DugganUSA Privacy Policy
Effective October 9, 2026. DugganUSA LLC is a Minnesota company that publishes threat intelligence. This page says what personal information we collect, why, who else handles it, and how to get it changed or deleted. We do not sell personal information and we do not run advertising.
What we collect
When you register for an API key or buy a plan: your email address, any name or company you give us, your plan, and how much you use the service.
When you pay: Stripe processes the payment. We receive your email, billing country and subscription status from Stripe. We never see or store your card number.
When you use our websites and APIs: your IP address, browser user agent, the page or endpoint you requested and the time. We use this to keep the service running and to detect and block abuse. In some analytics we store a one-way hash of your IP address instead of the address itself; our security logs keep the address.
When you search: the words you search for, so we can improve results and spot abuse.
When you email us: the message and your address. Our team reads it, and AI assistants help sort messages and draft replies.
When you rate a post or send feedback: your rating and any comment you write.
Our websites use Google Analytics and Microsoft Clarity, which set cookies to measure how pages are used.
About our threat feed
Our feed lists IP addresses, domains, URLs and file hashes associated with malicious activity. These describe infrastructure, not people. If you believe something you control is listed in error, email [email protected] and we will review it.
Who else handles this information
We use these services to run DugganUSA, and each receives only what it needs for its job: Microsoft Azure (hosting, storage and email), Cloudflare (network and security), Wix (our blog), Stripe (payments), Google Analytics and Microsoft Clarity (site analytics), and AI model providers Anthropic, OpenAI, Google, Mistral and DeepSeek (helping us analyze threats, handle email and run AI-visibility audits of the company domains customers submit).
How long we keep it
We keep account and billing records while your account is active, and longer where tax and accounting rules require. Security and usage logs are kept while they are useful for protecting our systems. We are setting fixed retention periods for each kind of log and will list them here when they are in place.
Your choices
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We will answer within 30 days. Deleting your account information does not remove records we must keep by law, and it does not remove infrastructure indicators from the threat feed.
Changes
If we change this policy, we will update the date at the top of this page.
Was this useful? Rate this post. The widget is at the bottom of the page, and we read every response.
How do AI models see YOUR brand?
AIPM has audited 250+ domains. 15 seconds. Free while still in beta.
Was this useful? Thirty seconds, no cookies, no tracking, no third parties, your address hashed and never stored. If the box below does not load, the same question lives at https://analytics.dugganusa.com/nps.html?post=dugganusa-privacy-policy
Comments