Privacy Policy
Last updated: July 2026
The Double (“The Double”, “we”, “our”, or “us”) is a product operated by Cardtree Technologies Private Limited (“Cardtree”), a company incorporated in India.
This Privacy Policy explains how we collect, use, store, share, and protect information when you use The Double, thedouble.ai, digital profiles, AI Doubles, voice features, knowledge uploads, embedded widgets, integrations, workflows, and related services.
By using The Double, creating a profile, creating or interacting with a Double, uploading content, submitting information, or connecting integrations, you agree to this Privacy Policy and our Terms of Service.
If you do not agree, please do not use the Services.
1. About The Double
The Double helps professionals, teams, creators, and organizations create AI-powered digital identities that can communicate, answer questions, speak, collect leads, demonstrate content, and perform configured actions.
When someone interacts with a Double, they may be interacting with an AI-powered system, not directly with the real person or organization.
Depending on how the Services are used, Cardtree may act as a data fiduciary, controller, processor, service provider, or subprocessor under applicable privacy laws. Creators may also be responsible for the data they collect from visitors through their Doubles.
2. Information We Collect
We collect information needed to provide, personalize, secure, and improve The Double.
Information you provide
This may include:
name, email address, phone number, password, and authentication details;
profile photo, title, company, bio, location, links, and professional details;
username, workspace details, team settings, and account preferences;
brand assets, logos, banners, images, videos, documents, PDFs, audio, and other uploads;
knowledge base content used to configure your Double;
prompts, instructions, FAQs, rules, personality settings, and Double configuration;
voice samples, voice recordings, transcripts, and generated voice outputs;
messages, support requests, feedback, reports, and communications sent to us.
Information collected through Doubles
When a visitor interacts with a Double, we may collect:
messages sent to the Double;
AI-generated responses;
voice inputs and outputs, where enabled;
conversation transcripts;
lead form submissions;
name, email, phone number, company, role, or other information submitted by the visitor;
page URL, referral source, device details, browser, IP address, approximate location, usage data, and logs;
reports, feedback, abuse complaints, or takedown requests.
Creators may be able to view conversations, leads, analytics, and other information collected through their Doubles.
Information collected automatically
We may collect usage data such as pages visited, clicks, interactions, access times, device type, browser type, operating system, IP address, cookies, analytics data, error logs, security logs, and usage limits.
Information from third parties
We may receive information from trusted third-party sources, including LinkedIn or other authentication providers, public professional profiles, company data providers, brand or website metadata providers, integrations connected by you, and service providers that help us operate the platform.
We do not knowingly buy, sell, or use personal data from unauthorized sources.
3. Voice Data and Voice Cloning
If you use voice features, we may collect and process voice recordings, voice samples, transcripts, generated audio, and related metadata.
You may only upload or use a voice if:
the voice is yours;
you have explicit permission from the person whose voice is used;
you have the legal right to create and use an AI voice clone.
You are responsible for ensuring that any voice recording or voice clone you upload, create, or use is lawful and authorized.
We do not use your private voice recordings, voice clones, or voice conversations to train public or foundation AI models unless you explicitly opt in or separately agree in writing.
4. AI Processing and Model Training
Your Double works based on the content, context, permissions, and settings you provide.
We may process your content through AI models, voice systems, infrastructure providers, and other service providers to generate responses, operate features, improve reliability, detect abuse, and secure the platform.
We do not use private customer data, uploaded knowledge, private conversations, lead data, Google user data, or voice recordings to train public or foundation AI models unless you explicitly opt in or separately agree in writing.
We may use aggregated, anonymized, de-identified, or operational data to improve platform safety, reliability, performance, abuse detection, and product quality.
5. Google User Data
If you connect your Google account, including Gmail, Google Calendar, Google Sheets, or related services, The Double may access limited Google user data required to provide user-facing features that you authorize, configure, or request.
This may include:
drafting or sending emails;
reading specific emails or threads you ask the Double to use;
checking calendar availability;
scheduling or updating calendar events;
reading or updating specific spreadsheets;
completing user-configured workflows.
We do not sell Google user data, use it for advertising, or use it to train public, shared, generalized, or foundation AI models.
We only transfer Google user data when necessary to provide or improve the user-facing features you authorize, comply with law, protect security, or as otherwise permitted by applicable Google policies.
You can revoke Google access at any time through your Google account settings.
The Double’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
6. How We Use Information
We use information to:
create and operate your account;
create, personalize, display, and operate your profile or Double;
process uploaded knowledge, prompts, files, instructions, and voice data;
provide chat, voice, lead capture, demo, workflow, and integration features;
show analytics and engagement insights;
process actions you request or configure;
provide support and product updates;
detect and respond to fraud, spam, scams, impersonation, abuse, illegal activity, and security incidents;
enforce our Terms, Community Guidelines, and Takedown Policy;
comply with legal obligations;
protect users, visitors, creators, third parties, and Cardtree.
We do not sell your personal data.
7. Legal Bases and Consent
Where applicable law requires a legal basis, we process personal data based on one or more of the following:
your consent;
performance of a contract;
compliance with legal obligations;
legitimate interests, such as operating, securing, improving, and protecting the platform;
protection of users, visitors, creators, Cardtree, or third parties;
establishment, exercise, or defense of legal claims.
Where processing is based on consent, you may withdraw consent, subject to legal, contractual, operational, fraud-prevention, and security limitations.
8. Visibility and Public Content
The Double gives users control over profile and Double visibility.
You may be able to set your profile or Double as:
Private: visible only to you;
Unlisted: visible through a direct link;
Public: visible to anyone and may be indexed by search engines.
