Privacy Policy

Controller / operator: Dedic Infotech (DFlow / dsitesai.com)

Privacy contact email: dedicinfotech@gmail.com

Service home page: https://dflow.dsitesai.com

For privacy requests (access, correction, deletion, or questions about Google user data), email the address above. We aim to respond within 30 days.

This policy covers:

• Visitors to our public pages (home, privacy, terms, sign-in).
• Users who sign in with Google to use the DFlow dashboard.
• Users who connect third-party social platforms (YouTube via Google, LinkedIn, Meta/Facebook/Instagram, Threads, X, and similar) to publish or schedule content.

3.1 Information you provide or authorize through Google Sign-In

When you choose “Continue with Google”, we receive from Google (via OpenID Connect) information such as:

• Google account email address (required to identify your workspace).
• Google account unique subject identifier (`sub`).
• Name and profile picture URL, if Google provides them and you grant access.
• Whether the email is verified.

We request the Google scopes needed for sign-in: openid, email, and profile. We do not use Google Sign-In data for advertising.

3.2 Google / YouTube data when you Connect YouTube

Connecting YouTube is optional. When you do, we request these YouTube Data API scopes:

• https://www.googleapis.com/auth/youtube.upload — upload videos you submit in DFlow
• https://www.googleapis.com/auth/youtube.readonly — read channel information to connect and display your channel

Depending on those permissions, data may include:

• YouTube channel ID, title, and thumbnail.
• OAuth access tokens and refresh tokens for that Google/YouTube connection.
• Video metadata and media you choose to upload through DFlow (title, description, tags, privacy status, and the media file).
• Status information about uploads and publish attempts.

We only access YouTube/Google user data after you explicitly Connect the account and grant consent on Google’s consent screen. We use that data solely to provide the publishing features you request in DFlow.

3.3 Other connected social platforms

If you connect LinkedIn, Meta (Facebook/Instagram), Threads, X, or similar services, we collect account identifiers, display names, avatars, OAuth tokens, granted scopes, connection status, and errors returned by those APIs, solely to connect accounts and publish content you create.

3.4 Content and media you create in DFlow

• Post drafts, captions, titles, hashtags, and scheduling times.
• Images, videos, and other files you upload (stored in our configured object storage, e.g. Cloudflare R2).
• Publish history, attempt logs, and status (success, failure, retry).

3.5 Technical and security data

• Session cookie used to keep you signed in (HTTP-only).
• IP address, browser/user agent, timestamps, and diagnostic logs for security and troubleshooting.
• Basic product analytics necessary to operate the Service (not sold to data brokers).

We use the information above to:

• Create and secure your user account and private workspace.
• Authenticate sessions and prevent unauthorized access.
• Connect social accounts and refresh tokens when needed.
• Create, schedule, queue, and publish content to platforms you selected.
• Show dashboards, calendars, history, and account status.
• Provide optional AI-assisted caption/title suggestions when you use those features.
• Maintain, debug, protect, and improve the Service.
• Respond to support and privacy requests.
• Comply with law and enforce our Terms.

We do not sell personal information. We do not use Google user data for serving advertisements. We do not use Google user data for determining creditworthiness or for lending purposes.

DFlow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, for Google user data obtained via Google Sign-In and/or YouTube APIs:

• We use Google user data only to provide or improve user-facing features that are prominent in DFlow (sign-in and YouTube publishing/scheduling).
• We do not transfer Google user data to third parties except (a) as necessary to provide or improve those features, (b) for security purposes, (c) to comply with law, or (d) as part of a merger, acquisition, or sale of assets with notice where required—and never for serving ads.
• We do not allow humans to read Google user data unless you give us permission for support, it is necessary for security/compliance, or we are required by law—and then only with appropriate access controls.
• We do not use Google user data for advertising or AI model training unrelated to your requests in DFlow.

Where required (for example under GDPR-style rules), we process data based on:

• Contract — to provide the Service you requested (account, publishing, scheduling).
• Consent — when you authorize Google/YouTube or other OAuth connections.
• Legitimate interests — security, fraud prevention, and service improvement, balanced against your rights.
• Legal obligation — when we must retain or disclose information to comply with law.

We share information only as needed to operate the Service:

• Google / YouTube and other platforms you Connect — when you publish or authorize access, content and tokens are sent to those providers under their terms.
• Infrastructure processors — hosting, database, cache/queue, and object storage providers that process data on our instructions (for example VPS hosting, PostgreSQL, Redis, Cloudflare R2).
• AI providers — if you use AI assist features, prompt text you submit may be sent to the configured AI provider (for example Google Gemini) to generate suggestions.
• Legal / safety — if required by law, regulation, legal process, or to protect rights, safety, and security.

We do not sell or rent your personal information to third parties for their marketing.

We use an essential session cookie (for example msp_session) to keep you signed in after Google authentication. This cookie is HTTP-only and is not used for third-party advertising. You can clear cookies in your browser; doing so will sign you out.

Data is stored on servers and services we configure for DFlow (including our hosting environment for dsitesai.com / dflow.dsitesai.com). OAuth access and refresh tokens are encrypted at rest. We use HTTPS in transit for the public site and API. Access to production systems is restricted.

No security measure is perfect. You are responsible for securing your Google account and the devices you use to access DFlow.

If you access the Service from outside the country where our servers are located, your information may be processed in the server’s region.

We retain account profile data, connected-account records, content, media references, and publish history for as long as your account remains active and as needed to provide the Service.

You may:

• Disconnect a social account in DFlow (Accounts), which removes or invalidates that connection’s tokens for future publishing.
• Revoke DFlow’s access in your Google Account permissions (and equivalent settings on other platforms).
• Request deletion of your DFlow account and associated personal data by emailing dedicinfotech@gmail.com from the Google email on your account. We will delete or anonymize personal data within a reasonable period (typically within 30 days), except where we must retain limited records for security, dispute resolution, or legal compliance.

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal exceptions).
• Object to or restrict certain processing.
• Withdraw consent for OAuth connections (by disconnecting/revoking).
• Lodge a complaint with a supervisory authority where applicable.

To exercise these rights, contact dedicinfotech@gmail.com.

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

The Service links to and integrates with third parties (Google, YouTube, LinkedIn, Meta, X, hosting and storage providers, etc.). Their privacy practices are governed by their own policies. We encourage you to review them. We are not responsible for third-party practices.

We may update this Privacy Policy from time to time. We will change the “Last updated” date at the top of this page. For material changes, we may also provide additional notice (for example via the Service or email). Continued use after an update means you accept the revised policy.

Dedic Infotech — DFlow Privacy
Email: dedicinfotech@gmail.com
Web: https://dflow.dsitesai.com