Privacy Policy

DFlow by Dedic Infotech (dsitesai.com)
Effective / last updated: 3 November 2026 (revision for Google OAuth verification)
Home page: https://dflow.dsitesai.com
Canonical policy URL: https://dflow.dsitesai.com/privacy.html

This Privacy Policy describes how Dedic Infotech (“we”, “us”, “our”) collects, uses, stores, shares, and deletes personal information when you use the DFlow website and API (the “Service”), including https://dflow.dsitesai.com and https://dflow-api.dsitesai.com.

1. Who we are

• Legal / trade name: Dedic Infotech
• Product: DFlow (Create. Schedule. Publish.)
• Brand / related site: dsitesai.com
• Location: Tirunelveli, Tamil Nadu, India
• Privacy contact: dedicinfotech@gmail.com

For access, correction, deletion, or questions about Google user data, email the privacy contact. We aim to respond within 30 days.

2. What the Service does

DFlow is a social publishing dashboard. Users sign in with Google, optionally connect social accounts (YouTube, LinkedIn, Facebook, Instagram, Threads, X, and similar), then create, schedule, and publish content to those accounts. Each user has a private workspace.

3. Information we collect

3.1 Google Sign-In data

When you click “Continue with Google”, we receive from Google OpenID Connect:

• Email address
• Google subject identifier (sub)
• Name (if provided)
• Profile picture URL (if provided)
• Email verification status

Google OAuth scopes typically used for sign-in:

• openid
• email
• profile

3.2 YouTube / Google user data (only if you Connect YouTube)

Connecting YouTube is optional. After you grant consent, we request YouTube Data API scopes such as:

• https://www.googleapis.com/auth/youtube.upload — upload videos you submit in DFlow
• https://www.googleapis.com/auth/youtube.readonly — read channel information needed to connect and show your channel

Data we may process under those permissions includes:

• YouTube channel ID, title, and thumbnail
• OAuth access token and refresh token for your connection
• Video files and metadata you choose to publish (title, description, tags, privacy status)
• Upload / publish status and error messages returned by YouTube

We do not access your YouTube data until you explicitly Connect and approve Google’s consent screen.

3.3 Other social platforms you Connect

For LinkedIn, Meta (Facebook/Instagram), Threads, X, etc.: account IDs, display names, avatars, OAuth tokens, scopes, connection status, and API errors — only to connect accounts and publish content you create.

3.4 Content you create in DFlow

• Drafts, captions, titles, hashtags, schedules
• Uploaded images/videos (stored in configured object storage such as Cloudflare R2)
• Publish history and attempt logs

3.5 Technical data

• Session cookie (msp_session, HTTP-only) to keep you signed in
• IP address, user agent, timestamps, and security/diagnostic logs

4. How we use information

• Create and authenticate your account and workspace
• Keep you signed in via session cookies
• Connect and refresh social account tokens
• Create, schedule, queue, and publish content to platforms you select
• Show dashboards, calendars, history, and connection status
• Optional AI caption/title suggestions when you use that feature
• Secure, debug, maintain, and improve the Service
• Respond to support and privacy requests
• Comply with law and enforce our Terms of Service

We do not sell personal information. We do not use Google user data to serve advertisements. We do not use Google user data to determine creditworthiness or for lending. We do not use Google user data to train generalized AI/ML models unrelated to fulfilling your requests in DFlow.

5. Google API Services User Data Policy — Limited Use

DFlow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide or improve user-facing features that are prominent in the Service (Google sign-in and YouTube publishing/scheduling).
• We do not transfer Google user data to others except as necessary to provide/improve those features, for security, to comply with law, or as part of a merger/acquisition with notice where required — and never for serving ads.
• Human access to Google user data is limited to cases where you permit it for support, where needed for security/compliance investigations, or where required by law, with appropriate controls.

6. Sharing

• Google / YouTube / other platforms you Connect: content and tokens are sent to those services when you authorize or publish.
• Infrastructure processors: hosting, PostgreSQL, Redis/queues, object storage (e.g. Cloudflare R2) acting on our instructions.
• AI providers: if you use AI assist, text you submit may be sent to the configured provider (e.g. Google Gemini) to generate suggestions.
• Legal: when required by law or to protect rights and safety.

We do not sell or rent personal information for third-party marketing.

7. Storage and security

Data is stored on systems we operate for DFlow (including hosting related to dsitesai.com). OAuth tokens are encrypted at rest. Public traffic uses HTTPS. Access to production systems is restricted. No method of storage or transmission is 100% secure.

8. Retention and deletion

We keep account, connection, content, and history data while your account is active and as needed to provide the Service.

You can:

• Disconnect a platform in DFlow → Accounts
• Revoke DFlow in Google Account → Third-party access
• Request full account deletion by emailing dedicinfotech@gmail.com from your signed-in Google email

We typically complete deletion or anonymization within 30 days, except limited records we must keep for security, disputes, or legal compliance.

9. Your rights

Depending on your location, you may request access, correction, deletion, restriction, or objection to certain processing, and withdraw OAuth consent by disconnecting/revoking. Contact dedicinfotech@gmail.com.

10. Children

The Service is not directed to children under 16 (or higher age required locally). We do not knowingly collect children’s data.

11. Cookies

We use an essential authentication cookie only. It is not used for third-party advertising.

12. Changes

We may update this policy and will revise the “last updated” date above. Material changes may also be announced in the Service or by email. Continued use after an update means you accept the revised policy.

13. Contact

Dedic Infotech — DFlow Privacy
Tirunelveli, Tamil Nadu, India
Email: dedicinfotech@gmail.com
Web: https://dflow.dsitesai.com
This policy (static): https://dflow.dsitesai.com/privacy.html