Privacy Policy

Last Updated: June 2026

Protecting your personal data is a top priority for us. This Privacy Policy informs you about how we process your information when using Davo Workspace.

§ 1 Data Controller

The entity responsible for data processing under the EU General Data Protection Regulation (GDPR) and international privacy frameworks is:

§ 2 Categories of Processed Data

To provide you with the services of Davo Workspace, we process the following data categories:

• Account & Registration Data: Email address, encrypted password, selected subscription tier.
• Usage & Chat Content: Texts entered by you, uploaded documents (.pdf, .docx), active interface modes, and language settings used to generate and save your history.
• Emergency SOS Contact: The trusted phone number voluntarily provided by you within your profile settings.
• Legal Compliance Consent Logs: To protect against liability claims, when you accept our initial Hard-Gate disclaimer, we log:
  • Your masked and fully anonymized IP address (the final octet is zeroed out to comply with GDPR data minimization standards),
  • the active application language at the time of consent,
  • the User-Agent string (browser type and operating system environment),
  • the precise timestamp of your confirmation.

§ 3 Critical Notice on Special Categories of Sensitive Data

Davo is not a medical device and is intended solely for administrative, stimulus-reduced organizational assistance. Users are strictly requested **not to input any sensitive personal data, medical diagnoses, or mental health histories** into the platform. We do not intentionally collect or process data falling under Art. 9 GDPR or sensitive health-related data definitions under US state privacy laws.

§ 4 Legal Basis for Processing (EU/UK) & State Compliances (US)

1. Performance of Contract (Art. 6(1)(b) GDPR): Your account, chat contents, and file processing are handled strictly to fulfill our software provision obligations (SaaS).

2. Legitimate Interests (Art. 6(1)(f) GDPR): Logging anonymized consent parameters represents our legitimate legal interest in establishing a verifiable defense chain against potential liability claims in global jurisdictions, including the United States.

§ 5 Third-Party API Integrations & AI Systems

1. To process and structure your data, text and files are transmitted via secure, encrypted TLS APIs to external artificial intelligence infrastructures.

2. Under strict Data Processing Agreements (DPA), we guarantee that your data **is never utilized for training public AI models** and is deleted or cached strictly within your private database environment after execution.

§ 5a Specific Information on Google User Data (Google Calendar Sync)

1. When you activate the Google Calendar synchronization feature in your profile, the software accesses the event data of your primary Google Calendar exclusively in read-only mode (calendar.events.readonly).

2. Compliance with Google Policies (Limited Use): Davo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. No Sharing or Use for AI Training: The event data retrieved from your Google Calendar is processed solely to display your events chronologically on your personal timeline within the Davo Workspace. This data is never shared with third parties, sold, analyzed for advertising purposes, or used to train large language models (AI).

§ 6 Your Data Privacy Rights

Depending on your location (GDPR/UK-GDPR/CCPA/APPI), you have the right to request **Access, Rectification, Portability, and Complete Erasure (Right to be Forgotten)** of your data. You may irrevocably delete your chats or account at any time within the platform UI, which immediately purges the information from our active MySQL servers.