign up, we collect your email address and create an account for you using Firebase Authentication.
Connected Platform Data
When you connect your Instagram, WhatsApp Business, or Messenger account via Meta OAuth, we receive and store:
- Your Meta user ID and page/account identifiers
- Access tokens required to send and receive messages on your behalf
- Incoming customer messages sent to your connected accounts
- Message metadata (timestamps, sender IDs)
We do not collect personal information about your customers beyond what appears in messages they send to your business account.
Knowledge Base Content
We store the business information, FAQs, and other content you add to your Duri knowledge base. This content is used to generate AI responses to customer messages.
Usage Data
We collect standard web analytics data (page views, session data) via Vercel Analytics. This data is aggregated and does not identify individual users.
2. How We Use Your Information
We use the information we collect to:
- Provide the Duri service — reading incoming messages and sending AI-generated or manual replies on your behalf
- Generate and improve AI responses using your knowledge base
- Send you notifications when messages require your attention
- Authenticate you and secure your account
- Troubleshoot issues and improve the service
We do not sell your data or use it for advertising purposes.
3. Third-Party Services
Meta Platforms (Instagram, WhatsApp, Messenger)
Duri integrates with Meta Platforms, Inc. via the Meta Graph API and Meta Business Messaging APIs. When you connect a Meta account, you authorize Duri to access and manage messages on that account under Meta's terms and policies. Your use of these integrations is also subject to:
Firebase (Google)
We use Firebase Authentication (by Google) to manage user accounts. Google's privacy practices are described in the Google Privacy Policy.
Anthropic / Google AI
Message content may be processed by Anthropic's Claude API or Google's Gemini API to generate AI responses. Message data sent to these APIs is subject to Anthropic's and Google's respective data processing terms.
Vercel
Our web application is hosted on Vercel. Vercel may process request data as part of serving the application. See the Vercel Privacy Policy.
4. Data Retention
We retain your data as follows:
- Account data: Retained for the life of your account
- Message history: Retained for up to 12 months, then automatically deleted
- Knowledge base: Retained for the life of your account
- Access tokens: Retained while your Meta account is connected; deleted when you disconnect
When you delete your account, all associated data is permanently deleted within 30 days.
5. Data Security
We take reasonable measures to protect your data, including encrypted storage of access tokens, HTTPS-only communication, and authentication via Firebase. However, no system is completely secure, and we cannot guarantee absolute security.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Disconnect your Meta accounts at any time from within Duri or from your Meta account settings
- Export your knowledge base content
To exercise any of these rights, contact us at jecorona97@gmail.com.
7. Children's Privacy
Duri is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by email. Continued use of Duri after changes are posted constitutes your acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: