Privacy Policy

Dragonfly Inc. (“Dragonfly,” “we,” “us,” or “our”) provides a self-improving go-to-market platform. This Privacy Policy explains what personal information we collect from visitors to www.dragonfly.com and customers of the Dragonfly platform, how we use it, and the choices you have. It applies to data we process as a controller. When we process customer data on behalf of a Dragonfly customer (as a processor), the customer's own privacy policy and our Data Processing Agreement govern.

1. Information we collect

Account information. When you sign up, we collect your name, email address, and (optionally) phone number, company, and role.

Billing information. If you subscribe to a paid plan, Stripe collects and stores your payment method. We retain the last four digits of the card and the country of issuance for receipts and tax; we never store the full card number on our servers.

Usage information. We log pages viewed, features used, errors encountered, and the IP address and user agent of your device. We use this to operate, secure, and improve the platform.

Cookies and similar technologies. We use first-party cookies for authentication and security. We do not use third-party advertising cookies. If we add product analytics, we will list the provider here and update this policy.

Marketing form submissions.If you fill out a “Get a demo” or similar form, we collect your name, email, phone number (optional), and the Cloudflare Turnstile token used to verify you are not a bot.

Customer-uploaded data. When you import contacts, leads, signals, or other content into Dragonfly, you are the controller of that data and Dragonfly is the processor. See our Data Processing Agreement for details.

2. How we use your information

• Provide and operate the Dragonfly platform.
• Authenticate users and protect against fraud and abuse.
• Bill paid plans and send transactional receipts.
• Send product announcements and (rarely) marketing email — you can opt out at any time using the unsubscribe link in the message.
• Respond to your support requests.
• Diagnose errors, monitor performance, and improve the product.
• Comply with applicable law and respond to lawful requests from authorities.

3. How we share your information

We do not sell your personal information. We share it only with:

• Sub-processors that help us deliver the platform. Current sub-processors include Stripe (billing), Resend (email delivery), Cloudflare (CDN, captcha, and DNS), and our cloud provider for compute and storage. A current list is available on request to privacy@dragonfly.com.
• Service providers under contract (e.g. analytics, customer support tooling) who only process data on our behalf and under our instructions.
• Authorities when required by law, court order, or to protect the rights, property, or safety of Dragonfly, our customers, or the public.
• A successor in the event of a merger, acquisition, or sale of all or substantially all of our assets, with notice to you.

4. How long we keep it

We retain account information for as long as your account is active, plus a short window after closure to handle billing reconciliation, legal obligations, and audit. Logs and analytics are retained for up to 90 days unless we need them longer for security investigation. You can request deletion of your account and associated data at any time by emailing privacy@dragonfly.com.

5. Your rights

Depending on where you live, you may have rights under the GDPR (EU/UK), CCPA/CPRA (California), or similar laws, including the right to access, correct, delete, port, or restrict our use of your personal information, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email privacy@dragonfly.com. We respond within 30 days and may need to verify your identity first.

6. Security

We use TLS in transit, encryption at rest for stored data, role-based access controls, audit logging, and the principle of least privilege. No system is perfectly secure; if you discover a vulnerability please email security@dragonfly.com and we will respond promptly.

7. International transfers

Dragonfly is operated from the United States. If you access the platform from another country, your information will be transferred to and processed in the US. For transfers from the EU, UK, or Switzerland, we rely on the Standard Contractual Clauses (or, where available, an adequacy decision) as the lawful transfer mechanism.

8. Children

Dragonfly is not directed to children under 16 and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes we will post the updated policy here, update the “Last updated” date, and (for changes that affect existing customers) notify you by email.

10. Contact

Questions, requests, or complaints? Email privacy@dragonfly.com.