Doddle HQ privacy notice

Effective 21 October 2026

Doddle HQ is an internal tool used only by staff of Doddle Software Ltd (registered in England and Wales, company number 16256282). It is not offered to the public, and only accounts belonging to our own team can be connected to it. Doddle Software Ltd is the controller of the data described here. Contact: hello@doddle.software.

Google data we access

When a team member connects a Google account, Doddle HQ requests permission to read, organise and send email in that account (Gmail "modify" scope) and to know its email address. It accesses email messages (headers, content and attachments), labels, drafts and read/starred status. It cannot permanently delete email.

How it is used

• To show, sync and search the account owner's own email.
• To archive, label, move, write and send email when the account owner asks.
• To let AI assistants the account owner authorises read messages and prepare drafts. Nothing is sent without the account owner's approval. Message content is sent to the assistant's provider only to carry out the request, and only to providers whose business terms do not allow training their models on it.

What we don't do

• We do not sell Google user data.
• We do not use it for advertising.
• We do not use it to train generalised AI or machine-learning models.
• We do not transfer it to others except as needed to provide the features above or to comply with the law.
• No one reads it except the account owner, unless they ask us to, it is needed for security, or the law requires it.

Doddle HQ's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage, retention and deletion

Data is stored on Cloudflare's infrastructure. Sign-in tokens are encrypted and are never shown in the app or given to AI assistants. Data from a connected account is kept while it stays connected; when it is disconnected, its stored data and tokens are deleted and remaining backup copies expire within 30 days.

Removing access

Disconnect the account in Doddle HQ, or revoke access at myaccount.google.com/permissions.