Privacy Policy

Information we collect

We collect account information such as your name, email address, authentication method, profile image if provided, session metadata, and security logs. When you connect Stripe, we process the Stripe account details and failed-payment information needed to detect recoverable payment failures, send recovery messages, and show recovery analytics.

We may also collect product usage information, browser and device metadata, support messages, email delivery events, and billing or subscription records if Dunlo introduces paid plans.

Google user data

If you sign in with Google, Dunlo uses Google OAuth to access the basic profile information Google returns for authentication: your email address, name, profile picture, and Google account identifier. We use this information only to create or sign in to your Dunlo account, maintain your session, prevent abuse, and show your account identity inside the product.

Dunlo does not request access to Gmail, Google Drive, Google Calendar, or other Google product data. We do not sell Google user data, use it for advertising, or transfer it except to service providers that help us operate authentication, hosting, security, analytics, or support under appropriate confidentiality obligations.

How we use data

We use data to provide the Dunlo service, authenticate users, connect Stripe accounts, identify failed payments, send recovery emails, track recovery outcomes, improve reliability, protect the service, respond to support requests, and comply with legal obligations.

Sharing and processors

We share data only as needed to run Dunlo, such as with hosting, database, authentication, analytics, email delivery, payment, and support providers. We may disclose information if required by law, to protect Dunlo or users, or as part of a merger, acquisition, or similar business transaction.

Cookies and security

Dunlo uses cookies and similar technologies to keep users signed in, secure sessions, remember authentication state, and understand product usage. We use technical, organizational, and access controls designed to protect data, including encryption for sensitive connected-account secrets.

Retention and deletion

We keep data for as long as needed to provide Dunlo, maintain security, resolve disputes, comply with legal obligations, and support legitimate business records. You can request deletion of your account or personal information by contacting us. Some data may be retained where required by law or for security and audit purposes.

Contact

For privacy questions, data requests, or account deletion, contact us at hello@dunlo.io.