Privacy Policy

1. Who is responsible

Dudu Technology Ltd. (嘟嘟數位科技有限公司) is responsible for the personal data described in this policy. Contact: info@dudustudio.monster.

2. The Vettalon product

Vettalon runs on your computer, makes no network connections by default, and sends no usage statistics or telemetry. Your code and scan reports stay on your machine and are never sent to us.

When you enable AI review, code snippets go straight from your machine to the model provider you configure, under that provider's privacy policy. With a local model such as Ollama, your code never leaves your machine.

The optional Jev module ranker is off by default. When enabled, it sends only metadata (file paths, sizes, git change hotspots) to the TypeSafe service, never code content.

Supply-chain hunting connects to package registries (crates.io, npm, PyPI, the Go proxy) and the OSV vulnerability database (api.osv.dev), sending only dependency names and versions.

3. Purchases and licensing

Payments are processed by our online reseller (the Merchant of Record). The reseller collects card and other payment details directly; we never see your full card number.

The reseller shares with us your name, email, billing country, company name (if provided), order details and license information. We use these to deliver your license key, provide support, handle refunds and keep legally required accounting records.

When you activate a license, the app sends the license key and a device identifier to the reseller's licensing service to check how many devices are activated. The device identifier is a random or hashed value and contains none of your code or file contents.

4. This website

This website sets no cookies and loads no third-party analytics or advertising trackers.

Our hosting provider (Google Cloud) keeps standard access logs, such as IP address, time, browser details and the requested URL, for security and troubleshooting.

5. Emails

When you email us, we keep your message and email address to reply and to support you afterwards.

6. Retention

Order and accounting records are kept for the periods required by Taiwan law, including the Business Entity Accounting Act (at least 5 years for accounting vouchers). Support emails are kept for up to 2 years after the issue is resolved. Website access logs follow our hosting provider's settings, normally no longer than 30 days.

7. Sharing and international transfers

We do not sell personal data. Your data is processed by service providers, such as our reseller, hosting provider and email provider, only as needed to provide the service, and may be disclosed to authorities where the law requires it.

These providers may process data outside Taiwan. We choose providers with appropriate data-protection safeguards.

8. Your rights

Under Article 3 of Taiwan's Personal Data Protection Act you may ask to access, review or obtain a copy of your personal data, supplement or correct it, have us stop collecting, processing or using it, and delete it.

If you are in the EU or UK, you also have your GDPR rights, including data portability and the right to object, and you may complain to your local data-protection authority.

To exercise these rights, email info@dudustudio.monster. We reply within 30 days. Accounting records still within their legal retention period cannot be deleted.

9. Changes

If we change this policy, we will post the update here with a new effective date. Material changes to how we use data will also be emailed to existing customers.