Privacy policy

Overview

Dodosend is a desktop email and calendar app for Google accounts. It has these parts:

• The desktop app that you install.
• The website at dodosend.com.
• The sign-in service at auth.dodosend.com.
• The API server at api.dodosend.com, which connects the app to Google.

This policy tells you which data we collect, how we use and protect it, and which choices you have.

Information we collect

How we use Google user data

Dodosend asks for the smallest set of Google permissions that it needs to operate as an email and calendar app. Each permission is for features that you use in the app.

Gmail (read, write, and send, "gmail.modify")

• Show your mailbox: messages, threads, labels, and attachments.
• Search your mail, and keep the app current with Gmail change notifications.
• Archive, label, and star messages, and mark them as read or unread.
• Move messages to the Trash, and restore them from the Trash.
• Create, edit, and delete drafts.
• Send messages and replies. For a scheduled send, our server sends the draft from Gmail at the time that you select.
• Show a thread again at the time that you set for a reminder.
• Unsubscribe from a mailing list when you tell the app to. Our server sends the one-click request of the sender, or sends the unsubscribe email from your account.
• Read your "send as" addresses, so that you can select the sender address.

Dodosend never deletes mail permanently. Messages that you move to the Trash follow the Trash rules of Gmail. You can restore them from Gmail.

Google Calendar events ("calendar.events")

• Show your events, which include the invitations that you receive by email.
• Create, edit, and delete events, and add Google Meet links.
• Accept, tentatively accept, or decline invitations.
• Do these actions on the calendars that you own or that you can edit.

Google Calendar list (read only, "calendar.calendarlist.readonly")

• Show the calendars in your account. You select which calendars to show, and the calendar for new events.

Limited Use

Dodosend's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. These rules apply:

• We use Google user data only to provide and improve the features in this policy.
• We do not use Google user data for advertisements, and we do not sell it.
• No person at Dodosend reads your mail or calendar. There are three exceptions: you give permission for support, a security investigation makes it necessary, or the law makes it necessary.
• We do not use Google user data to train or improve AI or machine learning models.
• The section "AI features" tells you which Google user data goes to AI providers, and why.

AI features

Two features send text to an AI model. Our servers send the text to the model and do not keep it.

Search interpretation. When you open a search as a tab and the search is a sentence, the app sends the sentence to our server. Our server sends at most 500 characters through Vercel AI Gateway to an OpenAI model. The model changes the sentence into search filters.

Closest mail. Closest mail finds the messages that are closest in meaning to a sentence that you type in search. For this, the app makes a vector for each message. A vector is a list of numbers that shows the meaning of a text. The app sends this text to our server, and our server sends it to Voyage AI:

• The subject, the sender, and the text of each message, one time for each message. The app removes link addresses and sends at most 8,000 characters.
• Each sentence that you use to search for closest mail.

Voyage AI returns the vectors. The vectors stay on your device, and our server does not keep the text or the vectors. We set our Voyage AI account to refuse data use. Because of this, Voyage AI deletes each text after it makes the vector. Voyage AI does not use the text to train models.

Where your data is

On your device. The desktop app keeps a local copy of your mailbox and calendar in a database in its data folder. This copy contains messages, drafts, labels, events, and the vectors for Closest mail. Your operating system user account protects this folder. The app keeps your Dodosend session credential in an encrypted vault. The key for this vault is in the keychain of your operating system: macOS Keychain, Windows Credential Manager, or the Linux Secret Service.

On our servers. Our API server processes each request in memory and does not store the content of your mail. There are two exceptions:

• The templates that you save, which our database keeps.
• Remote images in messages. The app loads them through our server, so that senders do not get your IP address. Our server keeps each image in memory for at most 24 hours.

Our database also keeps your account profile, OAuth tokens, sessions, the data that you save in Dodosend, and the Gmail sync state. A cache keeps short-term data, for example draft identifiers, for at most 24 hours.

At Google. Your mailbox and calendar stay in your Google account. Dodosend makes your changes there, and you can see them in Gmail and Google Calendar.

