Privacy Policy

Effective Date: October 19, 2026
Last Updated: October 19, 2026

Website: https://dotbuffer.com
Company: DotBuffer
Contact Email: [email protected]

1. Introduction

Welcome to DotBuffer.

DotBuffer (“we,” “us,” or “our”) is a digital technology and software development company providing artificial intelligence solutions, business automation, custom software development, SaaS applications, eCommerce development, website development, and digital marketing services.

We respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, access, use, process, store, protect, share, and delete information when you:

• Visit our website at https://dotbuffer.com.
• Contact us regarding our products or services.
• Use applications, integrations, or software operated by DotBuffer.
• Connect third-party accounts, including Google services, through supported integrations.
• Use our AI-powered tools, automated workflows, or business applications.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

Where applicable law requires consent, we will obtain that consent before processing your information.

2. Information We Collect

We may collect information directly from you, automatically through your interactions with our services, or through third-party integrations that you authorize.

2.1 Personal Information

Depending on how you interact with DotBuffer, we may collect:

• Full name
• Email address
• Phone number
• Company or business name
• Website address
• Project requirements and business enquiries
• Information you voluntarily provide through forms, email, or other communications

We collect only information reasonably necessary to provide our services, respond to requests, and operate our business.

2.2 Technical and Usage Information

When you interact with our website or applications, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and navigation activity
• Dates and times of access
• Referring website addresses
• Application performance information
• Error logs and security events

This information helps us maintain service functionality, troubleshoot errors, improve performance, and protect our systems.

2.3 Account and Authentication Information

If you register for or authenticate with an application operated by DotBuffer, we may process:

• Your name and email address
• User account identifiers
• Authentication provider information
• Profile information permitted by the authentication provider
• Session and authentication records
• Account preferences

We use this information to identify users, manage authentication, and provide authorized application functionality.

3. Google Account Integration and Google API Services

Certain DotBuffer applications and automation solutions may offer optional integrations with Google services.

These integrations may use Google OAuth 2.0 to allow users to securely authorize specific permissions.

Google account access is optional unless a particular feature requires the relevant Google integration.

When you connect your Google account, Google displays the permissions requested by the application. DotBuffer accesses only the Google data permitted by the scopes you approve and required for the functionality being provided.

3.1 Google Account Profile Information

When Google Sign-In or Google account authentication is enabled, we may access basic account information such as:

• Name
• Email address
• Google account identifier
• Profile picture, where permitted

This information may be used to authenticate users, associate connected accounts with application profiles, and provide account-related functionality.

3.2 Google Drive Data

Where a DotBuffer application offers Google Drive integration and the user authorizes the necessary permissions, it may access Google Drive files, folders, and associated metadata within the scope of the granted authorization.

Depending on the functionality enabled, authorized operations may include:

• Locating and selecting files or folders
• Reading files needed for an approved workflow
• Uploading or creating files requested by the user
• Updating files as part of an authorized automation
• Organizing or managing files when explicitly permitted
• Retrieving file metadata necessary to perform requested operations

Google Drive data is used only to provide the user-requested integration or automation functionality.

3.3 Google Sheets Data

Where Google Sheets integration is provided and authorized, an application may read or modify spreadsheets that the user has permitted it to access.

Authorized operations may include:

• Reading spreadsheet records
• Adding new rows
• Updating existing records
• Retrieving spreadsheet metadata
• Synchronizing data with user-authorized business workflows

This information is processed to perform spreadsheet-related tasks requested or configured by the user.

3.4 Gmail Data

Where an application offers Gmail integration and the user explicitly authorizes the relevant permissions, it may process email information necessary for the enabled feature.

Depending on the approved functionality and permissions, this may include:

• Retrieving selected messages and metadata
• Reading message content needed for user-requested processing
• Preparing email drafts
• Sending emails when explicitly authorized
• Organizing or processing messages as part of a configured workflow

Gmail data is not accessed for unrelated purposes.

We do not use Gmail message content for unrelated advertising, profiling, or commercial data resale.

