Privacy Policy

1. Information We Collect

We collect the information required to create accounts, manage workspaces, operate integrations, and process the content that users choose to connect or upload to Oraculo. This may include first name, last name, email address, phone number, profile picture, business context, Telegram username, authentication data, roles, permissions, and workspace invitations.

• Content sent from Telegram, Slack, Google Meet, or files uploaded by the user.
• When Google Calendar is connected: upcoming calendar event metadata needed to detect Meet links and, if enabled, add the Oraculo Meet bot as an attendee.
• When Gmail is connected: limited mailbox data (such as message lists, From/Subject headers, and snippets) used only to generate a read-only daily digest inside Oraculo. Oraculo does not send, delete, or modify Gmail messages.
• Audio, transcriptions, summaries, tasks, decisions, attachments, links, imported messages, and source metadata such as channel, external user, date, thread, or workspace.
• Technical session information, access tokens, IP address, browser user agent, devices registered for web notifications, and error logs.
• Subscription data managed through Stripe, such as customer, checkout session, subscription status, seat quantity, and billing period.

2. How We Use Information

We use information to provide, maintain, and improve Oraculo, including audio transcription, task extraction, file organization, summary generation, semantic search, conversational RAG responses, task boards, reports, activities, permissions, and subscription management.

• Process and convert conversations, meetings, audio, and documents into actionable information.
• Centralize company knowledge and enable search, analysis, audits, and historical tracking.
• Manage workspaces, members, roles, invitations, notifications, and access controls.
• Send operational notices, invitations, product notifications, and relevant service updates.

3. Integrations and External Providers

Oraculo may connect to external services when a user or organization authorizes an integration. These providers process data according to their own policies and the settings enabled by the user.

• Telegram, Slack, and Google Meet to receive or process conversations, files, recordings, and related metadata.
• Google Calendar (calendar.events) to read upcoming Meet events and optionally add the Oraculo bot as an attendee so it can join scheduled calls.
• Gmail (gmail.readonly) to read message metadata and snippets for a daily inbox digest shown in Oraculo. Oraculo does not use Gmail to send or change mail.
• Google OAuth (openid, email, profile) for sign-in or account linking when the user chooses Continue with Google.
• OpenAI or other artificial intelligence services for transcription, extraction, classification, embeddings, summary generation, and responses.
• Firebase Cloud Messaging to enable web notifications when the user allows them.
• Stripe for checkout, billing portal, customers, subscriptions, and payment events.

4. Disclosure to Third Parties

DSPro does not sell users' personal information. Data may be shared only when necessary to operate Oraculo, comply with legal obligations, protect the security of the service, or execute authorized integrations and providers.

• With members of the same workspace according to configured roles and permissions.
• With technology providers required for authentication, infrastructure, artificial intelligence, notifications, integrations, or billing.
• With competent authorities when a legal obligation applies.
• Through public links voluntarily created by authorized users to share summaries, audio, or tasks outside the application.

5. Information Security

Oraculo applies administrative, technical, and access controls to protect information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. Access to internal features is limited through authentication, roles, permissions, and workspace membership.

6. Data Retention

Data is retained for as long as necessary to fulfill the purposes described in this policy, maintain workspace operational history, meet legal obligations, resolve incidents, audit changes, and support service continuity. When data is no longer needed, it may be deleted, anonymized, or retained only when there is a legitimate basis to do so.

7. User Rights

Users may request access, correction, update, deletion, or objection regarding their personal data, as well as review of information associated with their account or workspace, through DSPro's or Oraculo's official contact channels. Some requests may require identity validation or authorization from the workspace administrator.

8. Changes to This Policy

DSPro may update this policy to reflect legal, technical, or business changes. Updates will be published in this section and will take effect upon publication, unless a different effective date is indicated.

9. Applicable Law

This policy is governed by the laws of the Republic of Costa Rica, without prejudice to other data protection regulations that may apply depending on the location of the user, the organization, or integrated providers.