← Dialmate AI

Privacy Policy

Effective Date: 25 March 2026 · Last Updated: 6 April 2026

Operated by Evango Group · contact: sayanpm17@gmail.com

1. Who We Are

Dialmate AI (“we”, “our”, “us”) is an AI-powered revenue intelligence platform developed and operated by Evango Group. Our products include DialScan Hub, Korra, DialStream, DialOut, and Vox. This policy governs all data collected through www.dialmateai.com and its sub-applications.

2. Information We Collect

  • Account Data: Name, email address, and profile picture provided via Google, GitHub, or GitLab OAuth sign-in.
  • Documents: Files you upload to DialScan Hub are stored securely in Azure Blob Storage under a private, per-user namespace.
  • Google Data: If you grant Gmail/Drive permissions, we access only the attachments or files you explicitly choose to import. We do not read, store, or share your email inbox beyond what is required by your import request.
  • Usage Data: Page views, feature interactions, and error logs for internal analytics and product improvement.
  • Payment Data: Stripe handles all payment processing. We do not store credit card numbers.

3. How We Use Your Data

  • To authenticate your identity and secure your account.
  • To process and store documents you upload for AI intelligence generation.
  • To send transactional emails (document exports, confirmations) via Azure Communication Services.
  • To enforce plan limits and usage quotas.
  • To improve our AI models and product features.

We do not sell, rent, or trade your personal data to third parties.

4. Google API Scopes

When you sign in with Google and grant optional permissions, Dialmate AI requests the following scopes:

  • openid profile email — Basic identity for sign-in
  • gmail.readonly — To allow you to import email attachments into DialScan. We only access messages you explicitly select.
  • drive.readonly — To allow you to import Drive files into DialScan.
  • drive.file — To export your AI-generated documents back to your own Drive.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage & Security

All user data is stored in Microsoft Azure (US region). Documents are isolated per-user using unique namespaces. We use HTTPS, HttpOnly cookies, and signed JWTs to protect your session. Microsoft Defender for Storage scans uploaded files for malware.

6. Data Retention

You can delete your documents at any time from within DialScan Hub. Account data is retained until you request deletion. To delete your account and all associated data, email sayanpm17@gmail.com.

7. Third-Party Services

  • Stripe — Payment processing
  • Azure (Microsoft) — Compute, storage, AI, and email delivery
  • Google — OAuth authentication and optional Drive/Gmail integration
  • Meta (Facebook / Instagram) — Social publishing via DialStream (see Section 8)
  • Postiz — Self-hosted social scheduling engine used as the execution backend for Facebook and Instagram publishing

8. Facebook & Instagram Data (DialStream)

DialStream is our social content publishing product. When you connect a Facebook Page or Instagram Professional account through DialStream, the following applies:

  • Data Accessed: We request only the permissions necessary to schedule and publish posts on your behalf — typically pages_manage_posts, pages_read_engagement, instagram_basic, and instagram_content_publish. We do not access your personal Facebook profile, friends list, messages, or ad account.
  • How Data Is Used: Page and account identifiers are stored in your DialStream workspace to route scheduled posts to the correct channel. Post content you compose is held in Azure Blob Storage under your private user namespace until published or deleted.
  • Processor: Post scheduling and publishing is executed by Postiz, a self-hosted service running in our Azure infrastructure. No Facebook/Instagram data is shared with any third-party advertising or analytics provider.
  • Retention: Social account connection records are retained until you disconnect the account or delete your Dialmate AI account. Published post records are retained for 90 days for audit purposes, then automatically purged.
  • Data Deletion Requests: If you remove the Dialmate AI app from your Facebook account settings, Meta notifies us automatically via our Data Deletion Callback. We process the deletion within 30 days. You can also request deletion at any time by emailing sayanpm17@gmail.com.
  • Deauthorize Callback URL: https://www.dialmateai.com/api/meta/deauthorize
  • Data Deletion Callback URL: https://www.dialmateai.com/api/meta/data-deletion

9. Your Rights

You have the right to access, correct, or delete your data. You can revoke Google permissions at any time at myaccount.google.com/permissions. Contact us at sayanpm17@gmail.com for any data requests.

10. Changes to This Policy

We may update this policy periodically. Continued use of the platform after changes constitutes acceptance of the new policy.