How we protect your data

• Encryption in transit. All connections between the app, our servers, Google, and our service providers use TLS.
• Encryption at rest. Our database and cache operate on Railway infrastructure, which encrypts its storage. We also encrypt your Google tokens before we store them. On your device, full-disk encryption protects the local database if your operating system uses it. The session vault is always encrypted.
• Token protection. Only our servers keep your Google tokens. We never write them to logs. Our servers refresh the tokens automatically. We delete them when you unlink a mailbox or delete your account. You can revoke them at any time on your Google Account permissions page, and our access stops immediately.
• Access control. Our API accepts a request only with your session, and only for your own accounts. Only the operator can access production systems, through provider consoles that require sign-in. Nobody has routine access to user data. We keep secrets in environment configuration, never in code.
• Least privilege. We ask only for the Google permissions in this policy, not for full access to your mailbox. We examine these permissions each time that the features change.
• Logs. Our server logs record data about requests, for example times, endpoints, status codes, and internal identifiers. The logs never contain subjects, message text, drafts, addresses, search text, session values, or tokens.
• Security incidents. If we find a security incident that affects your data, we tell you and the applicable authorities without undue delay.

Service providers

We share data only with the providers that we need to operate Dodosend. Each provider gets only the data that it needs for its task.

• Google. Google gives sign-in and the Gmail and Google Calendar APIs.
• Railway. Railway hosts our API server, sign-in service, database, and cache.
• Vercel. Vercel AI Gateway sends search sentences to OpenAI.
• OpenAI. An OpenAI model changes search sentences into filters.
• Voyage AI. Voyage AI makes the vectors for Closest mail.
• PostHog. PostHog records errors and app use, without mailbox content.
• Stripe. Stripe processes payments for paid plans.
• Resend. Resend sends beta invitation emails.
• GitHub. GitHub hosts the downloads of the desktop app.

We do not share data for advertisements, and we do not sell personal information. We can disclose information if the law makes it necessary.

Data retention and deletion

• We keep your account profile and OAuth tokens only while your account is active.
• When you unlink a mailbox in the app, we delete its tokens and stop the sync. The app also removes the local copy of that mailbox from your device.
• When you delete your account, we remove your profile, tokens, sessions, and all the data that you saved in Dodosend from our systems.
• Cache entries and stored images expire within 24 hours.
• Voyage AI deletes the text for Closest mail after it makes the vectors.
• PostHog keeps diagnostic data only for the time necessary to find and repair problems.
• When you uninstall the app, the uninstaller removes the local database. You can remove the vault entry from the keychain of your operating system.
• When you revoke Dodosend at myaccount.google.com/permissions, our access to your Google account stops immediately.

Our websites

Our websites, dodosend.com and auth.dodosend.com, use PostHog to count visits and to find errors. For this, PostHog keeps an identifier in your browser.

When you ask for the beta, we keep your email address and your answers to our questions. We also keep your platform, the page and the referrer, your browser user agent, and your PostHog identifier. We use this data to send your invitation and to write to you about the beta. Resend sends the invitation email. We keep this data until you ask us to delete it.

The download page asks GitHub for the latest version, and the download comes from GitHub. GitHub receives your IP address for these requests.

What we do not do

• We do not keep your passwords.
• We do not send marketing email.
• We do not sell your personal information.
• We do not delete your mail permanently.

Your rights

You can ask us to show, correct, or delete the personal data that we keep about you. Send your request to the address in "Contact". You can also delete your account in the app.

Account deletion

To delete your account, do these steps in the desktop app:

1. Open Settings.
2. In Account, select Delete account.
3. Type DELETE, and then select Delete account.

This removes your Dodosend user and its mailboxes from our systems. Your mail stays in Gmail.

Children's privacy

Dodosend is for a general audience and not for children. We do not knowingly collect personal data from children.

Changes to this policy

We can change this policy. When we change it, we change the "Last updated" date at the top of this page.

Contact

If you have questions about this policy, send an email to chergaoui@houdaifa.com.