If you make your profile, Card, Double, or content public, it may be viewed, copied, screenshotted, shared, indexed, cached, or distributed by others. We cannot fully control third-party copies, screenshots, search engine caches, or external sharing.
Public profiles or Doubles may appear in discovery, showcases, newsletters, social highlights, examples, or promotional contexts. We will not intentionally expose private or unlisted content in public promotional contexts.
9. AI Disclosure and Synthetic Content
Visitors should understand when they are interacting with AI.
We may display banners, labels, notices, metadata, watermarks, or other disclosures that identify AI-generated, AI-assisted, synthetic, or manipulated content.
Creators must not remove, hide, obscure, or contradict required AI disclosures.
Where required by law, AI-generated or AI-manipulated content must be disclosed, labelled, or marked appropriately.
10. Lead Collection and Visitor Data
If a Creator uses a Double to collect leads or visitor information, the Creator is responsible for:
providing required privacy notices;
obtaining consent where required;
explaining how visitor data will be used;
complying with marketing, anti-spam, telemarketing, and data protection laws;
securing and lawfully using exported or downloaded lead data;
honoring deletion, access, and consent requests where applicable.
The Double provides the technology, but Creators are responsible for how they deploy and use lead collection features.
11. Embedded Doubles
Creators may embed Doubles on websites, landing pages, apps, or third-party properties.
If you embed a Double, you are responsible for where it appears, what disclosures are shown, whether visitor consent is required, cookie and tracking compliance, how conversations and leads are used, and ensuring the Double does not mislead visitors.
12. Sharing of Information
We may share information with the following parties where needed.
Service providers
We may share information with hosting providers, AI providers, voice providers, analytics tools, email providers, security tools, customer support tools, infrastructure providers, and other vendors that help us provide the Services.
Creators and workspace admins
If you interact with a Creator’s Double, that Creator or workspace admin may receive your conversations, lead submissions, analytics, and interaction data.
Third-party integrations
If you connect or authorize an integration, we may send or receive data from that integration to provide the feature you requested.
Legal, safety, and enforcement purposes
We may disclose information where we believe it is necessary to comply with law, respond to legal process, enforce our policies, investigate fraud or abuse, prevent harm, protect rights, or address security and platform integrity risks.
Business transfers
If Cardtree is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction.
13. Fraud, Misuse, and User Responsibility
The Double is a user-generated AI platform.
We are not responsible for fraudulent, illegal, misleading, harmful, or unauthorized acts committed by users, creators, visitors, or third parties using or sharing content from the platform.
However, we take credible reports seriously. If we receive a report with sufficient evidence showing that a profile, Double, voice, page, account, or content violates our Terms, Community Guidelines, Takedown Policy, or applicable law, we will review it and may take appropriate action, including restricting, disabling, suspending, or removing the reported content or account.
14. Data Retention
We retain information for as long as reasonably necessary to provide the Services, maintain accounts and Doubles, preserve conversations and leads, comply with legal obligations, resolve disputes, prevent fraud and abuse, enforce our policies, and maintain security records, backups, and audit logs.
You may request account deletion at any time.
Some data may remain in backups, logs, security records, abuse records, invoices, legal records, or archived systems for a limited period where necessary.
15. Data Security
We use reasonable technical, organizational, and administrative safeguards to protect personal data.
These may include encryption in transit, secure storage, access controls, monitoring, logging, vendor controls, internal restrictions, and security reviews.
No system is completely secure, and we cannot guarantee absolute security. Users are responsible for keeping their account credentials safe.
16. International Data Transfers
Your information may be processed and stored in India, the United States, the European Economic Area, or other regions where we or our service providers operate.
Where required, we use appropriate safeguards for international data transfers.
17. Your Rights
Depending on your location and applicable law, you may have rights to:
access your personal data;
request correction, completion, or updating;
request deletion or erasure;
withdraw consent;
object to or restrict processing;
request a copy of your data;
request data portability;
opt out of sale or sharing where applicable;
limit the use or disclosure of sensitive personal information where applicable;
file a grievance or complaint;
nominate another person to exercise rights where applicable.
To exercise your rights, contact [email protected].
We may need to verify your identity before processing requests. We may refuse or limit requests where permitted by law.
18. Children and Minors
The Double is not intended for children under 16, unless a higher minimum age applies in your jurisdiction.
We do not knowingly collect personal data from children in violation of applicable law.
We prohibit child sexual exploitation, grooming, abuse, and sexual or exploitative content involving minors. We may remove such content, terminate accounts, preserve evidence, and report to authorities where required or appropriate.
19. Sensitive Personal Data
Do not submit or collect sensitive personal data unless it is necessary, lawful, disclosed, and protected.
Sensitive personal data may include health information, financial information, government IDs, biometric data, precise location, children’s data, private communications, employment records, customer records, religious views, political views, caste, race, ethnicity, sexual orientation, or similar sensitive information.
Creators are responsible for any sensitive data they collect through their Doubles.
20. Cookies and Analytics
We use cookies and similar technologies for functionality, analytics, security, preferences, and product improvement.
Disabling cookies may affect certain features.
If we use advertising or retargeting cookies in the future, we will provide appropriate notices and choices where required.
21. Changes to This Policy
We may update this Privacy Policy from time to time.
The “Last updated” date reflects the latest version.
Your continued use of the Services after changes become effective means you accept the updated Privacy Policy.
22. Contact Us
Cardtree Technologies Private Limited
Operator of The Double
Email: [email protected]
Location: Bengaluru, India
Summary
The Double enables professionals to build and operate AI-powered identities with full control over visibility and data usage.
Your data is used only to power your Double and its features, never for advertising or resale.