3.5 Google Calendar Data

Where Google Calendar integration is enabled and authorized, an application may process information such as:

• Calendar names and identifiers
• Event titles and descriptions
• Meeting dates and times
• Attendee information
• Calendar availability

Depending on user permissions, authorized functionality may include retrieving, creating, updating, or deleting calendar events.

3.6 Scope of Google API Access

Google API access is restricted to the permissions requested by the relevant application and approved through the Google authorization process.

Not every DotBuffer application requests or uses all of the Google services listed above.

The particular Google services and permissions used depend on the application, the connected features, and the user’s authorization.

We do not intentionally access Google account data beyond the permissions granted or use that data for purposes unrelated to the requested functionality.

4. How We Use Information

We may use information collected through our website and services to:

1. Provide, operate, and maintain our services.
2. Authenticate users and manage application accounts.
3. Respond to enquiries and customer support requests.
4. Develop and deliver custom software and automation solutions.
5. Execute workflows configured or approved by users.
6. Process data through authorized third-party integrations.
7. Improve reliability, security, and service performance.
8. Detect abuse, unauthorized access, or technical problems.
9. Communicate important account and service updates.
10. Comply with applicable legal obligations.

Information collected through Google API integrations is used only for the specific application features, integrations, or workflows authorized by the user, and for permitted security, operational, and compliance purposes.

5. Google API Services User Data Policy and Limited Use

DotBuffer is committed to complying with the Google API Services User Data Policy, including applicable Limited Use requirements.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide or improve user-facing features that are clearly disclosed and authorized.
• We do not sell Google user data to third parties.
• We do not use Google user data for targeted advertising or unrelated marketing profiling.
• We do not transfer Google user data to data brokers.
• We do not allow humans to read Google user data except where the user has given affirmative consent, where necessary for security or abuse investigations, where required by applicable law, or where the data has been appropriately aggregated and anonymized for permitted internal operations.
• We do not use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

Any transfer of Google user data to third-party service providers is limited to what is necessary to deliver approved functionality and is subject to appropriate confidentiality, security, and data protection obligations.

Google API data will not be used for any purpose prohibited by Google’s applicable policies.

6. AI Automation and Data Processing

DotBuffer provides AI-powered applications, chatbots, workflow automation, and software integrations.

When an AI-enabled feature is used, information may be processed to complete the specific task configured or requested by the user.

Depending on the application, this processing may involve:

• Analyzing user-submitted content
• Producing automated responses
• Organizing business information
• Extracting information from authorized documents
• Performing tasks across connected platforms
• Generating reports or summaries
• Supporting customer service or internal business processes

Where external AI technology providers are used, we disclose their involvement as appropriate to the relevant application or service.

We do not use Google Workspace API data to train generalized AI models.

Access to information through AI-powered workflows is restricted to the functionality and permissions approved by users.

Users should avoid submitting unnecessary sensitive personal information to AI-powered features.

7. Data Sharing and Third-Party Service Providers

We do not sell personal information.

We may share limited information with service providers when necessary to provide, operate, or secure our services.

Such providers may include:

• Website hosting and cloud infrastructure providers
• Email and communication service providers
• Authentication services
• Database and secure storage providers
• Payment processors, where applicable
• Software integration and workflow automation providers
• AI processing providers, where applicable
• Security, monitoring, and technical support services

Service providers are permitted to process information only for appropriate service-related purposes and under applicable contractual and legal obligations.

We may also disclose information where legally required, to protect against fraud or security threats, or in connection with legitimate corporate transactions subject to appropriate protections.

Google user data is shared only as permitted by Google’s applicable requirements and for purposes consistent with the user’s authorization.

8. Data Storage and Security

We implement reasonable technical and organizational safeguards intended to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Depending on the application and infrastructure, security measures may include:

• Encrypted HTTPS connections
• Access controls and authentication
• Restricted administrative permissions
• Secure credential management
• Application and server monitoring
• Security updates and vulnerability remediation
• Database and infrastructure protections
• Appropriate safeguards for stored authentication credentials and tokens

Where OAuth access or refresh tokens are retained, they are used to maintain authorized connections and are protected against unauthorized access.

