Privacy Policy

Effective date: April 27, 2026

DianBase ("we", "us", "our") provides software to help organizations process electronic invoicing workflows. This policy explains how we collect, use, and protect information, including Google account data when users connect Gmail or Google Drive.

1. Data we process

• Account and organization data needed to provide the service.
• Gmail data only after explicit user authorization, limited to DIAN-related workflows.
• Google Drive metadata and files needed for configured invoice storage workflows.
• Operational logs and metadata needed for security, reliability, and support.

2. Google user data and scopes

DianBase requests https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/drive.file.

We do not send, delete, modify, or move user emails. Gmail access is read-only.

3. How we use data

• Identify and process DIAN-related messages needed for invoice operations.
• Store and retrieve invoice artifacts in user-configured Drive destinations.
• Maintain system integrity, auditability, and troubleshooting.

4. Sharing and disclosure

We do not sell personal data. We only share data with subprocessors required to run the service (for example, cloud hosting and database providers) under contractual safeguards, or when required by law.

5. Data retention and deletion

We retain data only as long as needed for service operation, legal obligations, and security. Users may request disconnection of integrations and deletion of related data, subject to legal retention requirements.

6. Security

We apply technical and organizational safeguards, including encryption for sensitive tokens and controlled access to production systems.

7. Your choices

• You can revoke DianBase access at any time from your Google Account permissions.
• You can request support for account or integration data actions.

8. Contact

For privacy requests, contact: privacy@dianbase.com