Your customer data, looked after.

Yes, we are GDPR compliant. Our policies are available in our privacy policy.

Yes. Dovio has passed CASA Tier 2, the Cloud Application Security Assessment from the App Defense Alliance. It tests the application against the OWASP Application Security Verification Standard, and the results are checked by an authorized lab. Google requires it every year from apps that read Gmail, which Dovio does once you connect your inbox, so we renew it annually.

In the EU. Your database is in Frankfurt, your email and calendar sync runs in Ireland, and the notetaker and AI features run in EU data centers too. The only exceptions are signing in with Google or Microsoft and paying with Stripe. Every provider and its location is on our subprocessors page.

Yes, several, including Neon, Nylas and Vercel. They process your data in their EU data centers, not in the US. Our agreements with them include the EU's standard contractual clauses, which also cover the rare case where a support engineer outside the EU needs access.

Whatever you put into Dovio: your customers, your deals, your notes and your contracts. If you connect your inbox, we don't keep a copy of your email. It's fetched from your mailbox when you open it, and Dovio saves the contacts it finds. If you use the notetaker, we store the transcript and summary of each meeting.

No. Nothing you store in Dovio is used to train AI models, ours or anyone else's. Our AI provider is contractually barred from training on your data and doesn't keep it after answering.

AI models hosted on Google Cloud, reached through Vercel's AI Gateway. They write your meeting summaries, suggested tasks and email drafts, and answer your questions in Ask Dovio. They only see what the task needs, such as the transcript of a meeting or the customer you asked about. Requests are processed in the EU, and nothing is kept once the answer is sent.

The notetaker transcribes the meeting and records no video. It joins the call as a participant marked REC, and on Zoom, Google Meet and Teams it also posts in the chat that the meeting is being recorded. Our provider Recall.ai processes the meeting in Frankfurt and deletes its copy after 7 days. The transcript and summary stay in Dovio, on the customer's page.

Yes. Your data is encrypted while it's stored and while it travels between you and Dovio, so it can't be read by anyone who intercepts it.

We list every one of them, and what each processes, on our subprocessors page. It's updated whenever it changes.

Nothing is deleted when you cancel. Your workspace is locked when your paid period ends, and you can come back any time. Before you go, you can export your records to CSV or Excel. If you'd rather we delete everything, ask us and we'll do it within 30 days.

Yes. You can delete records yourself at any time. To delete your whole workspace, get in touch. Within 30 days we delete everything in it, disconnect every connected inbox and calendar, and remove the meeting data held by our providers.