We do not request or store users’ Google account passwords through Google OAuth integration.

Although we take reasonable security precautions, no system or internet transmission can be guaranteed completely secure.

9. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, maintain security, or resolve disputes.

Retention periods may vary depending on:

• The type of information
• The relevant application or service
• The duration of the business or customer relationship
• Legal and contractual obligations
• Security and operational requirements

Data obtained through Google integrations is retained only to the extent reasonably necessary for authorized functionality.

Where applicable, information may be deleted, anonymized, or securely disposed of once it is no longer required.

Some records may be retained for a longer period where necessary to comply with applicable law or enforce legitimate contractual rights.

10. Google Account Disconnection and Data Deletion

Users can revoke an application’s access to their Google account at any time.

To review or revoke Google account access, visit:

https://myaccount.google.com/connections

Revoking access prevents the application from obtaining additional Google user data using the revoked authorization.

Revocation does not necessarily delete information that was previously obtained and lawfully stored.

To request deletion of previously stored personal information or Google integration data, contact:

[email protected]

Please include:

• The application or service name
• The email address associated with the account
• A description of the deletion request

We may take reasonable steps to verify your identity before processing a request.

Following verification, we will review and process applicable deletion requests in accordance with legal and operational requirements.

Information that must be retained for legitimate legal or security purposes may be excluded from immediate deletion where permitted by law.

11. Cookies and Similar Technologies

Our website and applications may use cookies or similar technologies for purposes such as:

• Maintaining authenticated sessions
• Remembering user preferences
• Supporting website functionality
• Protecting against fraudulent or unauthorized activity
• Measuring website performance, where analytics are enabled

Where legally required, we will request consent before placing non-essential cookies.

Users may control or disable cookies through their browser settings, although doing so may affect certain website or application features.

12. International Data Processing

DotBuffer may use infrastructure or technology providers that process information in countries different from the user’s country of residence.

Where personal information is transferred internationally, we take appropriate steps to protect it in accordance with applicable data protection requirements.

The location of data processing may depend on the services, hosting providers, integrations, or software infrastructure used.

13. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information, including the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing activities.
• Request a copy of eligible personal information.
• Lodge a complaint with a relevant data protection authority.

To exercise any applicable privacy rights, contact [email protected].

We will assess and respond to requests in accordance with applicable legal requirements.

14. Children’s Privacy

Our business services and applications are not intended for children under the age of 13, or a higher minimum age where applicable law requires it.

We do not knowingly collect personal information from children without any required parental or guardian authorization.

If we discover that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to delete it.

Parents or guardians may contact us at [email protected] regarding relevant privacy concerns.

15. Third-Party Websites and Services

Our website and applications may contain links to or integrations with third-party services, including Google and other technology platforms.

Those services operate under their own terms and privacy policies.

We are not responsible for the privacy practices of independently operated third-party websites or services.

We encourage users to review the relevant privacy policies before authorizing or using external platforms.

16. Legal Compliance

DotBuffer processes personal information in accordance with applicable data protection, privacy, and consumer protection requirements.

Where applicable, we rely on lawful grounds for processing, including user consent, contractual necessity, legitimate interests, and compliance with legal obligations.

Our handling of Google user data is additionally subject to applicable Google API policies and authorization requirements.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our products and services
• Third-party integrations
• Data processing practices
• Security procedures
• Applicable laws or regulatory requirements

When updates occur, we will revise the “Last Updated” date at the top of this page.

Where required, we will provide additional notice or obtain consent before implementing material changes.

We encourage users to review this page periodically.

18. Contact Information

If you have questions regarding this Privacy Policy, data processing, Google API integrations, or personal information requests, please contact:

DotBuffer

Website: https://dotbuffer.com

Email: [email protected]

Privacy Policy: https://dotbuffer.com/privacy-policy

We are committed to addressing legitimate privacy enquiries and protecting information entrusted to our services.